September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-80962 In the Linux kernel, the following vulnerability has been resolved:
dm-pcache:... |
high | 7.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80967 In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcxhr... |
high | 8.4 | — | — | 2026-09-11 | 2026-10-30 |
| CVE-2026-80953 In the Linux kernel, the following vulnerability has been resolved:
i3c: master... |
high | 8.4 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80954 In the Linux kernel, the following vulnerability has been resolved:
i3c: Fix un... |
high | 7.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80955 In the Linux kernel, the following vulnerability has been resolved:
dm-pcache:... |
high | 7.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80958 In the Linux kernel, the following vulnerability has been resolved:
dm-pcache:... |
high | 7.1 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80959 In the Linux kernel, the following vulnerability has been resolved:
dm-pcache:... |
high | 7.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80961 In the Linux kernel, the following vulnerability has been resolved:
dm-pcache:... |
high | 7.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80947 In the Linux kernel, the following vulnerability has been resolved:
wifi: rtl8x... |
high | 7.8 | — | — | 2026-09-11 | 2026-10-30 |
| CVE-2026-80950 In the Linux kernel, the following vulnerability has been resolved:
i3c: renesa... |
high | 7.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80952 In the Linux kernel, the following vulnerability has been resolved:
i3c: master... |
high | 7.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80943 In the Linux kernel, the following vulnerability has been resolved:
wifi: rtlwi... |
high | 7.6 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80944 In the Linux kernel, the following vulnerability has been resolved:
wifi: mwifi... |
high | 7.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80932 In the Linux kernel, the following vulnerability has been resolved:
vsock/virti... |
high | 8.4 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80933 In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76:... |
high | 7.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80935 In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76:... |
high | 8.8 | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-80936 In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76:... |
high | 7.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80937 In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76:... |
high | 8.8 | — | — | 2026-09-11 | 2026-10-30 |
| CVE-2026-80928 In the Linux kernel, the following vulnerability has been resolved:
smack: fix... |
high | 7.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80929 In the Linux kernel, the following vulnerability has been resolved:
sysctl: mov... |
high | 7.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80931 In the Linux kernel, the following vulnerability has been resolved:
w1: ds28e17... |
high | 7.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-54135 AirSane is a SANE frontend, and a scanner server that supports Apple's AirScan p... |
high | 7.5 | — | — | 2026-09-11 | 2026-09-30 |
| CVE-2026-79393 A heap-based buffer overflow vulnerability in the WS-Addressing Action transform... |
high | 7.5 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-79394 An insecure default configuration in the embedded Happytime RTSP server within t... |
high | 7.5 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-71646 An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: c... |
high | 7.5 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-79362 Certain Woltlab products are affected by RCE via Cache Poisoning. |
high | 8.8 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-62112 Editor SQL Injection in Amelia <= 2.4.9 versions. |
high | 7.6 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-62102 Subscriber Privilege Escalation in Gato GraphQL <= 19.2.3 versions. |
high | 8.8 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-62106 Subscriber Privilege Escalation in SMS Alert Order Notifications <= 3.9.9 versio... |
high | 8.8 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-62107 Unauthenticated PHP Object Injection in Masteriyo - LMS <= 3.4.0 versions. |
high | 8.8 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-62109 Editor SQL Injection in Sky Addons for Elementor <= 3.8.4 versions. |
high | 7.6 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-62089 Missing Authorization vulnerability in Pixar Labs Master Addons for Elementor al... |
high | 7.1 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-89099 A race condition in the document value layer of MongoDB Server can allow concurr... |
high | 7.5 | — | Mongodb / mongodb | 2026-09-11 | 2026-09-29 |
| CVE-2026-78807 An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to... |
high | 7.1 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-67211 OOM Denial of Service via Unbounded Map Pre-Sizing in Apache OpenNLP SymSpellMod... |
high | 7.5 | — | Apache / opennlp | 2026-09-11 | 2026-09-16 |
| CVE-2026-72708 SPIP before 4.4.18 contains an unauthenticated blind SQL injection vulnerability... |
high | 7.5 | — | — | 2026-09-11 | 2026-09-15 |
| CVE-2026-89260 MoguBlog through 6.2 contains an XML external entity injection vulnerability in... |
high | 7.5 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-89262 MoguBlog through 6.2 contains an authorization bypass vulnerability in the comme... |
high | 7.5 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-89065 Relative path traversal in the generated file manifest cleanup component in proj... |
high | 7.1 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-89066 Improper neutralization of special elements used in an OS command in the task sy... |
high | 7.8 | — | — | 2026-09-11 | 2026-09-11 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.