September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,291
Critical
1,223
High
4,345
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-7006 Sublime Text for Windows through Build 4192 (Sublime Text 4) and Build 3207 (Sub... |
high | 7.3 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-93690 uri-js through 4.4.1 contains a denial of service vulnerability in the removeDot... |
high | 7.5 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-93749 source-map-js through 1.2.1 fails to validate the per-section offset line value... |
high | 7.5 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-93752 CSSOM through 0.5.0 contains a denial of service vulnerability in CSSStyleDeclar... |
high | 7.5 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2017-20284 Caucho Resin contains a path traversal vulnerability in the documentation webapp... |
high | 7.5 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-93991 Argo Workflows versions 4.1.0 through 4.1.3 contain an authorization bypass vuln... |
high | 7.7 | — | — | 2026-09-19 | 2026-09-22 |
| CVE-2026-94106 getID3 before 1.9.26 contains an OS command injection vulnerability in shell-out... |
high | 8.8 | — | — | 2026-09-20 | 2026-09-22 |
| CVE-2026-95861 A malicious actor with access to the network could exploit an Uncontrolled Recur... |
high | 7.5 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-95862 A malicious actor with access to the network could exploit an Out-of-bounds Writ... |
high | 7.5 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-93710 Dancer2 versions from 2.0.0 before 2.2.0 for Perl dispatch a route that a dying... |
high | 7.5 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-93712 Dancer2 versions from 2.1.0 before 2.2.0 for Perl serve files from outside publi... |
high | 7.5 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-77544 A malicious actor with access to the network could exploit an Out-of-bounds Writ... |
high | 7.5 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-77555 A malicious actor with access to the network could exploit an Out-of-bounds Writ... |
high | 7.5 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-77556 A malicious actor with access to the network could exploit an Out-of-bounds Read... |
high | 7.5 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-77558 A malicious actor with access to the network could exploit an Out-of-bounds Read... |
high | 7.5 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-75744 Adobe Experience Manager Forms JEE is affected by a stored Cross-Site Scripting... |
high | 8.1 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-70410 Use of Externally-Controlled Input to Select Classes or Code ('Unsafe Reflection... |
high | 8.8 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-69725 Double free in Windows Hello allows an authorized attacker to elevate privileges... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69729 Heap-based buffer overflow in Windows Credential Providers allows an authorized... |
high | 8.8 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69735 Use after free in Windows Broadcast DVR User Service allows an authorized attack... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69740 Use after free in Windows Hello allows an authorized attacker to elevate privile... |
high | 8.8 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69757 Use after free in Windows TCP/IP allows an authorized attacker to elevate privil... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69762 Stack-based buffer overflow in Windows Win32K allows an authorized attacker to e... |
high | 8.8 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-22 |
| CVE-2026-89087 The cstruct package before 6.3.0 for OCaml mishandles indexes. |
high | 7.3 | — | — | 2026-09-10 | 2026-09-22 |
| CVE-2026-79591 A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS... |
high | 7.8 | — | — | 2026-09-10 | 2026-09-22 |
| CVE-2026-79592 An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of... |
high | 7.5 | — | — | 2026-09-10 | 2026-09-22 |
| CVE-2026-71643 An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e... |
high | 7.5 | — | — | 2026-09-10 | 2026-09-22 |
| CVE-2026-71645 An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: c... |
high | 7.5 | — | — | 2026-09-10 | 2026-09-22 |
| CVE-2026-71647 An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567ab... |
high | 7.5 | — | — | 2026-09-10 | 2026-09-22 |
| CVE-2026-71641 An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e... |
high | 7.5 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-71646 An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: c... |
high | 7.5 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-79362 Certain Woltlab products are affected by RCE via Cache Poisoning. |
high | 8.8 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-79393 A heap-based buffer overflow vulnerability in the WS-Addressing Action transform... |
high | 7.5 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-79394 An insecure default configuration in the embedded Happytime RTSP server within t... |
high | 7.5 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-90647 ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows con... |
high | 7.4 | — | — | 2026-09-12 | 2026-09-22 |
| CVE-2026-90651 Socket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0... |
high | 8.1 | — | — | 2026-09-13 | 2026-09-22 |
| CVE-2026-90668 The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the... |
high | 7.5 | — | — | 2026-09-13 | 2026-09-22 |
| CVE-2026-36453 Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. |
high | 7.4 | — | — | 2026-09-13 | 2026-09-22 |
| CVE-2026-37008 CrewAI before fb2323b offers a Python blocklist approach that operates at the wr... |
high | 8.1 | — | — | 2026-09-13 | 2026-09-22 |
| CVE-2026-31278 An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 be... |
high | 7.7 | — | — | 2026-09-14 | 2026-09-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.