September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,313
Critical
1,226
High
4,359
Medium
4,108
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-102327 Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0... |
high | 7.5 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-69313 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack... |
high | 7.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69325 Heap-based buffer overflow in Microsoft JScript allows an unauthorized attacker... |
high | 8.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69329 Out-of-bounds read in BranchCache allows an unauthorized attacker to deny servic... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69336 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack... |
high | 7.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69338 Use after free in Remote Desktop Gateway Service allows an authorized attacker t... |
high | 7.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69355 External control of file name or path in Microsoft Exchange Server allows an aut... |
high | 8.8 | — | Microsoft / exchange server | 2026-09-08 | 2026-09-30 |
| CVE-2026-69358 Use of uninitialized resource in Remote Desktop Client allows an authorized atta... |
high | 7.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-100315 A vulnerability was detected in mathurvishal CloudClassroom-PHP-Project up to 5d... |
high | 7.3 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-100585 OpenClaw (npm package `openclaw`) before 2026.7.1 fails to enforce the owner-onl... |
high | 8.0 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-100589 OpenClaw versions before 2026.7.1 contain a sandbox bypass vulnerability in the... |
high | 8.3 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-100597 OpenClaw (npm package 'openclaw') before 2026.7.1 is vulnerable to a time-of-che... |
high | 7.8 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-100552 OpenClaw (npm package 'openclaw') before 2026.8.1 does not correctly enforce per... |
high | 8.8 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-100560 OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability... |
high | 7.5 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-88885 Renovate before 44.14.7 contains a command injection vulnerability in the gomod... |
high | 7.0 | — | — | 2026-09-10 | 2026-09-29 |
| CVE-2026-88886 Renovate is a dependency update automation tool. |
high | 7.8 | — | — | 2026-09-10 | 2026-09-29 |
| CVE-2026-88887 Renovate is a dependency update automation tool. |
high | 8.6 | — | — | 2026-09-10 | 2026-09-29 |
| CVE-2026-88888 Renovate before 44.14.7 contains a command injection vulnerability in the Mix ma... |
high | 7.0 | — | — | 2026-09-10 | 2026-09-29 |
| CVE-2026-88889 Renovate before 44.14.7 contains a command injection vulnerability in the Maven... |
high | 7.8 | — | — | 2026-09-10 | 2026-09-29 |
| CVE-2026-88880 Renovate before 44.11.3 fails to validate Link header destinations when followin... |
high | 8.6 | — | — | 2026-09-10 | 2026-09-29 |
| CVE-2026-88881 Renovate, a dependency update tool, follows pagination links supplied by the Git... |
high | 8.6 | — | — | 2026-09-10 | 2026-09-29 |
| CVE-2026-88882 Renovate is a dependency update automation tool. |
high | 8.6 | — | — | 2026-09-10 | 2026-09-29 |
| CVE-2026-88883 Renovate is an automated dependency update tool. |
high | 7.7 | — | — | 2026-09-10 | 2026-09-29 |
| CVE-2026-96274 In Baicells Nova 430H, an unauthenticated device within radio range can send a m... |
high | 7.4 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-94204 The central cloud storage backend for the entire dashcam platform is misconfigur... |
high | 7.5 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-69522 Heap-based buffer overflow in Visual Studio allows an unauthorized attacker to e... |
high | 8.8 | — | — | 2026-09-08 | 2026-09-29 |
| CVE-2026-100296 In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUs... |
high | 8.1 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-100298 In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, two user‑information endpoin... |
high | 8.8 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-100292 In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can... |
high | 8.8 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-100293 In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud upd... |
high | 8.8 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-100294 In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcode... |
high | 7.5 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-12267 ManageEngine DDI Central versions below 6201 are vulnerable to Command injection... |
high | 7.2 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-12268 ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell comman... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-12269 Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived config... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-12264 Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitra... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-12265 Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insuffi... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-76718 A potential security vulnerability in HPE OneView can be exploited to allow remo... |
high | 8.2 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-76719 A security vulnerability in HPE OneView may be exploited remotely to perform ses... |
high | 8.2 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-94445 A malicious txtar could escape the intended execution context and force arbitrar... |
high | 8.8 | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-102437 OS Command Injection in internal/gitcmd (git diff filter.clean/smudge invocation... |
high | 7.8 | — | — | 2026-09-29 | 2026-09-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.