September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,293
Critical
1,225
High
4,345
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-34689 Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricte... |
high | 8.6 | — | Adobe / connect | 2026-09-22 | 2026-09-25 |
| CVE-2026-24239 NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious da... |
high | 7.8 | — | Nvidia / nemo speech | 2026-09-22 | 2026-09-25 |
| CVE-2026-24267 NVIDIA NeMo Speech for all platforms contains a vulnerability in the speech data... |
high | 7.8 | — | Nvidia / nemo speech | 2026-09-22 | 2026-09-25 |
| CVE-2026-65111 NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious in... |
high | 7.8 | — | Nvidia / nemo speech | 2026-09-22 | 2026-09-25 |
| CVE-2026-97646 A weakness has been identified in ningzichun student-management-system up to 987... |
high | 7.3 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-88388 Espruino 2v29 (commit bffc6d0) contains a stack-based buffer overflow vulnerabil... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-69389 Heap-based buffer overflow in Windows Storage Management Provider allows an auth... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-69391 Stack-based buffer overflow in Windows Broker Infrastructure Service allows an a... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-69392 Use after free in Windows Shell allows an authorized attacker to elevate privile... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-25 |
| CVE-2026-69394 Heap-based buffer overflow in Windows Audio Service allows an authorized attacke... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-69396 Use after free in Windows NDIS allows an authorized attacker to elevate privileg... |
high | 7.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-85750 Piwigo before v16.4.0 is vulnerable to arbitrary file read and remote code execu... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-69433 Heap-based buffer overflow in Windows Error Reporting allows an authorized attac... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-69434 Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacke... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-69440 Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module... |
high | 7.0 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-25 |
| CVE-2026-67276 RouterOS does not compare the complete RSA public key when matching an SSH authe... |
high | 8.1 | — | Mikrotik / routeros | 2026-09-05 | 2026-09-25 |
| CVE-2026-47701 The OpenTelemetry Operator is a Kubernetes Operator for the OpenTelemetry Collec... |
high | 7.7 | — | — | 2026-09-14 | 2026-09-25 |
| CVE-2026-67281 RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jspr... |
high | 7.5 | — | Mikrotik / routeros | 2026-09-05 | 2026-09-25 |
| CVE-2026-96039 The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site S... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-95864 The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scri... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-95866 The User Profile Builder – Beautiful User Registration Forms, User Profiles & Us... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-96568 The Restaurant Menu and Food Ordering plugin for WordPress is vulnerable to Stor... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-93901 The Optima Express IDX plugin for WordPress is vulnerable to Privilege Escalatio... |
high | 7.3 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-93345 MikroTik RouterOS before 7.25beta4 contains an improper input validation vulnera... |
high | 7.5 | — | — | 2026-09-22 | 2026-09-25 |
| CVE-2026-93303 The HT Contact Form – Drag & Drop Form Builder for WordPress plugin for WordPres... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-92713 The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vu... |
high | 8.1 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-89406 The Modula Image Gallery – Photo Grid & Video Gallery plugin for WordPress is vu... |
high | 7.5 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-89426 The Knit Pay – Cashfree, Instamojo, Razorpay, PayPal and more plugin for WordPre... |
high | 8.8 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-83591 The AMP for WP – Accelerated Mobile Pages plugin for WordPress is vulnerable to... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-84279 The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Si... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-84280 The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Si... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-62062 Cross-Site Request Forgery (CSRF) vulnerability in Elementor Website Builder all... |
high | 8.8 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-13456 The WP Maps – Google Maps,OpenStreetMap,Mapbox,Store Locator,Listing,Directory &... |
high | 7.5 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-19804 The s2Member – Excellent for All Kinds of Memberships, Content Restriction Paywa... |
high | 8.8 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-93758 An insecure direct object reference in the nested attributes handling of the Mon... |
high | 8.1 | — | Mongodb / mongoid | 2026-09-18 | 2026-09-25 |
| CVE-2026-50276 dd-trace-rb is Datadog's client library for Ruby. |
high | 7.5 | — | — | 2026-09-14 | 2026-09-25 |
| CVE-2026-82356 Imprivata EAM <=26.2.6 lacks the ability to rotate its RSA key pair after deploy... |
high | 7.5 | — | — | 2026-09-23 | 2026-09-25 |
| CVE-2026-69441 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-69444 Heap-based buffer overflow in Microsoft Windows Speech allows an authorized atta... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-69445 Improper limitation of a pathname to a restricted directory ('path traversal') i... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.