Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

September 2026 CVE archive

Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in September 2026Materially updated (Critical / KEV)
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32

Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-73737
An unauthenticated path traversal vulnerability exists in the API endpoint of HP...
medium 4.8 —Arubanetworks / fabric composer 2026-09-012026-09-03
CVE-2026-73738
A vulnerability in the underlying operating system of HPE Networking Fabric Comp...
medium 4.7 —Arubanetworks / fabric composer 2026-09-012026-09-03
CVE-2026-73739
A vulnerability exists in the API of HPE Networking Fabric Composer that allows...
medium 4.4 —Arubanetworks / fabric composer 2026-09-012026-09-03
CVE-2026-73740
A local privilege escalation vulnerability in HPE Networking Fabric Composer cou...
medium 4.4 —Arubanetworks / fabric composer 2026-09-012026-09-03
CVE-2026-73741
A vulnerability in the API of HPE Networking Fabric Composer could allow an auth...
medium 4.3 —Arubanetworks / fabric composer 2026-09-012026-09-03
CVE-2026-73742
A vulnerability in an API endpoint of HPE Networking Fabric Composer could allow...
medium 4.3 —Arubanetworks / fabric composer 2026-09-012026-09-03
CVE-2026-73726
A vulnerability has been identified in the underlying operating system of HPE Ne...
medium 6.8 —Arubanetworks / fabric composer 2026-09-012026-09-02
CVE-2026-73727
Vulnerabilities in the API of HPE Networking Fabric Composer could allow an auth...
medium 6.5 —Arubanetworks / fabric composer 2026-09-012026-09-02
CVE-2026-73728
Denial-of-service vulnerabilities exist in the API of HPE Networking Fabric Comp...
medium 6.5 —Arubanetworks / fabric composer 2026-09-012026-09-03
CVE-2026-73729
A vulnerability in the underlying operating system of HPE Networking Fabric Comp...
medium 6.5 —Arubanetworks / fabric composer 2026-09-012026-09-03
CVE-2026-73730
A privilege escalation vulnerability exists in the API of HPE Networking Fabric...
medium 6.5 —Arubanetworks / fabric composer 2026-09-012026-09-03
CVE-2026-73731
A vulnerability in the web-based management interface of HPE Networking Fabric C...
medium 6.1 —Arubanetworks / fabric composer 2026-09-012026-09-03
CVE-2026-73732
A vulnerability in the underlying operating system of HPE Networking Fabric Comp...
medium 5.6 —Arubanetworks / fabric composer 2026-09-012026-09-03
CVE-2026-73733
Authentication bypasses in the API of HPE Networking Fabric Composer could allow...
medium 5.4 —Arubanetworks / fabric composer 2026-09-012026-09-03
CVE-2026-73744
A denial-of-service vulnerability exists in the web-based management interface o...
low 3.5 —Arubanetworks / fabric composer 2026-09-012026-09-02
CVE-2026-73745
A vulnerability in the API endpoint of HPE Networking Fabric Composer could allo...
low 3.1 —Arubanetworks / fabric composer 2026-09-012026-09-02
CVE-2026-73746
A denial-of-service vulnerability exists in the API of HPE Networking Fabric Com...
low 3.1 —Arubanetworks / fabric composer 2026-09-012026-09-02
CVE-2026-73747
A local privilege-escalation vulnerability has been discovered in HPE Networking...
low 2.5 —Arubanetworks / fabric composer 2026-09-012026-09-02
CVE-2026-73748
A vulnerability in the affected interface of HPE Networking Fabric Composer allo...
low 2.2 —Arubanetworks / fabric composer 2026-09-012026-09-02
CVE-2026-73743
A vulnerability in the web-based management interface of HPE Networking Fabric C...
low 3.7 —Arubanetworks / fabric composer 2026-09-012026-09-03

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.