September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,321
Critical
1,226
High
4,361
Medium
4,108
Low
460
Severity not reported
1,166
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-101269 The mechanism binding API-uploaded files to the uploader's authentication method... |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-101270 Malicious HTML content could be injected into the help texts of various fields w... |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-101271 OAuth credentials (access tokens) are valid for the entirety of their lifetime,... |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-101169 In affected versions of Octopus Server, an authenticated user with permissions t... |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-84463 Zammad is a web based open source helpdesk/customer support system. |
not reported | — | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-56734 Zammad is a web based open source helpdesk/customer support system. |
not reported | — | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-63205 Zammad is a web based open source helpdesk/customer support system. |
not reported | — | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-63216 Zammad is a web based open source helpdesk/customer support system. |
not reported | — | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-56725 Zammad is a web based open source helpdesk/customer support system. |
not reported | — | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-56730 Zammad is a web based open source helpdesk/customer support system. |
not reported | — | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-85417 Incomplete property masking in the SANnav logging subsystem permits SNMP authent... |
not reported | — | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-84465 Zammad is a web based open source helpdesk/customer support system. |
not reported | — | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-63006 Zammad is a web based open source helpdesk/customer support system. |
not reported | — | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-63207 Zammad is a web based open source helpdesk/customer support system. |
not reported | — | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-84460 Zammad is a web based open source helpdesk/customer support system. |
not reported | — | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-102726 Unbounded PPP IPCP Option Parsing Causes a Worker Stall and Out-of-bounds Read |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102727 FTP Passive Data Connection Not Bound to the Authenticated Control Peer |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102729 `gx_binres_theme_load()` sizes its theme buffer for the theme it was asked for,... |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102730 Mounting an attacker-controlled NAND flash image (`lx_nand_flash_open()`) trigge... |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102722 In the IPv4 PASV path, the FTP Client accepts whatever address was sent in the s... |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102723 NULL Pointer Dereference on MSRP Attribute Table Exhaustion |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102724 NULL Pointer Dereference When Evicting the Sole MSRP Attribute |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102725 Out-of-bounds Read from Unvalidated MSRP Attribute List Length |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102719 Predictable DTLS HelloVerifyRequest Cookie in NetX Secure |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102720 A DHCP server, or anyone on the LAN who answers a DISCOVER first, can make the c... |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102721 A TFTP server that answers with a short ERROR packet makes the client read up to... |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102713 The TFTP server accepts a DATA datagram of any size. |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102714 `_nx_icmpv6_validate_options()` scans the option area with `while (length > 2)`... |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102715 Any host on the LAN can send two mDNS records and make the responder write past... |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102716 An unauthenticated client can drain the RTSP server's packet pool with a couple... |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102718 hey,
`_nx_snmp_utility_object_id_get` in the NetX Duo SNMP addon does not valid... |
not reported | — | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-53459 Bambuddy is a self-hosted print archive and management system for Bambu Lab 3D p... |
not reported | — | — | — | 2026-09-15 | 2026-09-29 |
| CVE-2026-63131 OpenBao is an open source identity-based secrets management system. |
not reported | — | — | — | 2026-09-23 | 2026-09-29 |
| CVE-2026-63132 OpenBao is an open source identity-based secrets management system. |
not reported | — | — | — | 2026-09-23 | 2026-09-29 |
| CVE-2026-77285 OpenBao is an open source identity-based secrets management system. |
not reported | — | — | — | 2026-09-23 | 2026-09-29 |
| CVE-2026-55214 GLPI is a free asset and IT management software package. |
not reported | — | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-71483 Horilla is an HR and CRM software. |
not reported | — | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-49469 GLPI is a free asset and IT management software package. |
not reported | — | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-53610 GLPI is a free asset and IT management software package. |
not reported | — | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-89136 When using RPK (Raw Public Key), the client side of a TLS 1.2, 1.3 and DTLS 1.2... |
not reported | — | — | — | 2026-09-27 | 2026-09-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.