September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-75682 Adobe Connect is affected by an Improper Neutralization of Special Elements used... |
critical | 9.9 | — | Adobe / connect | 2026-09-22 | 2026-09-25 |
| CVE-2026-75684 Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability t... |
critical | 9.3 | — | Adobe / connect | 2026-09-22 | 2026-09-26 |
| CVE-2026-75686 Adobe Connect is affected by an Improper Input Validation vulnerability that cou... |
critical | 9.3 | — | Adobe / connect | 2026-09-22 | 2026-09-25 |
| CVE-2026-75689 Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability t... |
critical | 9.3 | — | Adobe / connect | 2026-09-22 | 2026-09-26 |
| CVE-2026-75697 Adobe Connect is affected by a stored Cross-Site Scripting (XSS) vulnerability t... |
critical | 9.3 | — | Adobe / connect | 2026-09-22 | 2026-09-25 |
| CVE-2026-75698 Adobe Connect is affected by a reflected Cross-Site Scripting (XSS) vulnerabilit... |
critical | 9.3 | — | Adobe / connect | 2026-09-22 | 2026-09-25 |
| CVE-2026-89275 Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of... |
critical | 10.0 | — | Adobe / campaign | 2026-09-22 | 2026-09-23 |
| CVE-2026-89276 Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of... |
critical | 9.9 | — | Adobe / campaign | 2026-09-22 | 2026-09-26 |
| CVE-2026-83660 Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF)... |
critical | 10.0 | — | Adobe / campaign | 2026-09-22 | 2026-09-26 |
| CVE-2026-84412 Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of... |
critical | 10.0 | — | Adobe / campaign | 2026-09-22 | 2026-09-23 |
| CVE-2026-82008 Adobe Campaign Classic (ACC) is affected by an Improper Input Validation vulnera... |
critical | 9.9 | — | Adobe / campaign | 2026-09-22 | 2026-09-23 |
| CVE-2026-82009 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia... |
critical | 9.1 | — | Adobe / campaign | 2026-09-22 | 2026-09-26 |
| CVE-2026-82010 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia... |
critical | 9.9 | — | Adobe / campaign | 2026-09-22 | 2026-09-23 |
| CVE-2026-82011 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia... |
critical | 9.1 | — | Adobe / campaign | 2026-09-22 | 2026-09-24 |
| CVE-2026-82013 Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF)... |
critical | 9.9 | — | Adobe / campaign | 2026-09-22 | 2026-09-26 |
| CVE-2026-82443 Adobe Campaign Classic (ACC) is affected by a Server-Side Request Forgery (SSRF)... |
critical | 9.9 | — | Adobe / campaign | 2026-09-22 | 2026-09-23 |
| CVE-2026-75721 Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of... |
critical | 10.0 | — | Adobe / campaign | 2026-09-22 | 2026-09-26 |
| CVE-2026-75723 Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerabi... |
critical | 10.0 | — | Adobe / campaign | 2026-09-22 | 2026-09-23 |
| CVE-2026-75728 Adobe Campaign Classic (ACC) is affected by an Incorrect Authorization vulnerabi... |
critical | 9.1 | — | Adobe / campaign | 2026-09-22 | 2026-09-24 |
| CVE-2026-73369 Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of... |
critical | 10.0 | — | Adobe / campaign | 2026-09-22 | 2026-09-24 |
| CVE-2026-75699 Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of... |
critical | 10.0 | — | Adobe / campaign | 2026-09-22 | 2026-09-26 |
| CVE-2026-75703 Adobe Campaign Classic (ACC) is affected by an Improper Control of Generation of... |
critical | 10.0 | — | Adobe / campaign | 2026-09-22 | 2026-09-23 |
| CVE-2026-75746 ColdFusion is affected by an Improper Neutralization of Special Elements used in... |
critical | 9.1 | — | Adobe / coldfusion | 2026-09-08 | 2026-09-18 |
| CVE-2026-48273 ColdFusion is affected by an Improper Neutralization of Directives in Dynamicall... |
critical | 9.9 | — | Adobe / coldfusion | 2026-09-08 | 2026-09-14 |
| CVE-2026-19232 Adobe Experience Manager is affected by an Incorrect Authorization vulnerability... |
critical | 9.9 | — | Adobe / experience manager | 2026-09-08 | 2026-09-11 |
| CVE-2026-82004 Adobe Campaign Classic (ACC) is affected by an Improper Neutralization of Specia... |
critical | 10.0 | — | Adobe / campaign | 2026-09-08 | 2026-09-11 |
| CVE-2026-76200 Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability... |
critical | 9.3 | — | Adobe / magento | 2026-09-08 | 2026-09-09 |
| CVE-2026-76201 Adobe Commerce is affected by a stored Cross-Site Scripting (XSS) vulnerability... |
critical | 9.3 | — | Adobe / commerce | 2026-09-08 | 2026-09-09 |
| CVE-2026-83963 Substance3D - Modeler is affected by an out-of-bounds write vulnerability that c... |
high | 7.8 | — | Adobe / substance 3d modeler | 2026-09-22 | 2026-09-25 |
| CVE-2026-83964 Adobe Connect is affected by an Improper Certificate Validation vulnerability th... |
high | 7.5 | — | Adobe / connect | 2026-09-22 | 2026-09-26 |
| CVE-2026-81998 Substance3D - Modeler is affected by an out-of-bounds write vulnerability that c... |
high | 7.8 | — | Adobe / substance 3d modeler | 2026-09-22 | 2026-09-25 |
| CVE-2026-83962 Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability... |
high | 7.8 | — | Adobe / substance 3d modeler | 2026-09-22 | 2026-09-25 |
| CVE-2026-79906 Substance3D - Modeler is affected by an out-of-bounds write vulnerability that c... |
high | 7.8 | — | Adobe / substance 3d modeler | 2026-09-22 | 2026-09-25 |
| CVE-2026-75676 Bridge is affected by a Stack-based Buffer Overflow vulnerability that could res... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-75649 Bridge is affected by a Heap-based Buffer Overflow vulnerability that could resu... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-24 |
| CVE-2026-75655 Bridge is affected by an Uncontrolled Recursion vulnerability that could result... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-75658 Bridge is affected by an out-of-bounds write vulnerability that could result in... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-75663 Bridge is affected by an out-of-bounds write vulnerability that could result in... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-75665 Bridge is affected by a Heap-based Buffer Overflow vulnerability that could resu... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-75632 CAI Content Credentials is affected by an Uncontrolled Resource Consumption vuln... |
high | 7.5 | — | Adobe / c2pa | 2026-09-22 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.