September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-76691 Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking Edge... |
high | 7.2 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76692 A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an una... |
high | 7.1 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76693 A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an una... |
high | 7.0 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76681 A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an aut... |
high | 8.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76682 A vulnerability in the network security monitoring component of intrusion detect... |
high | 8.2 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76683 Buffer overflow vulnerabilities exist in the API endpoint of HPE Networking Edge... |
high | 8.1 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76684 Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD... |
high | 8.1 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76685 A vulnerability exists in the proxy packet processing logic of the affected comp... |
high | 8.1 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76686 A vulnerability exists in the underlying operating system of HPE Networking Edge... |
high | 7.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76687 A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchest... |
high | 7.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76688 Vulnerabilities have been identified in the web-based management interface of Ed... |
high | 7.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76689 A vulnerability exists in the configuration processing logic of the affected com... |
high | 7.2 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76676 Buffer overflow vulnerabilities exist in the underlying operating system of Edge... |
high | 8.8 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76677 A privilege escalation vulnerability exists in the API of EdgeConnect SD-WAN Gat... |
high | 8.8 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76678 A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateway... |
high | 8.8 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76679 Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an una... |
high | 8.6 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76680 Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remo... |
high | 8.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-73959 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
high | 8.8 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-21 |
| CVE-2026-73960 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.5 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-73966 Vulnerability in the Siebel Apps - Marketing product of Oracle Siebel CRM (compo... |
high | 7.2 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-73949 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
high | 8.8 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-22 |
| CVE-2026-73951 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
high | 8.1 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-22 |
| CVE-2026-73954 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 8.1 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-73955 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.3 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-73958 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
high | 8.1 | — | Oracle / access manager | 2026-09-15 | 2026-09-21 |
| CVE-2026-73941 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
high | 8.6 | — | Oracle / access manager | 2026-09-15 | 2026-09-21 |
| CVE-2026-73942 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware... |
high | 8.8 | — | Oracle / identity manager | 2026-09-15 | 2026-09-22 |
| CVE-2026-73943 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware... |
high | 7.6 | — | Oracle / identity manager | 2026-09-15 | 2026-09-22 |
| CVE-2026-73926 Vulnerability in the Oracle Access Manager product of Oracle Fusion Middleware (... |
high | 8.7 | — | Oracle / access manager | 2026-09-15 | 2026-09-21 |
| CVE-2026-73458 On affected platforms running Arista EOS with authenticated Bidirectional Forwar... |
high | 8.2 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-70915 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware... |
high | 8.8 | — | Oracle / identity manager | 2026-09-15 | 2026-09-23 |
| CVE-2026-71047 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware... |
high | 8.8 | — | Oracle / identity manager | 2026-09-15 | 2026-09-22 |
| CVE-2026-69217 Http4s is a Scala interface for HTTP services. |
high | 8.7 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-69218 Http4s is a Scala interface for HTTP services. |
high | 7.5 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-69210 Http4s is a Scala interface for HTTP services. |
high | 7.5 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-69203 Http4s is a Scala interface for HTTP services. |
high | 7.5 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-69205 Http4s is a Scala interface for HTTP services. |
high | 8.7 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-69202 Http4s is a Scala interface for HTTP services. |
high | 7.5 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-51134 The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable... |
high | 7.5 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-18424 Concrete CMS 9.0.0 to 9.5.2 is vulnerable to Server-Side Request Forgery iremote... |
high | 7.1 | — | Concretecms / concrete cms | 2026-09-15 | 2026-09-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.