September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-84436 IBM Guardium Data Protection 12.2 is vulnerable to command injection in the cert... |
critical | 9.1 | — | Ibm / guardium data protection | 2026-09-29 | 2026-10-02 |
| CVE-2026-6928 IBM Concert 1.0.0 through 3.0.0 references or accesses memory after it has been... |
critical | 9.8 | — | Ibm / concert | 2026-09-23 | 2026-09-29 |
| CVE-2026-6721 IBM Concert 1.0.0 through 3.0.0 allows an unauthenticated remote attacker can su... |
critical | 9.8 | — | Ibm / concert | 2026-09-23 | 2026-09-28 |
| CVE-2026-18872 IBM Financial Transaction Manager (FTM) for RedHat OpenShift is vulnerable to st... |
critical | 9.3 | — | Ibm / financial transaction manager | 2026-09-23 | 2026-10-07 |
| CVE-2026-18162 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
critical | 9.8 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-06 |
| CVE-2026-18163 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
critical | 9.8 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-06 |
| CVE-2026-18169 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
critical | 9.9 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-06 |
| CVE-2026-17635 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
critical | 9.1 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-08 |
| CVE-2026-17618 IBM Financial Transaction Manager (FTM) for RedHat OpenShift could allow a remot... |
critical | 9.8 | — | Ibm / financial transaction manager | 2026-09-22 | 2026-10-15 |
| CVE-2026-16346 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
critical | 9.9 | — | Ibm / datastage on cloud pak for data | 2026-09-22 | 2026-10-06 |
| CVE-2026-84075 IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass securi... |
critical | 9.9 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84078 IBM Guardium Data Protection 12.2 is vulnerable to a missing authentication vuln... |
critical | 9.9 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84082 IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbit... |
critical | 9.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84031 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
critical | 9.0 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84064 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
critical | 9.9 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84073 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
critical | 9.1 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-82967 IBM Guardium Data Protection 12.2 is vulnerable to an authentication bypass that... |
critical | 9.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-82340 IBM Guardium Data Protection 12.2 is vulnerable to unauthenticated insecure dese... |
critical | 9.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-82832 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
critical | 9.6 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-80441 IBM Guardium Data Protection 12.2 is vulnerable to an unauthenticated second-ord... |
critical | 9.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-81657 IBM Guardium Data Protection 12.2 could allow a remote unauthenticated attacker... |
critical | 9.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-10027 IBM MQ could allow a remote attacker to cause a denial of service or execute arb... |
critical | 9.8 | — | Ibm / mq | 2026-09-18 | 2026-09-23 |
| CVE-2026-82107 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
critical | 9.6 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-80424 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
critical | 9.1 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-78573 IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker t... |
critical | 9.8 | — | Ibm / contextforge | 2026-09-10 | 2026-09-16 |
| CVE-2026-18221 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to gain unauthorized... |
critical | 9.8 | — | Ibm / i | 2026-09-04 | 2026-09-08 |
| CVE-2026-17207 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of... |
critical | 9.1 | — | Ibm / i | 2026-09-04 | 2026-09-08 |
| CVE-2026-17057 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote attacker to cause a denial of... |
critical | 9.1 | — | Ibm / i | 2026-09-04 | 2026-09-08 |
| CVE-2026-77822 IBM ContextForge MCP Gateway could allow a remote authenticated attacker to obta... |
critical | 9.6 | — | Ibm / contextforge | 2026-09-04 | 2026-09-15 |
| CVE-2026-84842 IBM Guardium Data Protection 12.2 is vulnerable to path traversal and arbitrary... |
high | 8.1 | — | Ibm / guardium data protection | 2026-09-29 | 2026-10-01 |
| CVE-2026-84414 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a local authenticated attacker to chang... |
high | 7.8 | — | Ibm / i | 2026-09-29 | 2026-10-02 |
| CVE-2026-84421 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-29 | 2026-10-02 |
| CVE-2026-84422 IBM Guardium Data Protection 12.2 is vulnerable to command injection in the CLI... |
high | 7.2 | — | Ibm / guardium data protection | 2026-09-29 | 2026-10-02 |
| CVE-2026-84440 IBM Guardium Data Protection 12.2 is vulnerable to command injection in the SNMP... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-29 | 2026-10-01 |
| CVE-2026-84862 IBM Guardium Data Protection 12.2 is vulnerable to insecure deserialization in t... |
high | 7.2 | — | Ibm / guardium data protection | 2026-09-25 | 2026-10-20 |
| CVE-2026-93306 IBM Server Firmware FW1120.00 through FW1120.01, FW1110.00 through FW1110.31, FW... |
high | 7.1 | — | Ibm / power system e1080 \(9080-hex\) firmware | 2026-09-25 | 2026-09-30 |
| CVE-2026-85029 IBM Guardium Data Protection 12.2 could allow a remote attacker to obtain sensit... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-25 | 2026-10-20 |
| CVE-2026-85542 IBM Guardium Data Protection 12.2 is affected by a command injection vulnerabili... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-25 | 2026-10-20 |
| CVE-2026-84884 IBM Guardium Data Protection 12.2 stores internal REST service-account passwords... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-25 | 2026-10-20 |
| CVE-2026-81552 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-24 | 2026-10-06 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.