September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,290
Critical
1,223
High
4,344
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-64197 There is an out-of-bounds write vulnerability in DASYLab due to improper validat... |
high | 7.3 | — | Ni / dasylab | 2026-09-03 | 2026-09-22 |
| CVE-2026-64198 There is an out-of-bounds read vulnerability in DASYLab due to improper validati... |
high | 7.3 | — | Ni / dasylab | 2026-09-03 | 2026-09-22 |
| CVE-2026-64199 There is an out-of-bounds read vulnerability in DASYLab due to improper validati... |
high | 7.3 | — | Ni / dasylab | 2026-09-03 | 2026-09-22 |
| CVE-2026-64200 There is an out-of-bounds read vulnerability in DASYLab due to improper validati... |
high | 7.3 | — | Ni / dasylab | 2026-09-03 | 2026-09-22 |
| CVE-2026-93959 A vulnerability was determined in SourceCodester Online Reviewer Management Syst... |
high | 7.3 | — | — | 2026-09-20 | 2026-09-22 |
| CVE-2026-87207 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 7.2 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87238 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 8.8 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87202 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 8.8 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-83210 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 8.8 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-83208 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 8.8 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-19780 Koha Eval Code Injection Remote Code Execution Vulnerability. |
high | 8.8 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-18110 Concrete CMS 9 (9.0.0 through 9.5.2) does not perform an authorization check on... |
high | 7.5 | — | Concretecms / concrete cms | 2026-09-15 | 2026-09-22 |
| CVE-2026-87140 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.5 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87139 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.5 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87138 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.5 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-69760 Out-of-bounds read in Windows Kerberos allows an unauthorized attacker to deny s... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69744 Null pointer dereference in Windows Kerberos allows an unauthorized attacker to... |
high | 7.5 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-22 |
| CVE-2026-87266 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
high | 8.2 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87130 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.4 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-77124 In affected versions of Nexus Repository 3, the script execution endpoint (POST... |
high | 7.2 | — | Sonatype / nexus repository manager | 2026-09-02 | 2026-09-22 |
| CVE-2026-87190 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 7.5 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87191 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 7.1 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87219 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 8.4 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87220 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 7.1 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-77125 A vulnerability was identified in Sonatype Nexus Repository 3 in which two blobs... |
high | 7.1 | — | Sonatype / nexus repository manager | 2026-09-02 | 2026-09-22 |
| CVE-2026-87221 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 7.5 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87222 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 7.5 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-93962 A weakness has been identified in Kamailio up to 5.8.8/6.0.7/6.1.4/6.2.0-dev1. |
high | 8.3 | — | — | 2026-09-20 | 2026-09-22 |
| CVE-2026-87224 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 8.8 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87225 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 7.1 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87171 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 8.7 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87174 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 8.2 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87177 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 8.5 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87178 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 8.7 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87179 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 8.8 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87180 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 8.8 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87181 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 8.8 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87182 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 8.8 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87183 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 7.7 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87185 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 8.8 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.