September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-19480 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
high | 7.5 | — | Adobe / c2pa | 2026-09-22 | 2026-10-15 |
| CVE-2026-34689 Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricte... |
high | 8.6 | — | Adobe / connect | 2026-09-22 | 2026-09-25 |
| CVE-2026-82003 Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnera... |
high | 8.5 | — | Adobe / campaign | 2026-09-22 | 2026-09-26 |
| CVE-2026-81996 Acrobat Reader is affected by an Incorrect Authorization vulnerability that coul... |
high | 8.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81985 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81986 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81987 Acrobat Reader is affected by an Integer Overflow or Wraparound vulnerability th... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81988 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81989 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81990 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81992 Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that co... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81976 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81979 Acrobat Reader is affected by an out-of-bounds write vulnerability that could re... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81980 Acrobat Reader is affected by an out-of-bounds write vulnerability that could re... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81981 Acrobat Reader is affected by an out-of-bounds write vulnerability that could re... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81983 Acrobat Reader is affected by an out-of-bounds write vulnerability that could re... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-80161 Acrobat Reader is affected by an Access of Resource Using Incompatible Type ('Ty... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81973 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81975 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-79907 Acrobat Reader is affected by a Double Free vulnerability that could result in a... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-79908 Acrobat Reader is affected by an out-of-bounds write vulnerability that could re... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-79909 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-82007 Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability... |
high | 7.8 | — | Adobe / photoshop | 2026-09-08 | 2026-09-11 |
| CVE-2026-82005 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-09-08 | 2026-09-11 |
| CVE-2026-82006 Photoshop Desktop is affected by a Heap-based Buffer Overflow vulnerability that... |
high | 7.8 | — | Adobe / photoshop | 2026-09-08 | 2026-09-11 |
| CVE-2026-76190 ColdFusion is affected by an Improper Neutralization of Directives in Dynamicall... |
high | 8.6 | — | Adobe / coldfusion | 2026-09-08 | 2026-09-18 |
| CVE-2026-76199 Photoshop Desktop is affected by an Uncontrolled Search Path Element vulnerabili... |
high | 8.6 | — | Adobe / photoshop | 2026-09-08 | 2026-09-11 |
| CVE-2026-75991 Illustrator is affected by an Improper Input Validation vulnerability that could... |
high | 8.6 | — | Adobe / illustrator | 2026-09-08 | 2026-09-18 |
| CVE-2026-75992 Illustrator is affected by an out-of-bounds write vulnerability that could resul... |
high | 7.8 | — | Adobe / illustrator | 2026-09-08 | 2026-09-18 |
| CVE-2026-75993 ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. |
high | 8.5 | — | Adobe / coldfusion | 2026-09-08 | 2026-09-18 |
| CVE-2026-75998 ColdFusion is affected by an Improper Access Control vulnerability that could le... |
high | 7.5 | — | Adobe / coldfusion | 2026-09-08 | 2026-09-18 |
| CVE-2026-75999 ColdFusion is affected by an Improper Input Validation vulnerability that could... |
high | 8.4 | — | Adobe / coldfusion | 2026-09-08 | 2026-09-18 |
| CVE-2026-75771 Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability... |
high | 7.8 | — | Adobe / photoshop | 2026-09-08 | 2026-09-11 |
| CVE-2026-75862 Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability... |
high | 7.8 | — | Adobe / photoshop | 2026-09-08 | 2026-09-11 |
| CVE-2026-75863 Photoshop Desktop is affected by an Integer Overflow or Wraparound vulnerability... |
high | 7.8 | — | Adobe / photoshop | 2026-09-08 | 2026-09-11 |
| CVE-2026-75990 Illustrator is affected by an Incorrect Authorization vulnerability that could r... |
high | 8.6 | — | Adobe / illustrator | 2026-09-08 | 2026-09-18 |
| CVE-2026-75631 Photoshop Desktop is affected by an out-of-bounds write vulnerability that could... |
high | 7.8 | — | Adobe / photoshop | 2026-09-08 | 2026-09-14 |
| CVE-2026-77774 Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul... |
high | 8.6 | — | Adobe / commerce | 2026-09-08 | 2026-09-09 |
| CVE-2026-76202 Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul... |
high | 8.2 | — | Adobe / commerce | 2026-09-08 | 2026-09-10 |
| CVE-2026-77108 Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul... |
high | 7.5 | — | Adobe / commerce | 2026-09-08 | 2026-09-11 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.