September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,833
Low
527
Severity not reported
2,537
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-86482 In JetBrains YouTrack before 2026.2.18634, insufficient validation of role assig... |
high | 8.8 | — | — | 2026-09-07 | 2026-09-22 |
| CVE-2026-80166 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
high | 7.8 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-79639 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
high | 7.6 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-79643 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
high | 7.3 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-79691 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
high | 7.3 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-80127 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
high | 7.2 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-79645 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
high | 8.2 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-11 |
| CVE-2026-18453 A flaw was found in 389 Directory Server. |
high | 7.5 | — | — | 2026-09-07 | 2026-10-08 |
| CVE-2026-19843 A flaw was found in 389-ds-base. |
high | 8.4 | — | — | 2026-09-07 | 2026-10-08 |
| CVE-2026-6377 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v... |
high | 7.5 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-78480 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
high | 7.5 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-11 |
| CVE-2026-79644 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
high | 7.4 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-11 |
| CVE-2026-18355 A heap buffer overflow flaw was found in the SASL I/O layer of 389 Directory Ser... |
high | 7.5 | — | — | 2026-09-07 | 2026-10-08 |
| CVE-2026-86452 Affected versions of MISP permit unauthenticated or weakly constrained request p... |
high | 7.5 | — | Misp-project / misp | 2026-09-07 | 2026-09-14 |
| CVE-2026-76560 A flaw was found in 389 Directory Server. |
high | 7.5 | — | — | 2026-09-07 | 2026-10-08 |
| CVE-2026-79734 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
high | 7.5 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-09 |
| CVE-2026-80130 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
high | 8.8 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-09 |
| CVE-2026-14444 The WP Fusion (Pro) plugin for WordPress is vulnerable to Privilege Escalation i... |
high | 7.5 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86435 commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerab... |
high | 7.5 | — | — | 2026-09-07 | 2026-10-08 |
| CVE-2026-86428 commonmark versions from 1.5.0 before 2.10.0 contain a denial of service vulnera... |
high | 7.5 | — | Thephpleague / commonmark | 2026-09-07 | 2026-10-08 |
| CVE-2026-86429 The league/commonmark (thephpleague/commonmark) library in versions >= 1.5.0 and... |
high | 7.5 | — | Thephpleague / commonmark | 2026-09-07 | 2026-10-08 |
| CVE-2026-86430 league/commonmark versions before 2.9.1 contain multiple denial of service vulne... |
high | 7.5 | — | Thephpleague / commonmark | 2026-09-07 | 2026-10-08 |
| CVE-2026-86431 league/commonmark (thephpleague/commonmark) versions >= 2.7.0 and < 2.9.1 contai... |
high | 7.2 | — | Thephpleague / commonmark | 2026-09-07 | 2026-10-08 |
| CVE-2026-86433 commonmark versions from 1.5.0 before 2.8.4 contain a denial of service vulnerab... |
high | 7.5 | — | — | 2026-09-07 | 2026-10-08 |
| CVE-2026-86434 league/commonmark versions >= 2.0.0 and < 2.8.4 (patched in 2.9.0) contain a den... |
high | 7.5 | — | — | 2026-09-07 | 2026-10-08 |
| CVE-2026-86427 LibreNMS before 26.8.0 contains an argument injection vulnerability in the graph... |
high | 8.8 | — | Librenms / librenms | 2026-09-07 | 2026-09-18 |
| CVE-2026-86420 ImageMagick before 7.1.2-30 and 6.9.13-55 fails to properly lower the memory bud... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-09-07 | 2026-10-29 |
| CVE-2026-86421 ImageMagick before 7.1.2-30 and 6.9.13-55 contains a memory leak in the MSL imag... |
high | 7.5 | — | Imagemagick / imagemagick | 2026-09-07 | 2026-10-29 |
| CVE-2026-80178 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
high | 7.8 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-11 |
| CVE-2026-86303 A vulnerability was determined in 92181 markdown up to 058cab0cb7fb245a0ccc6b844... |
high | 7.3 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86305 A security flaw has been discovered in light0011 cms c774dce31c6df0055568a8d5c53... |
high | 7.3 | — | — | 2026-09-07 | 2026-09-11 |
| CVE-2026-86306 A weakness has been identified in light0011 cms c774dce31c6df0055568a8d5c53d964d... |
high | 7.3 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-79678 A flaw was found in FreeIPA's idp-add command, where insufficiently validated --... |
high | 8.1 | — | — | 2026-09-07 | 2026-10-26 |
| CVE-2026-80132 ell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
high | 8.1 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-11 |
| CVE-2026-80133 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
high | 8.1 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-11 |
| CVE-2026-80134 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
high | 7.7 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-11 |
| CVE-2026-6431 The User Profile Builder – Beautiful User Registration Forms, User Profiles & Us... |
high | 7.2 | — | — | 2026-09-07 | 2026-09-09 |
| CVE-2026-61409 Dell Secure Connect Gateway (SCG) 5.0 Application, versions prior to 5.36.00.00,... |
high | 7.3 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2022-51017 PocketMine-MP versions before 3.26.5 and 4.0.5 fail to validate the length of sk... |
high | 7.5 | — | — | 2026-09-07 | 2026-10-08 |
| CVE-2026-86300 A flaw has been found in Tenda AC9 15.03.05.14. |
high | 7.3 | — | — | 2026-09-07 | 2026-09-08 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.