September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-76708 A vulnerability exists in the Analytics and Location Engine (ALE) where the appl... |
critical | 9.8 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-25 |
| CVE-2026-76709 A vulnerability exists in the internal administrative component of Analytics and... |
critical | 9.8 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-28 |
| CVE-2026-76673 Vulnerabilities have been identified in the API of EdgeConnect SD-WAN Orchestrat... |
critical | 9.8 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76674 Buffer overflow vulnerabilities exist in the underlying operating system of HPE... |
critical | 9.8 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76675 A command injection vulnerability exists in the command line interface of EdgeCo... |
critical | 9.1 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76669 Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConn... |
critical | 9.9 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76670 Privilege escalation vulnerabilities exist in the API of HPE Networking EdgeConn... |
critical | 9.9 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76672 A vulnerability exists in the SD-WAN Orchestrator that may lead to the exposure... |
critical | 9.9 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76658 A vulnerability has been identified in the SSH daemon of HPE Networking Fabric C... |
critical | 10.0 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-76657 Vulnerabilities have been identified in the API of HPE Networking Fabric Compose... |
critical | 10.0 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73700 A vulnerability in the web-based management interface of HPE Networking Fabric C... |
critical | 9.0 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73701 An unauthenticated remote code execution vulnerability exists in the underlying... |
critical | 9.0 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-19766 An authentication bypass vulnerability exists in the underlying operating system... |
critical | 9.6 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-04 |
| CVE-2026-76712 A vulnerability exists in the Analytics and Location Engine (ALE) that may allow... |
high | 7.3 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-28 |
| CVE-2026-76713 A vulnerability exists in the maintenance restore functionality of Analytics and... |
high | 7.2 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-28 |
| CVE-2026-76714 Vulnerabilities in the Analytics and Location Engine web interface allows remote... |
high | 7.2 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-28 |
| CVE-2026-76715 A vulnerability in an administrative component of Analytics and Location Engine... |
high | 7.1 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-28 |
| CVE-2026-76710 A vulnerability exists in the Analytics and Location Engine (ALE) management int... |
high | 7.5 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-28 |
| CVE-2026-76711 A vulnerability exists in an Analytics and Location Engine (ALE) component where... |
high | 7.5 | — | Arubanetworks / analytics and location engine | 2026-09-22 | 2026-09-28 |
| CVE-2026-76690 A vulnerability exists in a component of the HPE Networking EdgeConnect SD-WAN G... |
high | 7.2 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76691 Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking Edge... |
high | 7.2 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76692 A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an una... |
high | 7.1 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76693 A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an una... |
high | 7.0 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76681 A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an aut... |
high | 8.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76682 A vulnerability in the network security monitoring component of intrusion detect... |
high | 8.2 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76683 Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking Edge... |
high | 8.1 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76684 Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD... |
high | 8.1 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76685 A vulnerability exists in the proxy packet processing logic of the affected comp... |
high | 8.1 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76686 A vulnerability exists in the underlying operating system of HPE Networking Edge... |
high | 7.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76687 A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchest... |
high | 7.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76688 Vulnerabilities have been identified in the web-based management interface of Ed... |
high | 7.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76689 A vulnerability exists in the configuration processing logic of the affected com... |
high | 7.2 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76676 Buffer overflow vulnerabilities exist in the underlying operating system of Edge... |
high | 8.8 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76677 A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gat... |
high | 8.8 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76678 A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateway... |
high | 8.8 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76679 Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an una... |
high | 8.6 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76680 Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remo... |
high | 8.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-73725 A local privilege-escalation vulnerability has been discovered in HPE Networking... |
high | 7.0 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73716 A remote code execution vulnerability exists in the underlying operating system... |
high | 7.5 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
| CVE-2026-73717 A command injection vulnerability exists in the web-based management interface o... |
high | 7.5 | — | Arubanetworks / fabric composer | 2026-09-01 | 2026-09-02 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.