September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,291
Critical
1,223
High
4,345
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-89281 The Apache Lounge Windows distribution of Apache HTTP Server build contains a ha... |
high | 8.4 | — | — | 2026-09-22 | 2026-09-23 |
| CVE-2026-94574 A local cross-user code execution vulnerability exists in GNU wget (Windows buil... |
high | 7.8 | — | — | 2026-09-22 | 2026-09-23 |
| CVE-2026-19438 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v... |
high | 7.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-42801 NULL pointer dereference vulnerability in ASR Crane，Falcon on Linux (as_rrc mod... |
high | 7.4 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-87254 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
high | 7.5 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-23 |
| CVE-2026-87256 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
high | 7.7 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-23 |
| CVE-2026-87257 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
high | 7.7 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-23 |
| CVE-2026-87258 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
high | 7.6 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-23 |
| CVE-2026-93753 deepmerge through 4.3.1 contains a prototype poisoning vulnerability in the merg... |
high | 7.5 | — | — | 2026-09-18 | 2026-09-23 |
| CVE-2026-83621 ntopng is a web-based network traffic monitoring application. |
high | 8.1 | — | — | 2026-09-21 | 2026-09-23 |
| CVE-2026-92604 Scirius through 3.8.0 contains an arbitrary file write vulnerability in the PCAP... |
high | 8.1 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92753 PatrowlManager through 1.8.4 contains an authorization bypass vulnerability in t... |
high | 7.1 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92783 Yeti through 2.11.0 fails to validate caller permissions in the DELETE /api/v2/r... |
high | 8.1 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-82412 ntopng is a web-based network traffic monitoring application. |
high | 8.8 | — | — | 2026-09-21 | 2026-09-23 |
| CVE-2026-92566 DataGear through 6.0.0 contains a server-side request forgery vulnerability in t... |
high | 8.2 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92749 SafeLine through 9.4.1 derives the management console session-signing secret fro... |
high | 8.1 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92751 CMAK through 3.0.0.6 fails to install a cross-site request forgery filter, allow... |
high | 8.1 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92752 metasfresh DocumentAttachmentsRestController and CommentsRestController endpoint... |
high | 8.3 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92761 WebVirtCloud fails to properly validate permission flags in UserInstance grants,... |
high | 8.8 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92773 Trigger.dev before 4.6.0 fails to verify that an authenticated user controls a G... |
high | 7.1 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92801 cc-connect through 1.5.0 fails to enforce per-user allowlist filtering in the on... |
high | 8.8 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-95654 Databasement before 1.7.14 validates invitation tokens only when the acceptance... |
high | 7.4 | — | — | 2026-09-22 | 2026-09-23 |
| CVE-2026-90562 LangBot before 4.10.11 generates password recovery keys with only 24 bits of ent... |
high | 8.1 | — | — | 2026-09-13 | 2026-09-23 |
| CVE-2026-90768 CAPEv2 through commit 471ee4b fails to validate task ownership in REST API endpo... |
high | 8.1 | — | — | 2026-09-13 | 2026-09-23 |
| CVE-2026-90774 rustypaste before 0.18.1 validates the destination path before applying the opti... |
high | 7.5 | — | — | 2026-09-13 | 2026-09-23 |
| CVE-2026-90778 SIPp through 3.7.7 contains a buffer overflow vulnerability in get_peer_tag() fu... |
high | 7.5 | — | — | 2026-09-13 | 2026-09-23 |
| CVE-2026-82028 Magistrala before 1.0.0 contains a SQL injection vulnerability in the timescale-... |
high | 8.8 | — | — | 2026-09-14 | 2026-09-23 |
| CVE-2026-91143 goproxy through 15.3 fails to apply HTTP proxy basic authentication to CONNECT t... |
high | 7.2 | — | — | 2026-09-14 | 2026-09-23 |
| CVE-2026-91200 DevSpace through 6.3.21 fails to reject parent-directory segments in tar entry n... |
high | 8.8 | — | — | 2026-09-14 | 2026-09-23 |
| CVE-2026-91929 Flowise versions before 3.1.4 contain cross-tenant authorization gaps in Enterpr... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-23 |
| CVE-2026-91930 Flowise before 3.1.4 fails to scope enterprise organization and workspace member... |
high | 7.5 | — | — | 2026-09-15 | 2026-09-23 |
| CVE-2026-91931 Flowise before 3.1.4 contains a remote code execution vulnerability in the Custo... |
high | 8.5 | — | — | 2026-09-15 | 2026-09-23 |
| CVE-2026-91937 Flowise before 3.1.4 fails to sanitize the overrideConfig.sessionId parameter be... |
high | 7.5 | — | — | 2026-09-15 | 2026-09-23 |
| CVE-2026-76834 b2evolution CMS versions 6.7.8 through 7.2.5 contain an incomplete fix for CVE-2... |
high | 8.1 | — | — | 2026-09-17 | 2026-09-23 |
| CVE-2026-84702 facefusion through 3.6.1 fails to normalize job identifiers in get_job_file_name... |
high | 7.5 | — | — | 2026-09-02 | 2026-09-23 |
| CVE-2026-85671 QAnything 2.0.0 contains an authentication bypass vulnerability in the /api/loca... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85685 AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalW... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85686 ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85690 Plandex 2.2.1 contains a path traversal vulnerability in the ApplyFiles function... |
high | 7.8 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85691 MegaParse 0.0.55 contains an unauthenticated server-side request forgery vulnera... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-23 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.