September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,291
Critical
1,223
High
4,345
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-17631 IBM Langflow OSS 1.0.0 through 1.10.2 could allow a remote authenticated attacke... |
medium | 6.5 | — | Langflow / langflow | 2026-09-04 | 2026-09-09 |
| CVE-2026-19649 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.... |
medium | 5.5 | — | Ibm / app connect enterprise | 2026-09-04 | 2026-09-09 |
| CVE-2026-16180 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.... |
medium | 5.7 | — | Ibm / app connect enterprise | 2026-09-04 | 2026-09-09 |
| CVE-2026-17274 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypa... |
medium | 5.4 | — | Ibm / i | 2026-09-04 | 2026-09-09 |
| CVE-2026-86256 wger before 2.6 (affected versions <= 2.5.0) contains an open redirect vulnerabi... |
medium | 5.4 | — | — | 2026-09-06 | 2026-09-09 |
| CVE-2026-86251 h3 versions before 1.15.9 contain a path traversal vulnerability in the serveSta... |
medium | 5.9 | — | — | 2026-09-06 | 2026-09-09 |
| CVE-2026-86170 A weakness has been identified in DefaultFuction CRM 1.0.0. |
medium | 6.3 | — | — | 2026-09-06 | 2026-09-09 |
| CVE-2026-17440 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.... |
medium | 5.5 | — | Ibm / app connect enterprise | 2026-09-04 | 2026-09-09 |
| CVE-2026-79904 Photoshop Mobile is affected by an Improper Limitation of a Pathname to a Restri... |
medium | 5.0 | — | Adobe / photoshop mobile | 2026-09-08 | 2026-09-09 |
| CVE-2026-86735 snipe-it versions before 8.7.0 contain a server-side request forgery vulnerabili... |
medium | 5.0 | — | Snipeitapp / snipe-it | 2026-09-08 | 2026-09-09 |
| CVE-2026-77847 Tycon Systems TPDIN-Monitor-WEB3 versions 2.2.9 and prior are vulnerable to a us... |
medium | 6.5 | — | — | 2026-09-04 | 2026-09-09 |
| CVE-2026-83534 PostgreSQL Anonymizer contains a vulnerability in the anon.anonymize_database_pa... |
medium | 6.4 | — | — | 2026-09-06 | 2026-09-09 |
| CVE-2026-19634 PostgreSQL Anonymizer contains a SQL injection vulnerability in two import funct... |
medium | 6.4 | — | — | 2026-09-06 | 2026-09-09 |
| CVE-2026-20504 In Modem, there is a possible system crash due to a missing bounds check. |
medium | 5.3 | — | Mediatek / mt2735 firmware | 2026-09-07 | 2026-09-09 |
| CVE-2026-20503 In Modem, there is a possible system crash due to a missing bounds check. |
medium | 5.3 | — | Mediatek / mt2716 firmware | 2026-09-07 | 2026-09-09 |
| CVE-2026-20500 In Modem, there is a possible system crash due to improper input validation. |
medium | 5.5 | — | Mediatek / mt2716 firmware | 2026-09-07 | 2026-09-09 |
| CVE-2026-19299 IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacke... |
medium | 6.5 | — | Langflow / langflow | 2026-09-04 | 2026-09-08 |
| CVE-2026-19301 IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacke... |
medium | 6.5 | — | Langflow / langflow | 2026-09-04 | 2026-09-08 |
| CVE-2026-19302 IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacke... |
medium | 6.5 | — | Langflow / langflow | 2026-09-04 | 2026-09-08 |
| CVE-2026-8447 IBM Langflow OSS 1.0.0 through 1.11.2 suffer from a stored cross-site scripting... |
medium | 6.1 | — | Langflow / langflow | 2026-09-04 | 2026-09-08 |
| CVE-2026-9186 IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenticated attackers to b... |
medium | 6.5 | — | Langflow / langflow | 2026-09-04 | 2026-09-08 |
| CVE-2026-18567 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain in... |
medium | 4.7 | — | Ibm / db2 mirror for i | 2026-09-04 | 2026-09-08 |
| CVE-2026-18858 IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain informat... |
medium | 5.5 | — | Ibm / i | 2026-09-04 | 2026-09-08 |
| CVE-2026-18887 IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to obtain sen... |
medium | 6.5 | — | Ibm / i | 2026-09-04 | 2026-09-08 |
| CVE-2026-53756 Emlog is an open source website building system. |
medium | 4.9 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-55513 nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. |
medium | 5.4 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-52763 YesWiki is a wiki system written in PHP. |
medium | 6.5 | — | — | 2026-09-05 | 2026-09-08 |
| CVE-2026-52773 YesWiki is a wiki system written in PHP. |
medium | 6.1 | — | — | 2026-09-05 | 2026-09-08 |
| CVE-2026-52774 YesWiki is a wiki system written in PHP. |
medium | 6.1 | — | — | 2026-09-05 | 2026-09-08 |
| CVE-2026-78522 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to d... |
medium | 6.5 | — | Microsoft / 365 apps | 2026-09-08 | 2026-09-08 |
| CVE-2026-80079 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to d... |
medium | 6.5 | — | Microsoft / 365 apps | 2026-09-08 | 2026-09-08 |
| CVE-2026-83949 Buffer over-read in Microsoft Office Word allows an unauthorized attacker to dis... |
medium | 5.5 | — | Microsoft / 365 apps | 2026-09-08 | 2026-09-08 |
| CVE-2026-83951 Buffer over-read in Microsoft Office Word allows an unauthorized attacker to dis... |
medium | 5.5 | — | Microsoft / 365 apps | 2026-09-08 | 2026-09-08 |
| CVE-2026-84191 LibreNMS before 26.5.0 contains stored cross-site scripting vulnerabilities in V... |
medium | 6.1 | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-84204 GROWI contains an access control vulnerability in the GET /_api/v3/attachment/:i... |
medium | 6.5 | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-84205 GROWI contains an access control vulnerability in the GET /_api/v3/revisions/:id... |
medium | 6.5 | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-84207 Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSo... |
medium | 5.4 | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-73524 Cypht before 2.12.2 contains a cross-site scripting vulnerability in the contact... |
medium | 6.1 | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-84477 AVideo Live_schedule::setTitle() and setDescription() store POST input without s... |
medium | 5.4 | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-84483 WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass... |
medium | 5.3 | — | — | 2026-09-01 | 2026-09-08 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.