September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,364
Critical
1,230
High
4,374
Medium
4,126
Low
462
Severity not reported
1,172
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-80901 In the Linux kernel, the following vulnerability has been resolved:
ipvs: fix t... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80890 In the Linux kernel, the following vulnerability has been resolved:
sctp: rejec... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80891 In the Linux kernel, the following vulnerability has been resolved:
KVM: s390:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80892 In the Linux kernel, the following vulnerability has been resolved:
erofs: cap... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80893 In the Linux kernel, the following vulnerability has been resolved:
mm/hugetlb:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80894 In the Linux kernel, the following vulnerability has been resolved:
iommufd: Fi... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80895 In the Linux kernel, the following vulnerability has been resolved:
mshv: Order... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80896 In the Linux kernel, the following vulnerability has been resolved:
mshv: Fix r... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80887 In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80889 In the Linux kernel, the following vulnerability has been resolved:
can: isotp:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-84832 SEPPmail Secure Email Gateway before 15.0.6 deserializes attacker-controlled dat... |
not reported | — | — | — | 2026-09-03 | 2026-09-04 |
| CVE-2026-80885 In the Linux kernel, the following vulnerability has been resolved:
afs: Fix un... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80886 In the Linux kernel, the following vulnerability has been resolved:
serial: msm... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80879 In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80880 In the Linux kernel, the following vulnerability has been resolved:
IB/mlx5: Pr... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80881 In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80882 In the Linux kernel, the following vulnerability has been resolved:
crypto: teg... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80871 In the Linux kernel, the following vulnerability has been resolved:
crypto: xil... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80872 In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda/t... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80873 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80874 In the Linux kernel, the following vulnerability has been resolved:
arm64: dts:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80875 In the Linux kernel, the following vulnerability has been resolved:
ipvs: use p... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80876 In the Linux kernel, the following vulnerability has been resolved:
ring-buffer... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80877 In the Linux kernel, the following vulnerability has been resolved:
afs: Fix vl... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80865 In the Linux kernel, the following vulnerability has been resolved:
bpf: Add mi... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80867 In the Linux kernel, the following vulnerability has been resolved:
alpha/PCI:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80868 In the Linux kernel, the following vulnerability has been resolved:
ntfs3: Allo... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80869 In the Linux kernel, the following vulnerability has been resolved:
ntfs: bound... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80870 In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80820 In the Linux kernel, the following vulnerability has been resolved:
xfs: don't... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80784 In the Linux kernel, the following vulnerability has been resolved:
mptcp: pm:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80776 In the Linux kernel, the following vulnerability has been resolved:
futex: Fix... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-84736 In the current development version of Eclipse aeriOS, for which no official rele... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-76174 Unrestricted file upload vulnerability in the CSV file upload functionality of t... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-76175 SQL injection vulnerability in the del_check parameter of the /ocsreports/?funct... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-76176 SQL injection vulnerability in the endpoint /ocsreports/index.php?function=admin... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-76177 Server-Side Request Forgery (SSRF) vulnerability in the /ocsreports/?function=te... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-76178 A stored Cross-Site Scripting (XSS) vulnerability in the notification template f... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-84830 SEPPmail Secure Email Gateway before 15.0.7 contains a command injection vulnera... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-84831 SEPPmail Secure Email Gateway before 15.0.7 creates a fully privileged session b... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.