September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,293
Critical
1,225
High
4,345
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-88418 CMSimple 5.24 ships with CSRF protection disabled by default, which turns csrfPr... |
high | 8.8 | — | — | 2026-09-22 | 2026-09-26 |
| CVE-2026-79314 A horizontal privilege escalation vulnerability exists in x-ui 0.3.2. |
high | 8.8 | — | — | 2026-09-22 | 2026-09-26 |
| CVE-2026-77633 Cloudreve is a self-hosted file management and sharing system. |
high | 7.1 | — | — | 2026-09-22 | 2026-09-26 |
| CVE-2026-43642 Softaculous Virtualizor before 3.2.9 (Patch 9) and 3.0.0 contains a PHP object i... |
high | 8.1 | — | — | 2026-09-22 | 2026-09-26 |
| CVE-2025-20352 Cisco IOS and IOS XE Software SNMP Denial of Service and Remote Code Execution V... |
high | 7.7 | Listed | Cisco / IOS and IOS XE | 2025-09-24 | 2026-09-26 |
| CVE-2026-88832 BusyBox romfs volume ID parsing uses unbounded strlen on attacker-controlled met... |
high | 7.3 | — | — | 2026-09-23 | 2026-09-25 |
| CVE-2025-62221 Microsoft Windows Use After Free Vulnerability |
high | 7.8 | Listed | Microsoft / Windows | 2025-12-09 | 2026-09-25 |
| CVE-2026-78510 Heap-based buffer overflow in Microsoft Office allows an unauthorized attacker t... |
high | 8.4 | — | Microsoft / 365 apps | 2026-09-08 | 2026-09-25 |
| CVE-2026-85892 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.8 | — | Microsoft / edge chromium | 2026-09-14 | 2026-09-25 |
| CVE-2026-88340 An invalid pointer release vulnerability exists in YARA 4.5.8 during deserializa... |
high | 7.6 | — | — | 2026-09-22 | 2026-09-25 |
| CVE-2026-68791 Incorrect authorization in Azure Machine Learning allows an unauthorized attacke... |
high | 7.5 | — | Microsoft / azure machine learning | 2026-09-17 | 2026-09-25 |
| CVE-2026-77903 Authentication bypass by spoofing in Microsoft Dataverse allows an unauthorized... |
high | 8.1 | — | Microsoft / dataverse | 2026-09-17 | 2026-09-25 |
| CVE-2026-85885 Improper neutralization of special elements used in a command ('command injectio... |
high | 8.8 | — | Microsoft / 365 copilot | 2026-09-17 | 2026-09-25 |
| CVE-2026-85917 Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized at... |
high | 7.5 | — | Microsoft / foundry | 2026-09-17 | 2026-09-25 |
| CVE-2026-69486 Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthor... |
high | 8.8 | — | Microsoft / edge chromium | 2026-09-15 | 2026-09-25 |
| CVE-2026-87289 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
high | 7.5 | — | Oracle / helidon | 2026-09-15 | 2026-09-25 |
| CVE-2026-75655 Bridge is affected by an Uncontrolled Recursion vulnerability that could result... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-75658 Bridge is affected by an out-of-bounds write vulnerability that could result in... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-75663 Bridge is affected by an out-of-bounds write vulnerability that could result in... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-75665 Bridge is affected by a Heap-based Buffer Overflow vulnerability that could resu... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-75676 Bridge is affected by a Stack-based Buffer Overflow vulnerability that could res... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-16468 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-22 | 2026-09-25 |
| CVE-2026-16469 IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote auth... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-22 | 2026-09-25 |
| CVE-2026-16672 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-22 | 2026-09-25 |
| CVE-2026-17102 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-22 | 2026-09-25 |
| CVE-2026-97326 A weakness has been identified in songxinjianqwe Chat up to ac63d25297079eed5e4b... |
high | 7.3 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-88361 SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::Buil... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-88369 zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.... |
high | 7.3 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-88373 libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-84683 A flaw was found in Red Hat Ansible Automation Platform's automation-
controller... |
high | 8.7 | — | — | 2026-09-23 | 2026-09-25 |
| CVE-2026-77261 MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (C... |
high | 8.5 | — | Mcp-atlassian / mcp atlassian | 2026-09-22 | 2026-09-25 |
| CVE-2026-88362 MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isi... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-85496 The Botslab G980H dash camera firmware generates session identifiers using a sma... |
high | 8.8 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-85491 Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path... |
high | 8.8 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-81630 The Botslab G980H dash camera firmware does not adequately verify the authentici... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-77967 The Botslab G980H dash camera firmware accepts a reusable authentication value w... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-61714 FluidSynth is a software synthesizer based on the SoundFont 2 specifications. |
high | 7.8 | — | — | 2026-09-18 | 2026-09-25 |
| CVE-2026-51997 An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to... |
high | 8.8 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-42324 Piwigo is a full featured open source photo gallery application for the web. |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-44642 Piwigo is a full featured open source photo gallery application for the web. |
high | 8.1 | — | — | 2026-09-25 | 2026-09-25 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.