September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,291
Critical
1,223
High
4,345
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-92779 Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pol... |
high | 7.6 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-92784 @refinedev/inferencer through 7.0.0 fails to escape API field names when interpo... |
high | 7.5 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-92791 Uber Kraken through 0.1.29 fails to validate the tag parameter in the /tags/{tag... |
high | 7.5 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2021-48008 Chanjet CRM contains an unauthenticated SQL injection vulnerability that allows... |
high | 7.5 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-88345 An out-of-bounds read vulnerability exists in the schema lexer of flatcc 4c3b999... |
high | 7.5 | — | — | 2026-09-22 | 2026-09-24 |
| CVE-2026-96271 Photoview through 2.4.0 contains an authorization bypass vulnerability in the sh... |
high | 7.1 | — | — | 2026-09-23 | 2026-09-24 |
| CVE-2026-96673 Photoview through 2.4.0 contains an SQL injection vulnerability in the album dow... |
high | 7.5 | — | — | 2026-09-23 | 2026-09-24 |
| CVE-2026-96604 A vulnerability was identified in SoftNews Media Group DataLife Engine 18.0. |
high | 7.3 | — | — | 2026-09-23 | 2026-09-24 |
| CVE-2026-96751 A vulnerability has been found in pmTicket Project-Management-Software up to 078... |
high | 7.3 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-96762 A vulnerability was determined in kvcache-ai mooncake up to 0.3.12/0.3.13.post1. |
high | 7.3 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-97055 SigNoz from v0.8.0 before v0.143.0 defaults the JWT tokenizer signing secret (to... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-97057 redis-parser through 3.0.0 fails to validate the multi-bulk length value in RESP... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-51995 An issue in geelen mcp-remote 0.1.32 through 0.1.38 allows a remote attacker to... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-97362 HFS2 version 2.4.0 and earlier contains a denial of service vulnerability that a... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-88357 nDPI 5.1.0 contains a memory access issue in the DNS dissector and serializer de... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-88368 NanoSVG commit 239e102ec contains an incorrect numeric conversion vulnerability... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-88376 Bento4 1.6.0.0 contains an integer underflow vulnerability in AP4_AvccAtom::Crea... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-88390 An out-of-bounds write vulnerability in jslGetTokenValueAsString() in Espruino 2... |
high | 7.7 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-90561 Strapi versions 4.x through 4.26.2 and 5.x before 5.48.1 contain a stored cross-... |
high | 8.7 | — | — | 2026-09-13 | 2026-09-24 |
| CVE-2026-91771 Weights & Biases wandb before 0.29.0 fails to validate the file name from server... |
high | 8.8 | — | — | 2026-09-15 | 2026-09-24 |
| CVE-2026-92776 Wiki.js through 2.5.314 fails to require path separators when matching START and... |
high | 8.1 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-95814 Vaultwarden through 1.37.3 omits organization membership status validation from... |
high | 8.1 | — | — | 2026-09-22 | 2026-09-24 |
| CVE-2026-79310 webpy web.py 0.76 is vulnerable to server-side template injection (SSTI). |
high | 8.5 | — | — | 2026-09-23 | 2026-09-24 |
| CVE-2026-91752 GNU libextractor before 1.15 contains a stack-based buffer overflow vulnerabilit... |
high | 7.5 | — | — | 2026-09-15 | 2026-09-24 |
| CVE-2026-89028 MikroTik RouterOS before 7.24 contains a heap memory corruption vulnerability in... |
high | 7.5 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-92718 Nuclei versions before 3.11.1 cache template signature verification based only o... |
high | 7.3 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-92786 LightGBM through 4.7.0 fails to validate child and split array values when parsi... |
high | 7.8 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-75131 NetworkManager-l2tp through 1.52.4, fixed in 1.52.6, contains a privilege escala... |
high | 7.8 | — | — | 2026-09-23 | 2026-09-24 |
| CVE-2026-88372 libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header(... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-92748 BC Security Empire before 6.7.1 fails to validate the multipart filename paramet... |
high | 8.8 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-92782 Chroma through 1.5.9 fails to validate tenant and database segments when resolvi... |
high | 8.1 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-28325 SolarWinds Observability Self-Hosted was found to be affected by an unauthentica... |
high | 8.8 | — | — | 2026-09-22 | 2026-09-24 |
| CVE-2026-96808 In Flatpak before 1.18.1, the revokefs writer, used by the flatpak-system-helper... |
high | 7.4 | — | — | 2026-09-23 | 2026-09-24 |
| CVE-2026-95521 A command injection flaw was found in rpm. |
high | 7.8 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-96744 Improper neutralization of special elements in data query logic in the cache loc... |
high | 7.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-88382 hiredis commit 29ea279 (post-v1.5.0) contains an uncontrolled memory allocation... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-93543 An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be... |
high | 7.4 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-75649 Bridge is affected by a Heap-based Buffer Overflow vulnerability that could resu... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-24 |
| CVE-2026-92469 zlt2000 microservices-platform through 6.0.0 contains an authorization bypass vu... |
high | 8.1 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-92780 KnowStreaming through 3.4.1 fails to enforce role-based access control on REST A... |
high | 8.8 | — | — | 2026-09-16 | 2026-09-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.