September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-17443 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.... |
medium | 6.5 | — | Ibm / app connect enterprise | 2026-09-04 | 2026-09-09 |
| CVE-2026-17444 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.... |
medium | 6.5 | — | Ibm / app connect enterprise | 2026-09-04 | 2026-09-10 |
| CVE-2026-17469 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to cause... |
medium | 5.5 | — | Ibm / i | 2026-09-04 | 2026-09-09 |
| CVE-2026-17259 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to caus... |
medium | 6.5 | — | Ibm / i | 2026-09-04 | 2026-09-08 |
| CVE-2026-17270 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local attacker to cause a denial of s... |
medium | 5.5 | — | Ibm / i | 2026-09-04 | 2026-09-10 |
| CVE-2026-17273 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to caus... |
medium | 6.5 | — | Ibm / i | 2026-09-04 | 2026-09-10 |
| CVE-2026-17274 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypa... |
medium | 5.4 | — | Ibm / i | 2026-09-04 | 2026-09-09 |
| CVE-2026-17440 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.... |
medium | 5.5 | — | Ibm / app connect enterprise | 2026-09-04 | 2026-09-09 |
| CVE-2026-16660 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a remote attacker to cause a... |
medium | 5.3 | — | Ibm / db2 mirror for i | 2026-09-04 | 2026-09-10 |
| CVE-2026-16689 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.... |
medium | 5.5 | — | Ibm / app connect enterprise | 2026-09-04 | 2026-09-08 |
| CVE-2026-16693 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to obta... |
medium | 4.9 | — | Ibm / i | 2026-09-04 | 2026-09-08 |
| CVE-2026-16892 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypa... |
medium | 5.4 | — | Ibm / i | 2026-09-04 | 2026-09-08 |
| CVE-2026-16941 IBM i 7.6, 7.5, and 7.4 could allow a remote authenticated attacker to modify ce... |
medium | 4.3 | — | Ibm / i | 2026-09-04 | 2026-09-10 |
| CVE-2026-16180 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.... |
medium | 5.7 | — | Ibm / app connect enterprise | 2026-09-04 | 2026-09-09 |
| CVE-2026-19649 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.... |
medium | 5.5 | — | Ibm / app connect enterprise | 2026-09-04 | 2026-09-09 |
| CVE-2026-18858 IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain informat... |
medium | 5.5 | — | Ibm / i | 2026-09-04 | 2026-09-08 |
| CVE-2026-18887 IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to obtain sen... |
medium | 6.5 | — | Ibm / i | 2026-09-04 | 2026-09-08 |
| CVE-2026-18567 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain in... |
medium | 4.7 | — | Ibm / db2 mirror for i | 2026-09-04 | 2026-09-08 |
| CVE-2026-9036 IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or impro... |
medium | 5.9 | — | Ibm / netezza performance server | 2026-09-03 | 2026-09-10 |
| CVE-2026-9736 IBM Netezza Software 11.3.0.3 through Interim Fix 002 could allow an unauthorize... |
medium | 4.3 | — | Ibm / netezza performance server | 2026-09-03 | 2026-09-10 |
| CVE-2026-9744 IBM Netezza Software 11.3.0.3 through Interim Fix 002 does not validate or impro... |
medium | 5.9 | — | Ibm / netezza performance server | 2026-09-03 | 2026-09-10 |
| CVE-2026-9745 IBM Netezza Software 11.3.0.3 through Interim Fix 002 has operations that are pe... |
medium | 6.5 | — | Ibm / netezza performance server | 2026-09-03 | 2026-09-10 |
| CVE-2026-19492 IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31,... |
low | 3.2 | — | Ibm / power system s1122 \(9824-22a\) firmware | 2026-09-24 | 2026-09-30 |
| CVE-2026-17511 IBM PowerVM Hypervisor FW1120.00 through FW1120.01, FW1110.00 through FW1110.31,... |
low | 3.4 | — | Ibm / power system s1122 \(9824-22a\) firmware | 2026-09-24 | 2026-09-30 |
| CVE-2026-18104 IBM Db2 Mirror for i 7.6, 7.5, and 7.4 could allow a local attacker to obtain se... |
low | 3.3 | — | Ibm / db2 mirror for i | 2026-09-24 | 2026-09-29 |
| CVE-2026-18857 IBM OPENBMC FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, and FW1060... |
low | 3.4 | — | Ibm / power system s1122 \(9824-22a\) firmware | 2026-09-24 | 2026-09-30 |
| CVE-2026-4921 IBM Guardium Data Protection 12.2 could allow an administrative user to obtain s... |
low | 2.7 | — | Ibm / guardium data protection | 2026-09-23 | 2026-10-20 |
| CVE-2026-18173 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
low | 3.7 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-07 |
| CVE-2026-17483 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 IBM i could allow a local attacker to del... |
low | 3.3 | — | Ibm / db2 mirror for i | 2026-09-04 | 2026-09-10 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.