September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,321
Critical
1,226
High
4,361
Medium
4,108
Low
460
Severity not reported
1,166
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-65651 temporalio/sqlparser accepts SQL containing deeply nested unary expressions and... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-65652 github.com/temporalio/tchannel-go did not validate the one-byte checksum-type fi... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-65653 github.com/temporalio/tchannel-go did not reject TChannel call fragments contain... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-65654 github.com/temporalio/ringpop-go enforces configured LabelOptions limits when an... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-87858 Temporal Server decided whether a Workflow completion callback was internal by r... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-89139 Temporal Server compiles a Worker Controller Instance module into its Worker Ser... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-88807 A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be u... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-11388 Double Free vulnerability in RTI Connext Professional (Core Libraries) allows Fi... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-11389 Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-18457 Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libra... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-18458 Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-18459 Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries)... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-18460 Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-18461 Use of Externally-Controlled Format String vulnerability in RTI Connext Professi... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-18462 Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Con... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-18626 Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) al... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-88854 Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joom... |
not reported | — | — | — | 2026-09-20 | 2026-09-22 |
| CVE-2026-88855 Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in Ord... |
not reported | — | — | — | 2026-09-20 | 2026-09-22 |
| CVE-2026-88856 Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Executio... |
not reported | — | — | — | 2026-09-20 | 2026-09-22 |
| CVE-2026-88857 Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Executio... |
not reported | — | — | — | 2026-09-20 | 2026-09-22 |
| CVE-2026-86698 Insufficient Session Expiration vulnerability in OAuth token issuance in hexpm h... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-77875 The application protects access through its calculator-style vault passcode, but... |
not reported | — | — | — | 2026-09-19 | 2026-09-22 |
| CVE-2026-90882 The open-vsx.org deployment returned Access-Control-Allow-Origin reflecting the... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-82672 Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')... |
not reported | — | — | — | 2026-09-19 | 2026-09-22 |
| CVE-2026-89422 Key Exchange without Entity Authentication vulnerability in Erlang/OTP ssl allow... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-63272 LibreOffice can import WMF graphics, which may be embedded in documents. |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-63273 LibreOffice Draw can import PDF documents. |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-63274 LibreOffice Draw can import PDF documents. |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-63275 LibreOffice can read CFF fonts, which may be embedded in documents. |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-63276 LibreOffice converts CFF fonts to Type 1 when it subsets a font, which happens w... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-63278 URLs could be constructed which expanded environment variable or INI file values... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-63279 LibreOffice can import PICT images, which may be embedded in documents. |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-87119 Authentication Bypass by Capture-replay in ZenHive mpp allows an attacker holdin... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-89420 Improper Validation of Specified Quantity in Input in ZenHive mpp allows a clien... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-76819 Rejected reason: Further research determined the issue results from a dependency... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-95754 In MISP's UsersController login() method, the pre-authentication database query... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-95805 A typo in the MISP ACLComponent access control configuration caused the ACL rule... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-95806 MISP ships with PHP's phar stream wrapper registered in both its web entry point... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-95685 MISP contains an access control flaw in the EventReports functionality. |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-95693 In MISP, the EventReport::uploadPicture method in processed a caller-supplied tm... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.