September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,364
Critical
1,230
High
4,374
Medium
4,126
Low
462
Severity not reported
1,172
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-73717 A command injection vulnerability exists in the web-based management interface o... |
high | 7.5 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73710 Vulnerabilities in an API endpoint of HPE Networking Fabric Composer could allow... |
high | 8.2 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73722 Command injection vulnerabilities in the web-based management interface of HPE N... |
high | 7.2 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73723 A privilege escalation vulnerability exists in the web-based management interfac... |
high | 7.1 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73724 Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric C... |
high | 7.1 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73725 A local privilege-escalation vulnerability has been discovered in HPE Networking... |
high | 7.0 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73704 A command sanitization bypass exists in the API of HPE Networking Fabric Compose... |
high | 8.8 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73705 An arbitrary file write vulnerability in the API of HPE Networking Fabric Compos... |
high | 8.8 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73706 A vulnerability in the API of HPE Networking Fabric Composer could allow an unau... |
high | 8.6 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73707 Privilege escalation vulnerabilities exist in the API of HPE Networking Fabric C... |
high | 8.5 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73708 A business logic vulnerability exists in the API of HPE Networking Fabric Compos... |
high | 8.3 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73718 A vulnerability in the web-based management interface of HPE Networking Fabric C... |
high | 7.4 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73719 An arbitrary file write vulnerability exists in the API of HPE Networking Fabric... |
high | 7.2 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73720 Insecure file operations in the API of HPE Networking Fabric Composer could allo... |
high | 7.2 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73721 Vulnerabilities in the API of HPE Networking Fabric Composer could allow an auth... |
high | 7.2 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73702 A privilege escalation vulnerability exists in the API of HPE Networking Fabric... |
high | 8.8 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73703 A vulnerability in the web-based management interface of HPE Networking Fabric C... |
high | 8.8 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73711 A privilege escalation vulnerability exists in the API endpoint of HPE Networkin... |
high | 8.1 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73713 Local privilege-escalation vulnerabilities have been discovered in HPE Networkin... |
high | 7.8 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73714 A sensitive information disclosure vulnerability exists in the API of HPE Networ... |
high | 7.6 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73715 A vulnerability in the API of HPE Networking Fabric Composer could allow an unau... |
high | 7.5 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73709 A vulnerability in the underlying operating system of HPE Networking Fabric Comp... |
high | 8.3 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-76717 A vulnerability exists in the Analytics and Location Engine (ALE) API that may a... |
medium | 5.3 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-28 |
| CVE-2026-76716 Multiple vulnerabilities exist in the Analytics and Location Engine (ALE) that m... |
medium | 5.3 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-28 |
| CVE-2026-76698 A command injection vulnerability exists in the web-based management interface o... |
medium | 6.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76700 Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an una... |
medium | 5.9 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76699 A buffer overflow vulnerability exists in a system service within the underlying... |
medium | 6.4 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76701 A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateway... |
medium | 5.9 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76702 A vulnerability in the operating system of HPE Networking EdgeConnect SD-WAN Gat... |
medium | 5.8 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76703 A buffer overflow vulnerability exists in the web-based management interface of... |
medium | 5.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76707 A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an una... |
medium | 4.3 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76705 A buffer overflow vulnerability exists in the API endpoint of HPE Networking Edg... |
medium | 5.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76697 A vulnerability in the web-based management interface of HPE Networking EdgeConn... |
medium | 6.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76696 A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an una... |
medium | 6.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76695 Buffer overflow vulnerabilities exist in the underlying operating system of HPE... |
medium | 6.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76694 A privilege escalation vulnerability exists in the command line interface of HPE... |
medium | 6.6 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76704 A vulnerability in the web-based management interface of the EdgeConnect SD-WAN... |
medium | 5.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76706 A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchest... |
medium | 5.3 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-73728 Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Comp... |
medium | 6.5 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-03 |
| CVE-2026-73729 A vulnerability in the underlying operating system of HPE Networking Fabric Comp... |
medium | 6.5 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-03 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.