September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,313
Critical
1,226
High
4,359
Medium
4,108
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-63422 OpenImageIO is a toolset for reading, writing, and manipulating image files of a... |
high | 7.8 | — | Openimageio / openimageio | 2026-09-18 | 2026-09-29 |
| CVE-2026-63638 OpenImageIO is a toolset for reading, writing, and manipulating image files of a... |
high | 8.3 | — | Openimageio / openimageio | 2026-09-18 | 2026-09-29 |
| CVE-2026-67549 OpenImageIO is a toolset for reading, writing, and manipulating image files of a... |
high | 7.6 | — | Openimageio / openimageio | 2026-09-18 | 2026-09-29 |
| CVE-2026-69611 Use after free in Virtual Hard Disk (VHD) Miniport Driver allows an authorized a... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-65129 NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att... |
high | 8.3 | — | Nvidia / infra controller | 2026-09-22 | 2026-09-29 |
| CVE-2026-63493 Snipe-IT is an IT asset/license management system. |
high | 8.1 | — | Snipeitapp / snipe-it | 2026-09-24 | 2026-09-29 |
| CVE-2026-65117 NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att... |
high | 8.8 | — | Nvidia / infra controller | 2026-09-22 | 2026-09-29 |
| CVE-2026-69365 Out-of-bounds read in Microsoft Local Security Authority Server (lsasrv) allows... |
high | 8.0 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-29 |
| CVE-2026-65124 NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att... |
high | 8.1 | — | Nvidia / infra controller | 2026-09-22 | 2026-09-29 |
| CVE-2026-65125 NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att... |
high | 8.8 | — | Nvidia / infra controller | 2026-09-22 | 2026-09-29 |
| CVE-2026-65126 NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att... |
high | 8.8 | — | Nvidia / infra controller | 2026-09-22 | 2026-09-29 |
| CVE-2026-102634 SGLang through 0.5.20 in prefill/decode disaggregation mode fails to validate du... |
high | 7.5 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-65128 NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att... |
high | 8.8 | — | Nvidia / infra controller | 2026-09-22 | 2026-09-29 |
| CVE-2026-88778 Predictable exact value from previous values vulnerability in Citrix NetScaler A... |
high | 7.5 | — | Citrix / netscaler application delivery controller | 2026-09-27 | 2026-09-29 |
| CVE-2026-100557 OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability... |
high | 8.3 | — | — | 2026-09-26 | 2026-09-29 |
| CVE-2026-100561 OpenClaw (npm package 'openclaw') versions >= 2026.3.22 and < 2026.8.1 contain a... |
high | 8.0 | — | — | 2026-09-26 | 2026-09-29 |
| CVE-2026-100570 OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 allow an... |
high | 7.8 | — | — | 2026-09-26 | 2026-09-29 |
| CVE-2026-88022 Improper neutralization of special elements in data query logic in the MongoDB i... |
high | 7.7 | — | Mongodb / laravel mongodb | 2026-09-10 | 2026-09-29 |
| CVE-2026-62368 Snipe-IT is an IT asset/license management system. |
high | 8.4 | — | Snipeitapp / snipe-it | 2026-09-24 | 2026-09-29 |
| CVE-2026-88023 Improper neutralization of special elements in data query logic in the GridFS co... |
high | 8.3 | — | Mongodb / php library | 2026-09-10 | 2026-09-29 |
| CVE-2026-88024 Improper neutralization of special elements in data query logic in the GridFS co... |
high | 8.3 | — | Mongodb / rust driver | 2026-09-10 | 2026-09-29 |
| CVE-2026-56198 Out-of-bounds read in Microsoft Trace Data Helper allows an authorized attacker... |
high | 7.8 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-29 |
| CVE-2026-68828 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-68850 Heap-based buffer overflow in Microsoft Account allows an authorized attacker to... |
high | 7.8 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-29 |
| CVE-2026-88025 Improper neutralization of special elements in data query logic in the GridFS co... |
high | 8.3 | — | Mongodb / c\# driver | 2026-09-10 | 2026-09-29 |
| CVE-2026-88774 Vulnerability in Citrix NetScaler ADC and Citrix NetScaler Gateway. |
high | 7.2 | — | Citrix / netscaler application delivery controller | 2026-09-27 | 2026-09-29 |
| CVE-2026-84990 ntopng is a web-based network traffic monitoring application. |
high | 8.8 | — | — | 2026-09-21 | 2026-09-29 |
| CVE-2026-82379 Authentication Bypass by Capture-replay in Apache Roller 6.1.5 allows an attacke... |
high | 7.7 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-102004 Wind River VxWorks 7 prior to 26.09, specific system call arguments can result i... |
high | 7.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-88027 Improper neutralization of special elements in data query logic in the embedded-... |
high | 8.1 | — | Mongodb / laravel mongodb | 2026-09-10 | 2026-09-29 |
| CVE-2026-88029 Improper neutralization of special elements in data query logic in the GridFS co... |
high | 8.3 | — | Mongodb / python driver | 2026-09-10 | 2026-09-29 |
| CVE-2026-68885 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-88030 Improper neutralization of special elements in data query logic in the GridFS co... |
high | 8.3 | — | Mongodb / ruby driver | 2026-09-10 | 2026-09-29 |
| CVE-2026-88031 Improper neutralization of special elements in data query logic in the GridFS co... |
high | 8.1 | — | Mongodb / go driver | 2026-09-10 | 2026-09-29 |
| CVE-2026-68888 Heap-based buffer overflow in Microsoft Standard XPS allows an authorized attack... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69378 Uncontrolled recursion in Microsoft Exchange Server allows an unauthorized attac... |
high | 7.5 | — | Microsoft / exchange server | 2026-09-08 | 2026-09-29 |
| CVE-2026-65178 NVIDIA NeMo contains a vulnerability in its dataset-loading workflow where a mal... |
high | 7.8 | — | Nvidia / nemo speech | 2026-09-22 | 2026-09-29 |
| CVE-2026-65179 NVIDIA NeMo contains a vulnerability in the TabularTokenizer class where it dese... |
high | 8.8 | — | Nvidia / nemo speech | 2026-09-22 | 2026-09-29 |
| CVE-2026-77242 MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (C... |
high | 7.5 | — | Mcp-atlassian / mcp atlassian | 2026-09-22 | 2026-09-29 |
| CVE-2026-77243 MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (C... |
high | 8.8 | — | Mcp-atlassian / mcp atlassian | 2026-09-22 | 2026-09-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.