Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

September 2026 CVE archive

Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in September 2026Materially updated (Critical / KEV)
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32

Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-83293
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 7.8 —— 2026-09-152026-09-17
CVE-2026-83294
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 7.8 —— 2026-09-152026-09-17
CVE-2026-83295
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 7.5 —— 2026-09-152026-09-17
CVE-2026-83296
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 7.5 —— 2026-09-152026-09-17
CVE-2026-83297
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:...
high 8.1 —— 2026-09-152026-09-18
CVE-2026-83298
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:...
high 7.2 —— 2026-09-152026-09-17
CVE-2026-83299
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 8.1 —— 2026-09-152026-09-17
CVE-2026-83300
Vulnerability in the Oracle XML Gateway product of Oracle E-Business Suite (comp...
high 7.1 —— 2026-09-152026-09-22
CVE-2026-83301
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 8.8 —— 2026-09-152026-09-17
CVE-2026-83284
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:...
high 8.6 —— 2026-09-152026-09-21
CVE-2026-83285
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 8.3 —— 2026-09-152026-09-18
CVE-2026-83286
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 8.1 —— 2026-09-152026-09-17
CVE-2026-83287
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 7.7 —— 2026-09-152026-09-22
CVE-2026-83288
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 7.8 —— 2026-09-152026-09-17
CVE-2026-83289
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 7.5 —— 2026-09-152026-09-17
CVE-2026-83290
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 7.8 —— 2026-09-152026-09-17
CVE-2026-83291
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 7.8 —— 2026-09-152026-09-17
CVE-2026-83292
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 7.5 —— 2026-09-152026-09-17
CVE-2026-83276
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel...
high 7.5 —Oracle / helidon 2026-09-152026-09-28
CVE-2026-83277
Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Ch...
high 7.3 —— 2026-09-152026-09-22
CVE-2026-83280
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel...
high 7.5 —Oracle / helidon 2026-09-152026-09-28
CVE-2026-83281
Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel...
high 7.5 —Oracle / helidon 2026-09-152026-09-28
CVE-2026-83267
Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:...
high 8.5 —— 2026-09-152026-09-21
CVE-2026-83270
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 7.5 —— 2026-09-152026-09-21
CVE-2026-83271
Vulnerability in the RDBMS component of Oracle Database Server.
high 8.8 —— 2026-09-152026-09-17
CVE-2026-83272
Vulnerability in the Oracle Text component of Oracle Database Server.
high 8.5 —— 2026-09-152026-09-17
CVE-2026-83273
Vulnerability in the Oracle Business Intelligence Enterprise Edition product of...
high 7.2 —— 2026-09-152026-09-17
CVE-2026-83258
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience...
high 8.1 —— 2026-09-152026-09-17
CVE-2026-83259
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience...
high 7.1 —— 2026-09-152026-09-21
CVE-2026-83262
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply...
high 7.5 —— 2026-09-152026-09-17
CVE-2026-83263
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply...
high 7.5 —— 2026-09-152026-09-17
CVE-2026-83264
Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply...
high 8.4 —— 2026-09-152026-09-18
CVE-2026-83265
Vulnerability in the Oracle Web Services Manager product of Oracle Fusion Middle...
high 8.2 —— 2026-09-152026-09-21
CVE-2026-83266
Vulnerability in the Oracle JDeveloper product of Oracle Fusion Middleware (comp...
high 8.2 —— 2026-09-152026-09-21
CVE-2026-83249
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience...
high 7.8 —— 2026-09-152026-09-17
CVE-2026-83252
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience...
high 7.0 —— 2026-09-152026-09-21
CVE-2026-83253
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience...
high 7.8 —— 2026-09-152026-09-17
CVE-2026-83254
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience...
high 8.1 —— 2026-09-152026-09-17
CVE-2026-83255
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience...
high 8.1 —— 2026-09-152026-09-17
CVE-2026-83256
Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience...
high 8.1 —— 2026-09-152026-09-17

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.