September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,364
Critical
1,230
High
4,374
Medium
4,126
Low
462
Severity not reported
1,172
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-87269 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.8 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87270 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.8 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87271 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.8 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87272 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.8 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87273 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 8.6 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87276 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.5 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87277 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.5 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-71047 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware... |
high | 8.8 | — | Oracle / identity manager | 2026-09-15 | 2026-09-22 |
| CVE-2026-73942 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware... |
high | 8.8 | — | Oracle / identity manager | 2026-09-15 | 2026-09-22 |
| CVE-2026-73943 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware... |
high | 7.6 | — | Oracle / identity manager | 2026-09-15 | 2026-09-22 |
| CVE-2026-73949 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
high | 8.8 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-22 |
| CVE-2026-73951 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
high | 8.1 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-22 |
| CVE-2026-83004 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 7.2 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-87141 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.7 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87137 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.6 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87136 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.5 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87144 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.6 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87142 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.1 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87146 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.1 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87135 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.1 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87134 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.7 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87133 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.6 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87132 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.6 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87131 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.6 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87145 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.3 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87147 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.7 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87143 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.4 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87148 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.5 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-82992 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 7.8 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-22 |
| CVE-2026-83003 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.5 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83005 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.8 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83007 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.5 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83008 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.8 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83009 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.8 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83010 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.1 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83012 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 7.7 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83013 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.8 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83022 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 7.9 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83023 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 8.6 | — | Oracle / identity manager connector | 2026-09-15 | 2026-09-22 |
| CVE-2026-83024 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 7.8 | — | Oracle / identity manager connector | 2026-09-15 | 2026-09-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.