September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,290
Critical
1,223
High
4,344
Medium
4,103
Low
460
Severity not reported
1,160
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-83237 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83238 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83240 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83243 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 7.7 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83244 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83248 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 8.2 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83173 Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83213 Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component... |
high | 7.5 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83215 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 8.2 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83217 Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83221 Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (compon... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83113 Vulnerability in the Oracle Quality product of Oracle E-Business Suite (componen... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83116 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite... |
high | 7.7 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83126 Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (com... |
high | 7.6 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83167 Vulnerability in the Oracle Application Object Library product of Oracle E-Busin... |
high | 7.5 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83171 Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83172 Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (com... |
high | 8.5 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-56920 In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56967 In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer... |
high | 8.0 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56945 In VPU, there is a possible out-of-bounds write due to a confused deputy. |
high | 7.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56942 In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write du... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56941 In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due t... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56914 In multiple locations, there is a possible use-after-free due to improper lockin... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2025-31277 Apple Multiple Products Buffer Overflow Vulnerability |
high | 8.8 | Listed | Apple / Multiple Products | 2025-07-30 | 2026-09-21 |
| CVE-2026-92127 Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically a... |
high | 8.0 | — | Jenkins / script security | 2026-09-16 | 2026-09-21 |
| CVE-2026-92128 Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR... |
high | 7.5 | — | Jenkins / script security | 2026-09-16 | 2026-09-21 |
| CVE-2026-83014 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 8.1 | — | Oracle / peoplesoft enterprise peopletools | 2026-09-15 | 2026-09-21 |
| CVE-2026-92129 Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check... |
high | 7.5 | — | Jenkins / script security | 2026-09-16 | 2026-09-21 |
| CVE-2026-69602 Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-21 |
| CVE-2026-83015 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.0 | — | Oracle / peoplesoft enterprise peopletools | 2026-09-15 | 2026-09-21 |
| CVE-2026-83016 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.2 | — | Oracle / peoplesoft enterprise peopletools | 2026-09-15 | 2026-09-21 |
| CVE-2026-83017 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 8.8 | — | Oracle / peoplesoft enterprise peopletools | 2026-09-15 | 2026-09-21 |
| CVE-2026-83018 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.8 | — | Oracle / peoplesoft enterprise peopletools | 2026-09-15 | 2026-09-21 |
| CVE-2026-69606 Use after free in Windows Shell allows an authorized attacker to elevate privile... |
high | 7.0 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-21 |
| CVE-2026-83019 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 8.1 | — | Oracle / peoplesoft enterprise peopletools | 2026-09-15 | 2026-09-21 |
| CVE-2026-83183 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 7.5 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-21 |
| CVE-2026-83222 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 7.5 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-21 |
| CVE-2026-83225 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 7.5 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-21 |
| CVE-2026-93923 SiYuan through 3.8.4 fails to escape heading style attributes when rendering out... |
high | 8.8 | — | — | 2026-09-19 | 2026-09-21 |
| CVE-2026-83228 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 7.5 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.