Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

September 2026 CVE archive

Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in September 2026Materially updated (Critical / KEV)
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32

Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-89725
In the Linux kernel, the following vulnerability has been resolved: media: cec:...
high 8.8 —— 2026-09-112026-10-19
CVE-2026-89723
In the Linux kernel, the following vulnerability has been resolved: nilfs2: fix...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89720
In the Linux kernel, the following vulnerability has been resolved: ubifs: fix...
high 7.7 —— 2026-09-112026-10-19
CVE-2026-89707
In the Linux kernel, the following vulnerability has been resolved: nfsd: relea...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89709
In the Linux kernel, the following vulnerability has been resolved: lockd, nfsd...
high 8.1 —— 2026-09-112026-10-21
CVE-2026-89711
In the Linux kernel, the following vulnerability has been resolved: NFSD: remov...
high 8.2 —— 2026-09-112026-10-19
CVE-2026-89699
In the Linux kernel, the following vulnerability has been resolved: nfsd: valid...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89704
In the Linux kernel, the following vulnerability has been resolved: nfsd: sampl...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89705
In the Linux kernel, the following vulnerability has been resolved: nfsd: resto...
high 7.1 —— 2026-09-112026-10-21
CVE-2026-89706
In the Linux kernel, the following vulnerability has been resolved: nfsd: Reset...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89690
In the Linux kernel, the following vulnerability has been resolved: nfsd: defer...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89691
In the Linux kernel, the following vulnerability has been resolved: nfsd: clear...
high 7.1 —— 2026-09-112026-10-19
CVE-2026-89692
In the Linux kernel, the following vulnerability has been resolved: nfsd: clear...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89695
In the Linux kernel, the following vulnerability has been resolved: nfsd: cap d...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89696
In the Linux kernel, the following vulnerability has been resolved: nfsd: block...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89682
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix f...
high 8.1 —— 2026-09-112026-10-21
CVE-2026-89684
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix c...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89685
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix c...
high 7.5 —— 2026-09-112026-10-21
CVE-2026-89687
In the Linux kernel, the following vulnerability has been resolved: nfsd: ensur...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89678
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix p...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89679
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix n...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89680
In the Linux kernel, the following vulnerability has been resolved: nfsd: fix n...
high 7.5 —— 2026-09-112026-10-21
CVE-2026-89667
In the Linux kernel, the following vulnerability has been resolved: nfsd: close...
high 8.1 —— 2026-09-112026-10-19
CVE-2026-89668
In the Linux kernel, the following vulnerability has been resolved: nfsd: move...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89670
In the Linux kernel, the following vulnerability has been resolved: nfsd: hold...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89663
In the Linux kernel, the following vulnerability has been resolved: nfsd: revok...
high 8.8 —— 2026-09-112026-10-19
CVE-2026-89664
In the Linux kernel, the following vulnerability has been resolved: nfsd: relea...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89665
In the Linux kernel, the following vulnerability has been resolved: nfsd: rejec...
high 8.2 —— 2026-09-112026-10-19
CVE-2026-89657
In the Linux kernel, the following vulnerability has been resolved: libceph: va...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89646
In the Linux kernel, the following vulnerability has been resolved: ceph: fix l...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89647
In the Linux kernel, the following vulnerability has been resolved: ceph: do no...
high 7.5 —— 2026-09-112026-10-21
CVE-2026-89648
In the Linux kernel, the following vulnerability has been resolved: ceph: cap d...
high 7.5 —— 2026-09-112026-10-21
CVE-2026-89638
In the Linux kernel, the following vulnerability has been resolved: smb: client...
high 7.8 —— 2026-09-112026-10-21
CVE-2026-89639
In the Linux kernel, the following vulnerability has been resolved: cifs: use c...
high 7.1 —— 2026-09-112026-10-19
CVE-2026-89640
In the Linux kernel, the following vulnerability has been resolved: cifs: fix l...
high 7.1 —— 2026-09-112026-10-19
CVE-2026-89641
In the Linux kernel, the following vulnerability has been resolved: cifs: clear...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89626
In the Linux kernel, the following vulnerability has been resolved: HID: sensor...
high 8.8 —— 2026-09-112026-10-19
CVE-2026-89632
In the Linux kernel, the following vulnerability has been resolved: smb: client...
high 8.2 —— 2026-09-112026-10-21
CVE-2026-89619
In the Linux kernel, the following vulnerability has been resolved: HID: intel-...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89620
In the Linux kernel, the following vulnerability has been resolved: HID: intel-...
high 7.8 —— 2026-09-112026-10-19

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.