September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,364
Critical
1,230
High
4,374
Medium
4,126
Low
462
Severity not reported
1,172
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (964), google (608), oracle (274), apple (244), adobe (197), dell (138), ibm (104), arubanetworks (101), mongodb (64), apache (56)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-76709 A vulnerability exists in the internal administrative component of Analytics and... |
critical | 9.8 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-28 |
| CVE-2026-76675 A command injection vulnerability exists in the command line interface of EdgeCo... |
critical | 9.1 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76674 Buffer overflow vulnerabilities exist in the underlying operating system of HPE... |
critical | 9.8 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76708 A vulnerability exists in the Analytics and Location Engine (ALE) where the appl... |
critical | 9.8 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-25 |
| CVE-2026-76669 Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConn... |
critical | 9.9 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76670 Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConn... |
critical | 9.9 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76673 Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrat... |
critical | 9.8 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76672 A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure... |
critical | 9.9 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2024-26305 There is a buffer overflow vulnerability in the underlying Utility daemon that c... |
critical | 9.8 | — | Arubanetworks / sd-wan | 2024-05-01 | 2026-09-22 |
| CVE-2026-19766 An authentication bypass vulnerability exists in the underlying operating system... |
critical | 9.6 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-04 |
| CVE-2026-73700 A vulnerability in the web-based management interface of HPE Networking Fabric C... |
critical | 9.0 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73701 An unauthenticated remote code execution vulnerability exists in the underlying... |
critical | 9.0 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-76657 Vulnerabilities have been identified in the API of HPE Networking Fabric Compose... |
critical | 10.0 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-76658 A vulnerability has been identified in the SSH daemon of HPE Networking Fabric C... |
critical | 10.0 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-76715 A vulnerability in an administrative component of Analytics and Location Engine... |
high | 7.1 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-28 |
| CVE-2026-76714 Vulnerabilities in the Analytics and Location Engine web interface allows remote... |
high | 7.2 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-28 |
| CVE-2026-76713 A vulnerability exists in the maintenance restore functionality of Analytics and... |
high | 7.2 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-28 |
| CVE-2026-76712 A vulnerability exists in the Analytics and Location Engine (ALE) that may allow... |
high | 7.3 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-28 |
| CVE-2026-76710 A vulnerability exists in the Analytics and Location Engine (ALE) management int... |
high | 7.5 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-28 |
| CVE-2026-76711 A vulnerability exists in an Analytics and Location Engine (ALE) component where... |
high | 7.5 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-28 |
| CVE-2026-76685 A vulnerability exists in the proxy packet processing logic of the affected comp... |
high | 8.1 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76689 A vulnerability exists in the configuration processing logic of the affected com... |
high | 7.2 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76682 A vulnerability in the network security monitoring component of intrusion detect... |
high | 8.2 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76686 A vulnerability exists in the underlying operating system of HPE Networking Edge... |
high | 7.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76690 A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN G... |
high | 7.2 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76691 Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking Edge... |
high | 7.2 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76683 Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking Edge... |
high | 8.1 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76679 Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an una... |
high | 8.6 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76678 A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateway... |
high | 8.8 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76677 A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gat... |
high | 8.8 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76676 Buffer overflow vulnerabilities exist in the underlying operating system of Edge... |
high | 8.8 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76693 A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an una... |
high | 7.0 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76692 A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an una... |
high | 7.1 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76680 Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remo... |
high | 8.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76681 A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an aut... |
high | 8.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76684 Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD... |
high | 8.1 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76687 A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchest... |
high | 7.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76688 Vulnerabilities have been identified in the web-based management interface of Ed... |
high | 7.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-73712 A vulnerability in the API of HPE Networking Fabric Composer could allow an unau... |
high | 8.1 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-03 |
| CVE-2026-73716 A remote code execution vulnerability exists in the underlying operating system... |
high | 7.5 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.