September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-87274 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
medium | 4.4 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87275 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
medium | 4.6 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87278 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
medium | 6.1 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87279 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
medium | 6.1 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87280 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
medium | 4.2 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87267 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
medium | 5.3 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87253 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
medium | 6.1 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-23 |
| CVE-2026-87248 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
medium | 6.7 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-21 |
| CVE-2026-87252 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
medium | 6.8 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-23 |
| CVE-2026-83488 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
medium | 5.4 | — | Oracle / helidon | 2026-09-15 | 2026-09-25 |
| CVE-2026-83491 Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (com... |
medium | 6.8 | — | Oracle / irecruitment | 2026-09-15 | 2026-09-22 |
| CVE-2026-83480 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Web... |
medium | 5.3 | — | Oracle / helidon | 2026-09-15 | 2026-09-25 |
| CVE-2026-83458 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: JSO... |
medium | 5.3 | — | Oracle / helidon | 2026-09-15 | 2026-09-28 |
| CVE-2026-83459 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
medium | 5.3 | — | Oracle / helidon | 2026-09-15 | 2026-09-28 |
| CVE-2026-83460 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA... |
medium | 6.5 | — | Oracle / helidon | 2026-09-15 | 2026-09-25 |
| CVE-2026-83441 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (comp... |
medium | 6.8 | — | Oracle / product hub | 2026-09-15 | 2026-09-22 |
| CVE-2026-83443 Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component... |
medium | 6.5 | — | Oracle / e-business suite | 2026-09-15 | 2026-10-09 |
| CVE-2026-83431 Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite... |
medium | 5.4 | — | Oracle / product workbench | 2026-09-15 | 2026-10-08 |
| CVE-2026-83433 Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (com... |
medium | 6.5 | — | Oracle / e-business suite | 2026-09-15 | 2026-10-09 |
| CVE-2026-83416 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo... |
medium | 4.3 | — | Oracle / coherence | 2026-09-15 | 2026-09-21 |
| CVE-2026-83109 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
medium | 5.3 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
| CVE-2026-83097 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
medium | 6.5 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
| CVE-2026-83077 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM... |
medium | 6.4 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-22 |
| CVE-2026-73965 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
medium | 6.8 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-22 |
| CVE-2026-87284 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
low | 3.2 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87281 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
low | 3.2 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-83369 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
low | 3.1 | — | Oracle / access manager | 2026-09-15 | 2026-09-21 |
| CVE-2026-83413 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo... |
low | 1.9 | — | Oracle / coherence | 2026-09-15 | 2026-09-22 |
| CVE-2026-83414 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo... |
low | 2.5 | — | Oracle / coherence | 2026-09-15 | 2026-09-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.