September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,291
Critical
1,223
High
4,345
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-10148 The Booking for Appointments and Events Calendar plugin for WordPress is vulnera... |
medium | 6.4 | — | — | 2026-09-12 | 2026-09-14 |
| CVE-2026-86087 IBM Db2 11.5.0 through 11.5.9, and 12.1.0 through 12.1.5 could allow an authenti... |
medium | 4.3 | — | Ibm / db2 | 2026-09-10 | 2026-09-14 |
| CVE-2026-78126 strongSwan 4.1.10 through 6.0.7 allows a NULL pointer dereference in the eap-aka... |
medium | 5.9 | — | Strongswan / strongswan | 2026-09-11 | 2026-09-14 |
| CVE-2026-78129 strongSwan 4.6.2 through 6.0.7 has an infinite loop in PKCS#5 decryption. |
medium | 5.9 | — | Strongswan / strongswan | 2026-09-11 | 2026-09-14 |
| CVE-2026-88050 Tesseract is an open source OCR engine. |
medium | 5.5 | — | Tesseract-ocr / tesseract ocr | 2026-09-10 | 2026-09-14 |
| CVE-2026-88049 Tesseract is an open source OCR engine. |
medium | 5.5 | — | Tesseract-ocr / tesseract ocr | 2026-09-10 | 2026-09-14 |
| CVE-2026-88012 Traefik is an open source HTTP reverse proxy and load balancer. |
medium | 5.3 | — | Traefik / traefik | 2026-09-10 | 2026-09-14 |
| CVE-2026-88002 Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI plat... |
medium | 6.5 | — | Openwebui / open webui | 2026-09-09 | 2026-09-14 |
| CVE-2026-69425 Improper link resolution before file access ('link following') in Windows NTFS a... |
medium | 4.7 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-14 |
| CVE-2026-88001 Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI plat... |
medium | 5.0 | — | Openwebui / open webui | 2026-09-09 | 2026-09-14 |
| CVE-2026-69591 Out-of-bounds read in Windows NTFS allows an authorized attacker to disclose inf... |
medium | 5.7 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-14 |
| CVE-2026-87926 A flaw has been found in Rizwan17 inventory-management-system up to bfe78a330d01... |
medium | 4.3 | — | — | 2026-09-10 | 2026-09-14 |
| CVE-2026-85198 The MPG – Multiple Page Generator, Bulk Landing Pages & Programmatic SEO plugin... |
medium | 6.5 | — | — | 2026-09-12 | 2026-09-14 |
| CVE-2026-81823 The vulnerability, if exploited, could allow an unauthenticated miscreant to per... |
medium | 5.3 | — | — | 2026-09-08 | 2026-09-14 |
| CVE-2026-17585 The Royal Addons for Elementor – Addons and Templates Kit for Elementor plugin f... |
medium | 5.3 | — | — | 2026-09-12 | 2026-09-14 |
| CVE-2026-88000 Open WebUI is an extensible, feature-rich, and user-friendly self-hosted AI plat... |
medium | 6.5 | — | Openwebui / open webui | 2026-09-09 | 2026-09-14 |
| CVE-2026-82076 An integer overflow in the query planning component of MongoDB Server can allow... |
medium | 6.5 | — | Mongodb / mongodb | 2026-09-08 | 2026-09-14 |
| CVE-2026-84828 A flaw was found in PCS (Pacemaker Configuration System). |
medium | 6.5 | — | — | 2026-09-10 | 2026-09-14 |
| CVE-2026-71802 A stored Cross-Site Scripting (XSS) vulnerability exists in the announcement pre... |
medium | 5.4 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-71807 In RuoYi-Cloud-Plus <= 2.6.2 in the ruoyi-workflow module, multiple core task AP... |
medium | 4.3 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-11355 The DT LMS – elearning, WordPress LMS plugin for WordPress is vulnerable to unau... |
medium | 5.3 | — | — | 2026-09-12 | 2026-09-14 |
| CVE-2026-87736 An issue was discovered in the mirage-crypto-ec package before 2.3.0 for OCaml. |
medium | 4.3 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-61907 An issue was discovered in Cyrus IMAP before 3.12.4. |
medium | 4.3 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-57825 In the opam package before 2.5.2 for OCaml, the sandbox protection mechanism can... |
medium | 5.7 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-79515 An out-of-bounds read in the stbtt_GetGlyphShape component of nothings stb commi... |
medium | 4.3 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-78971 In Halo <= 2.25.4, the plugin management feature allows users to install/update... |
medium | 4.6 | — | — | 2026-09-08 | 2026-09-14 |
| CVE-2026-79387 SQL injection vulnerability in PbootCMS versions 3.2.0 through 3.2.5 allows an a... |
medium | 4.3 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-49883 In checkReadPermission of PermissionsManager.java, there is a possible way to mo... |
medium | 5.5 | — | Google / android | 2026-09-08 | 2026-09-14 |
| CVE-2026-87872 A flaw was found in the OCAPI modules (ocapi_command, ocapi_info) of the
communi... |
medium | 6.8 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-87820 CyberPanel versions 2.4.3 through 2.4.5 expose unauthenticated AI Scanner debugg... |
medium | 5.3 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-85593 phpMyFAQ versions before 4.1.8 contain a stored cross-site scripting vulnerabili... |
medium | 5.4 | — | — | 2026-09-04 | 2026-09-14 |
| CVE-2026-85389 Worklenz before 3.0.0 fails to verify task ownership by organization when resolv... |
medium | 6.5 | — | — | 2026-09-03 | 2026-09-14 |
| CVE-2026-82525 Exterro FTK Imager before 8.3 contains an XML external entity (XXE) injection vu... |
medium | 5.5 | — | — | 2026-09-03 | 2026-09-14 |
| CVE-2026-79971 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.3 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-14 |
| CVE-2026-79730 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.6 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-14 |
| CVE-2026-79728 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 6.5 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-14 |
| CVE-2026-79968 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.9 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-14 |
| CVE-2026-79969 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.9 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-14 |
| CVE-2026-79731 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 4.4 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-14 |
| CVE-2026-79946 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.3 | — | Dell / secure connect gateway | 2026-09-09 | 2026-09-14 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.