September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-77109 Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul... |
high | 8.6 | — | Adobe / commerce | 2026-09-08 | 2026-09-09 |
| CVE-2026-77110 Adobe Commerce is affected by an Improper Limitation of a Pathname to a Restrict... |
high | 7.6 | — | Adobe / commerce | 2026-09-08 | 2026-09-10 |
| CVE-2026-77111 Adobe Commerce is affected by an Incorrect Authorization vulnerability that coul... |
high | 8.7 | — | Adobe / commerce | 2026-09-08 | 2026-09-11 |
| CVE-2026-76191 Animate is affected by an Improper Control of Generation of Code ('Code Injectio... |
high | 8.2 | — | Adobe / animate | 2026-09-08 | 2026-09-15 |
| CVE-2026-76196 Photoshop Mobile is affected by a Session Fixation vulnerability that could resu... |
high | 7.4 | — | Adobe / photoshop mobile | 2026-09-08 | 2026-09-09 |
| CVE-2026-83959 Substance3D - Sampler is affected by a Heap-based Buffer Overflow vulnerability... |
high | 7.8 | — | Adobe / substance 3d sampler | 2026-09-03 | 2026-09-08 |
| CVE-2026-83961 ColdFusion is affected by an Improper Authentication vulnerability that could re... |
high | 7.1 | — | Adobe / coldfusion | 2026-09-03 | 2026-09-09 |
| CVE-2026-89277 CAI Content Credentials is affected by an Integer Overflow or Wraparound vulnera... |
medium | 5.5 | — | Adobe / c2pa | 2026-09-22 | 2026-10-15 |
| CVE-2026-76194 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
medium | 4.3 | — | Adobe / c2pa | 2026-09-22 | 2026-10-15 |
| CVE-2026-75638 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
medium | 6.5 | — | Adobe / c2pa | 2026-09-22 | 2026-10-15 |
| CVE-2026-75656 Bridge is affected by an out-of-bounds read vulnerability that could lead to dis... |
medium | 5.5 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-75633 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
medium | 5.5 | — | Adobe / c2pa | 2026-09-22 | 2026-10-15 |
| CVE-2026-75634 CAI Content Credentials is affected by an Improper Input Validation vulnerabilit... |
medium | 4.3 | — | Adobe / c2pa | 2026-09-22 | 2026-10-15 |
| CVE-2026-48361 Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability t... |
medium | 6.1 | — | Adobe / connect | 2026-09-22 | 2026-09-25 |
| CVE-2026-81993 Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that co... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81994 Acrobat Reader is affected by an Improperly Controlled Modification of Object Pr... |
medium | 6.3 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81997 Acrobat Reader is affected by an Incorrect Authorization vulnerability that coul... |
medium | 6.3 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-82001 Acrobat Reader is affected by an Uncontrolled Resource Consumption vulnerability... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-11 |
| CVE-2026-81991 Acrobat Reader is affected by an out-of-bounds read vulnerability that could lea... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81977 Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerab... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-11 |
| CVE-2026-81978 Acrobat Reader is affected by an out-of-bounds read vulnerability that could lea... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81982 Acrobat Reader is affected by an out-of-bounds read vulnerability that could lea... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-11 |
| CVE-2026-81984 Acrobat Reader is affected by a Use After Free vulnerability that could lead to... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-80160 Acrobat Reader is affected by an out-of-bounds read vulnerability that could lea... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-80162 Acrobat Reader is affected by a Use After Free vulnerability that could lead to... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-79910 Acrobat Reader is affected by an out-of-bounds read vulnerability that could lea... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-80159 Acrobat Reader is affected by an Untrusted Search Path vulnerability that could... |
medium | 4.0 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-79905 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-10 |
| CVE-2026-76002 ColdFusion is affected by a reflected Cross-Site Scripting (XSS) vulnerability. |
medium | 6.1 | — | Adobe / coldfusion | 2026-09-08 | 2026-09-18 |
| CVE-2026-76000 ColdFusion is affected by an Uncontrolled Resource Consumption vulnerability tha... |
medium | 6.5 | — | Adobe / coldfusion | 2026-09-08 | 2026-09-18 |
| CVE-2026-75742 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-10 |
| CVE-2026-75734 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-10 |
| CVE-2026-75735 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-11 |
| CVE-2026-75736 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-10 |
| CVE-2026-75737 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-10 |
| CVE-2026-75738 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-11 |
| CVE-2026-75739 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-10 |
| CVE-2026-75740 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-11 |
| CVE-2026-75741 Adobe Experience Manager is affected by a stored Cross-Site Scripting (XSS) vuln... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-10 |
| CVE-2026-75722 Adobe Experience Manager is affected by a DOM-based Cross-Site Scripting (XSS) v... |
medium | 5.4 | — | Adobe / experience manager | 2026-09-08 | 2026-09-11 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.