Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

September 2026 CVE archive

Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in September 2026Materially updated (Critical / KEV)
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32

Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-89547
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: Che...
high 8.1 —— 2026-09-112026-10-19
CVE-2026-89548
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: alw...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89549
In the Linux kernel, the following vulnerability has been resolved: sunrpc: rou...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89553
In the Linux kernel, the following vulnerability has been resolved: nouveau/gem...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89540
In the Linux kernel, the following vulnerability has been resolved: sunrpc: ini...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89544
In the Linux kernel, the following vulnerability has been resolved: SUNRPC: fix...
high 7.5 —— 2026-09-112026-10-21
CVE-2026-89545
In the Linux kernel, the following vulnerability has been resolved: sunrpc: def...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89534
In the Linux kernel, the following vulnerability has been resolved: svcrdma: Cl...
high 8.8 —— 2026-09-112026-10-21
CVE-2026-89535
In the Linux kernel, the following vulnerability has been resolved: svcrdma: Re...
high 8.1 —— 2026-09-112026-10-19
CVE-2026-89523
In the Linux kernel, the following vulnerability has been resolved: wifi: mt76:...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89524
In the Linux kernel, the following vulnerability has been resolved: wifi: ath6k...
high 8.1 —— 2026-09-112026-10-19
CVE-2026-89528
In the Linux kernel, the following vulnerability has been resolved: svcrdma: Re...
high 7.5 —— 2026-09-112026-10-21
CVE-2026-89520
In the Linux kernel, the following vulnerability has been resolved: sched/core:...
high 7.8 —— 2026-09-112026-10-21
CVE-2026-89521
In the Linux kernel, the following vulnerability has been resolved: sched/core:...
high 7.3 —— 2026-09-112026-10-19
CVE-2026-89522
In the Linux kernel, the following vulnerability has been resolved: media: stag...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89507
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma:...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89508
In the Linux kernel, the following vulnerability has been resolved: RDMA/ucma:...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89510
In the Linux kernel, the following vulnerability has been resolved: RDMA/cxgb4:...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89511
In the Linux kernel, the following vulnerability has been resolved: qede: Fix N...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89513
In the Linux kernel, the following vulnerability has been resolved: RISC-V: KVM...
high 8.8 —— 2026-09-112026-10-19
CVE-2026-89499
In the Linux kernel, the following vulnerability has been resolved: ring-buffer...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89500
In the Linux kernel, the following vulnerability has been resolved: ring-buffer...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89501
In the Linux kernel, the following vulnerability has been resolved: ring-buffer...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89503
In the Linux kernel, the following vulnerability has been resolved: ring-buffer...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89504
In the Linux kernel, the following vulnerability has been resolved: regulator:...
high 8.4 —— 2026-09-112026-10-19
CVE-2026-89493
In the Linux kernel, the following vulnerability has been resolved: ocfs2: vali...
high 8.8 —— 2026-09-112026-10-19
CVE-2026-89497
In the Linux kernel, the following vulnerability has been resolved: orangefs: s...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89486
In the Linux kernel, the following vulnerability has been resolved: ipmi: Fix u...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89487
In the Linux kernel, the following vulnerability has been resolved: openvswitch...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89488
In the Linux kernel, the following vulnerability has been resolved: openvswitch...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89489
In the Linux kernel, the following vulnerability has been resolved: openrisc: f...
high 7.8 —— 2026-09-112026-10-19
CVE-2026-89477
In the Linux kernel, the following vulnerability has been resolved: sctp: fix N...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89480
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: r...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89481
In the Linux kernel, the following vulnerability has been resolved: nvme-tcp: f...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89483
In the Linux kernel, the following vulnerability has been resolved: nvme: zero...
high 7.5 —— 2026-09-112026-10-19
CVE-2026-89469
In the Linux kernel, the following vulnerability has been resolved: power: supp...
high 8.4 —— 2026-09-112026-10-19
CVE-2026-89470
In the Linux kernel, the following vulnerability has been resolved: power: supp...
high 8.4 —— 2026-09-112026-10-19
CVE-2026-89471
In the Linux kernel, the following vulnerability has been resolved: power: supp...
high 8.4 —— 2026-09-112026-10-19
CVE-2026-89472
In the Linux kernel, the following vulnerability has been resolved: power: supp...
high 7.8 —— 2026-09-112026-10-21
CVE-2026-89476
In the Linux kernel, the following vulnerability has been resolved: sctp: fix s...
high 7.5 —— 2026-09-112026-10-19

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.