September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,291
Critical
1,223
High
4,345
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-91863 A specially crafted WS-Policy document with deeply nested policy elements can by... |
high | 7.5 | — | Apache / neethi | 2026-09-21 | 2026-09-24 |
| CVE-2026-90554 vLLM versions >=0.10.2 and <0.28.0 do not apply any audio decode-size or duratio... |
high | 7.5 | — | Vllm / vllm | 2026-09-12 | 2026-09-24 |
| CVE-2026-76642 util-linux versions through 2.41.5 and 2.42.2 fail to check mount helper exit st... |
high | 7.8 | — | — | 2026-09-03 | 2026-09-24 |
| CVE-2026-85396 rubyzip versions before 3.4.0 contain a path traversal vulnerability in Zip::Ent... |
high | 7.5 | — | — | 2026-09-03 | 2026-09-24 |
| CVE-2026-90560 zstd-jni versions 1.2.0 through 1.5.7-13 contain an out-of-bounds read vulnerabi... |
high | 8.2 | — | — | 2026-09-12 | 2026-09-24 |
| CVE-2026-81907 Concrete CMS 9.5.2 and below is vulnerable to Cross-Site Request Forgery (CSRF)... |
high | 7.1 | — | Concretecms / concrete cms | 2026-09-11 | 2026-09-24 |
| CVE-2026-70579 Out-of-bounds read in Windows Mobile Broadband allows an unauthorized attacker t... |
high | 7.5 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-24 |
| CVE-2026-70578 Heap-based buffer overflow in Windows Credential Guard allows an authorized atta... |
high | 7.0 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-24 |
| CVE-2026-70577 Use after free in Windows Modern Device Management (MDM) allows an authorized at... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-24 |
| CVE-2026-77874 IBM Enterprise Build of Quarkus 3.27.1 through 3.27.5.SP1, and 3.33.1 through 3.... |
high | 8.6 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-78311 SQL Injection vulnerability in DIAEnergie. |
high | 8.8 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-79764 Termix is a web-based server management platform with SSH terminal, tunneling, a... |
high | 7.7 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-94611 authentik is an open-source identity provider. |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-94612 authentik is an open-source identity provider. |
high | 7.4 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-81455 Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Miss... |
high | 8.6 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-88907 Incorrect Authorization vulnerability in TÜBİTAK ULAKBİM UlakPDF allows Authenti... |
high | 7.4 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-94181 An address bar spoofing issue in affected versions of Arc could allow an attacke... |
high | 7.4 | — | — | 2026-09-23 | 2026-09-24 |
| CVE-2026-94183 Arc Search for Android before version 1.12.10 does not display a fullscreen noti... |
high | 7.4 | — | — | 2026-09-23 | 2026-09-24 |
| CVE-2026-57590 A missing authorization vulnerability exists in the Task Group APIs of Apache Do... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-13465 Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allo... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-13466 Incorrect calculation of buffer size vulnerability in Altera Trusted Firmware on... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-13467 Out-of-bounds write vulnerability in Altera Trusted Firmware on HPS allows Explo... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-58004 Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privil... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-58005 Out-of-bounds read vulnerability in Altera Trusted Firmware on HPS allows Privil... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-58006 Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS al... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-58007 Untrusted pointer dereference vulnerability in Altera Trusted Firmware on HPS al... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-58008 Stack-based buffer overflow vulnerability in Altera Trusted Firmware on HPS allo... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-95985 The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remot... |
high | 8.8 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-55294 In ihevcd_get_tu_data_size of ihevcd_utils.c, there is a possible out of bounds... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-69397 Use after free in OpenSSH for Windows allows an unauthorized attacker to execute... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69398 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-24 |
| CVE-2026-75743 Adobe Experience Manager Forms JEE is affected by a Cross-Site Request Forgery (... |
high | 7.1 | — | — | 2026-09-22 | 2026-09-24 |
| CVE-2026-69429 Heap-based buffer overflow in Windows IKE Extension allows an authorized attacke... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69430 Use after free in Windows Embedded Mode Service allows an authorized attacker to... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69809 Missing release of memory after effective lifetime in Active Directory Domain Se... |
high | 7.5 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69801 Heap-based buffer overflow in Windows Audio Service allows an authorized attacke... |
high | 7.8 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69799 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69563 Heap-based buffer overflow in Windows Program Compatibility Assistant Service al... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-58874 In multiple functions of SmsController.java, there is a possible escalation of p... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-24 |
| CVE-2026-69553 Missing authorization in Windows Hyper-V allows an authorized attacker to elevat... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.