September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,291
Critical
1,223
High
4,345
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-69649 Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized... |
high | 8.8 | — | Microsoft / raw image extension | 2026-09-08 | 2026-09-22 |
| CVE-2026-94491 A weakness has been identified in Yonyou KSOA 9.0. |
high | 7.3 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-94384 Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 all... |
high | 8.1 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-90997 A flaw was found in Keycloak. |
high | 7.4 | — | — | 2026-09-17 | 2026-09-22 |
| CVE-2026-81895 In Concrete CMS before 9.5.3, the Document Library block stored the file-set ide... |
high | 7.2 | — | Concretecms / concrete cms | 2026-09-15 | 2026-09-22 |
| CVE-2026-75157 Apache Airflow's asset queued-events DELETE endpoints checked the caller's Dag-a... |
high | 7.5 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-69652 Use after free in Windows Win32K allows an authorized attacker to elevate privil... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69654 Use after free in Windows Accounts Control allows an authorized attacker to elev... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69708 Use after free in Windows Web Platform Storage allows an authorized attacker to... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-22 |
| CVE-2026-82992 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 7.8 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-22 |
| CVE-2026-83003 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.5 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83005 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.8 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83007 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.5 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-69710 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.5 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-22 |
| CVE-2026-83008 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.8 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83009 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.8 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83010 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.1 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83012 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 7.7 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83013 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.8 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83022 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 7.9 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83023 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 8.6 | — | Oracle / identity manager connector | 2026-09-15 | 2026-09-22 |
| CVE-2026-83024 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 7.8 | — | Oracle / identity manager connector | 2026-09-15 | 2026-09-22 |
| CVE-2026-83025 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 8.7 | — | Oracle / identity manager connector | 2026-09-15 | 2026-09-22 |
| CVE-2026-83026 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 8.3 | — | Oracle / identity manager connector | 2026-09-15 | 2026-09-22 |
| CVE-2026-83028 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 7.5 | — | Oracle / identity manager connector | 2026-09-15 | 2026-09-22 |
| CVE-2026-49811 Dell Command | Monitor (DCM), versions prior to 10.13.2, contain an Incorrect Pe... |
high | 8.4 | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-69711 Use after free in Windows Device Association Service allows an authorized attack... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-22 |
| CVE-2026-83074 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM... |
high | 8.6 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-22 |
| CVE-2026-83075 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM... |
high | 7.5 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-22 |
| CVE-2026-83078 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM... |
high | 8.2 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-22 |
| CVE-2026-83085 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM... |
high | 8.2 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-22 |
| CVE-2026-83412 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo... |
high | 8.1 | — | Oracle / coherence | 2026-09-15 | 2026-09-22 |
| CVE-2026-82560 Pod::Text versions before 6.1.1 for Perl allow CPU and memory exhaustion formatt... |
high | 7.5 | — | — | 2026-09-19 | 2026-09-22 |
| CVE-2026-74766 Net::IDN::Punycode versions from 2.301 before 2.590 for Perl allow a heap use-af... |
high | 8.4 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-87079 Net::IDN::Punycode versions before 2.590 for Perl allow CPU exhaustion via quadr... |
high | 7.5 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-87081 Net::IDN::UTS46 versions before 2.590 for Perl allow CPU exhaustion via quadrati... |
high | 7.5 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-87082 Net::IDN::Punycode versions before 2.590 for Perl hang, crash or return a wrong... |
high | 7.5 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-83440 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (comp... |
high | 7.2 | — | Oracle / product hub | 2026-09-15 | 2026-09-22 |
| CVE-2026-83442 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (comp... |
high | 7.2 | — | Oracle / product hub | 2026-09-15 | 2026-09-22 |
| CVE-2026-83444 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (comp... |
high | 8.8 | — | Oracle / product hub | 2026-09-15 | 2026-09-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.