Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

September 2026 CVE archive

Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in September 2026Materially updated (Critical / KEV)
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32

Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-89622
In the Linux kernel, the following vulnerability has been resolved: HID: mcp222...
high 7.8 —— 2026-09-112026-10-21
CVE-2026-89624
In the Linux kernel, the following vulnerability has been resolved: HID: univer...
high 7.8 —— 2026-09-112026-10-21
CVE-2026-89615
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: b...
high 8.4 —— 2026-09-112026-10-19
CVE-2026-89616
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: f...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89617
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: v...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89602
In the Linux kernel, the following vulnerability has been resolved: erofs: skip...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89605
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: r...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89606
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: r...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89607
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: r...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89608
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: p...
high 7.1 —— 2026-09-112026-10-19
CVE-2026-89609
In the Linux kernel, the following vulnerability has been resolved: ecryptfs: h...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89594
In the Linux kernel, the following vulnerability has been resolved: hsi: omap_s...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89596
In the Linux kernel, the following vulnerability has been resolved: forcedeth:...
high 7.1 —— 2026-09-112026-10-19
CVE-2026-89597
In the Linux kernel, the following vulnerability has been resolved: fbdev: uves...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89599
In the Linux kernel, the following vulnerability has been resolved: fbdev: omap...
high 8.4 —— 2026-09-112026-10-19
CVE-2026-89600
In the Linux kernel, the following vulnerability has been resolved: fanotify: f...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89601
In the Linux kernel, the following vulnerability has been resolved: ext2: Fix l...
high 8.8 —— 2026-09-112026-10-21
CVE-2026-89586
In the Linux kernel, the following vulnerability has been resolved: ata: libata...
high 8.2 —— 2026-09-112026-10-19
CVE-2026-89587
In the Linux kernel, the following vulnerability has been resolved: ACPI: pfr_u...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89588
In the Linux kernel, the following vulnerability has been resolved: ACPI: APEI:...
high 8.4 —— 2026-09-112026-10-19
CVE-2026-89593
In the Linux kernel, the following vulnerability has been resolved: hugetlb: on...
high 7.1 —— 2026-09-112026-10-19
CVE-2026-89579
In the Linux kernel, the following vulnerability has been resolved: bpf: Harden...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89580
In the Linux kernel, the following vulnerability has been resolved: bpf: Disabl...
high 7.8 —— 2026-09-112026-10-21
CVE-2026-89581
In the Linux kernel, the following vulnerability has been resolved: bpf, x86: F...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89583
In the Linux kernel, the following vulnerability has been resolved: Bluetooth:...
high 8.1 —— 2026-09-112026-10-19
CVE-2026-89584
In the Linux kernel, the following vulnerability has been resolved: block: vali...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89585
In the Linux kernel, the following vulnerability has been resolved: auxdisplay:...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89570
In the Linux kernel, the following vulnerability has been resolved: cxl/mce: Ma...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89571
In the Linux kernel, the following vulnerability has been resolved: cxl/feature...
high 7.1 —— 2026-09-112026-10-19
CVE-2026-89573
In the Linux kernel, the following vulnerability has been resolved: dm array: r...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89574
In the Linux kernel, the following vulnerability has been resolved: dm array: v...
high 7.8 —— 2026-09-112026-10-21
CVE-2026-89562
In the Linux kernel, the following vulnerability has been resolved: ip6_gre: fi...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89563
In the Linux kernel, the following vulnerability has been resolved: ip6_tunnel:...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89564
In the Linux kernel, the following vulnerability has been resolved: ip: orphan...
high 7.8 —— 2026-09-112026-10-21
CVE-2026-89569
In the Linux kernel, the following vulnerability has been resolved: Bluetooth:...
high 8.8 —— 2026-09-112026-10-19
CVE-2026-89554
In the Linux kernel, the following vulnerability has been resolved: mptcp: fix...
high 8.2 —— 2026-09-112026-10-19
CVE-2026-89557
In the Linux kernel, the following vulnerability has been resolved: md: do over...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89559
In the Linux kernel, the following vulnerability has been resolved: libnvdimm/l...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89560
In the Linux kernel, the following vulnerability has been resolved: landlock: R...
high 8.4 —— 2026-09-112026-10-19
CVE-2026-89561
In the Linux kernel, the following vulnerability has been resolved: ipv6: rpl:...
high 7.5 —— 2026-09-112026-10-21

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.