September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-83031 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware... |
critical | 9.9 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-23 |
| CVE-2026-83035 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-23 |
| CVE-2026-83036 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-23 |
| CVE-2026-83027 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
critical | 9.3 | — | Oracle / identity manager connector | 2026-09-15 | 2026-09-22 |
| CVE-2026-83021 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware... |
critical | 10.0 | — | Oracle / weblogic server | 2026-09-15 | 2026-09-28 |
| CVE-2026-83006 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
critical | 9.1 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83001 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
critical | 9.1 | — | Oracle / access manager | 2026-09-15 | 2026-09-21 |
| CVE-2026-73962 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
critical | 9.6 | — | Oracle / access manager | 2026-09-15 | 2026-09-21 |
| CVE-2026-73963 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-21 |
| CVE-2026-73950 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
critical | 9.8 | — | Oracle / access manager | 2026-09-15 | 2026-09-21 |
| CVE-2026-73952 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
critical | 9.1 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-22 |
| CVE-2026-73953 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-22 |
| CVE-2026-73956 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-22 |
| CVE-2026-73957 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
critical | 9.3 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-22 |
| CVE-2026-73944 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
critical | 9.1 | — | Oracle / access manager | 2026-09-15 | 2026-09-21 |
| CVE-2026-73945 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
critical | 9.9 | — | Oracle / access manager | 2026-09-15 | 2026-09-21 |
| CVE-2026-73946 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
critical | 9.1 | — | Oracle / access manager | 2026-09-15 | 2026-09-21 |
| CVE-2026-73947 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
critical | 9.8 | — | Oracle / access manager | 2026-09-15 | 2026-09-21 |
| CVE-2026-73948 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
critical | 9.9 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-21 |
| CVE-2026-73940 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
critical | 9.8 | — | Oracle / access manager | 2026-09-15 | 2026-09-21 |
| CVE-2026-71133 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
critical | 10.0 | — | Oracle / access manager | 2026-09-15 | 2026-09-21 |
| CVE-2026-71163 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
critical | 9.9 | — | Oracle / access manager | 2026-09-15 | 2026-09-21 |
| CVE-2026-70748 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / weblogic server | 2026-09-15 | 2026-09-29 |
| CVE-2026-70756 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / weblogic server | 2026-09-15 | 2026-09-28 |
| CVE-2026-70757 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / weblogic server | 2026-09-15 | 2026-09-28 |
| CVE-2026-70913 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / identity manager | 2026-09-15 | 2026-09-23 |
| CVE-2026-87289 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
high | 7.5 | — | Oracle / helidon | 2026-09-15 | 2026-09-25 |
| CVE-2026-87273 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 8.6 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87276 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.5 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87277 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.5 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87265 Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (compo... |
high | 8.1 | — | Oracle / purchasing | 2026-09-15 | 2026-09-22 |
| CVE-2026-87266 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
high | 8.2 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87268 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.8 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87269 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.8 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87270 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.8 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87271 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.8 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87272 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.8 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87254 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
high | 7.5 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-23 |
| CVE-2026-87256 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
high | 7.7 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-23 |
| CVE-2026-87257 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
high | 7.7 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-23 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.