September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,291
Critical
1,223
High
4,345
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-75661 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-11 |
| CVE-2026-75635 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-11 |
| CVE-2026-19713 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-11 |
| CVE-2026-80135 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.3 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-11 |
| CVE-2026-80170 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 6.5 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-11 |
| CVE-2026-78488 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 6.5 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-11 |
| CVE-2026-80056 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.5 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-11 |
| CVE-2026-80057 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.5 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-11 |
| CVE-2026-8615 The Reviso Exporter for WooCommerce plugin for WordPress is vulnerable to unauth... |
medium | 4.3 | — | — | 2026-09-09 | 2026-09-11 |
| CVE-2026-89265 MoguBlog through 6.2 contains an authorization bypass vulnerability in the POST... |
medium | 4.3 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-89244 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a r... |
medium | 6.1 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-89239 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a r... |
medium | 6.1 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-87923 A weakness has been identified in Rizwan17 inventory-management-system up to bfe... |
medium | 4.3 | — | — | 2026-09-09 | 2026-09-11 |
| CVE-2026-87870 The Ninja Forms - Scheduled Exports plugin for WordPress is vulnerable to Stored... |
medium | 6.4 | — | — | 2026-09-10 | 2026-09-11 |
| CVE-2026-86804 A vulnerability was identified in seakee CPA-Manager-Plus up to 1.11.10. |
medium | 5.3 | — | — | 2026-09-08 | 2026-09-11 |
| CVE-2026-86672 A vulnerability has been found in ningzichun Student Management System up to 987... |
medium | 5.3 | — | — | 2026-09-08 | 2026-09-11 |
| CVE-2026-86674 A vulnerability was found in ningzichun Student Management System up to 98760f57... |
medium | 6.3 | — | — | 2026-09-08 | 2026-09-11 |
| CVE-2026-86519 A vulnerability was found in code-projects Student Crud Operation 1.0. |
medium | 5.3 | — | — | 2026-09-08 | 2026-09-11 |
| CVE-2026-86668 A security vulnerability has been detected in aircheng-org iWebShop-5 up to 5.15... |
medium | 4.3 | — | — | 2026-09-08 | 2026-09-11 |
| CVE-2026-86310 A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. |
medium | 6.3 | — | — | 2026-09-07 | 2026-09-11 |
| CVE-2026-86289 A vulnerability was found in Ollama up to 0.31.1. |
medium | 4.3 | — | — | 2026-09-07 | 2026-09-11 |
| CVE-2026-86294 A vulnerability has been found in SourceCodester Simple Traffic Offense System 1... |
medium | 4.3 | — | — | 2026-09-07 | 2026-09-11 |
| CVE-2026-86281 A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning... |
medium | 4.3 | — | — | 2026-09-07 | 2026-09-11 |
| CVE-2026-86236 A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. |
medium | 6.3 | — | — | 2026-09-07 | 2026-09-11 |
| CVE-2026-86212 A vulnerability has been found in Open5GS 2.7.7/2.8.0. |
medium | 4.3 | — | — | 2026-09-06 | 2026-09-11 |
| CVE-2026-86217 A vulnerability was detected in code-projects Hotel and Tourism Reservation in P... |
medium | 5.3 | — | — | 2026-09-06 | 2026-09-11 |
| CVE-2026-86183 A vulnerability was identified in diem-project diem up to 5.1.3. |
medium | 5.3 | — | — | 2026-09-06 | 2026-09-11 |
| CVE-2026-86172 A vulnerability was detected in DefaultFuction CRM 1.0.0. |
medium | 6.3 | — | — | 2026-09-06 | 2026-09-11 |
| CVE-2026-85703 A flaw has been found in ramon-victor freegpt-webui up to 098db3dfeb41555c2ca926... |
medium | 6.5 | — | — | 2026-09-04 | 2026-09-11 |
| CVE-2026-85645 The Form Maker by 10Web – Mobile-Friendly Drag & Drop Contact Form Builder plugi... |
medium | 6.1 | — | — | 2026-09-10 | 2026-09-11 |
| CVE-2026-85383 A flaw has been found in itsourcecode Sales and Inventory System 1.0. |
medium | 6.3 | — | — | 2026-09-04 | 2026-09-11 |
| CVE-2026-81275 Subscriber Arbitrary File Download in Youzify <= 1.3.7 versions. |
medium | 6.5 | — | — | 2026-09-10 | 2026-09-11 |
| CVE-2026-78172 The Themify – WooCommerce Product Filter plugin for WordPress is vulnerable to R... |
medium | 6.1 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-75651 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-11 |
| CVE-2026-75670 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-11 |
| CVE-2026-75692 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-11 |
| CVE-2026-75700 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-11 |
| CVE-2026-75711 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-11 |
| CVE-2026-77187 The My Calendar – Accessible Event Manager plugin for WordPress is vulnerable to... |
medium | 6.4 | — | — | 2026-09-09 | 2026-09-11 |
| CVE-2026-71440 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-11 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.