September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,833
Low
527
Severity not reported
2,537
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-19305 IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain se... |
high | 7.5 | — | Langflow / langflow | 2026-09-04 | 2026-09-08 |
| CVE-2026-19306 IBM Langflow OSS 1.0.0 through 1.11.2 allows an authenticated attacker to read a... |
high | 7.7 | — | Langflow / langflow | 2026-09-04 | 2026-09-08 |
| CVE-2026-19300 IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote attacker to obtain se... |
high | 7.5 | — | Langflow / langflow | 2026-09-04 | 2026-09-08 |
| CVE-2026-18905 IBM ContextForge MCP Gateway (`mcp-contextforge-gateway`) <= v1.0.6 MCP Context... |
high | 7.7 | — | Ibm / contextforge | 2026-09-04 | 2026-09-15 |
| CVE-2026-19283 IBM Observability with Instana (Agent) Build 1.0.303 through 1.0.323 IBM Instana... |
high | 7.7 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-19298 IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacke... |
high | 8.8 | — | Langflow / langflow | 2026-09-04 | 2026-09-10 |
| CVE-2022-35499 In Trimble TM4WEB 21.4.0.4, the external bill viewer endpoint is vulnerable to r... |
high | 7.1 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-85699 jina-ai reader contains a server-side request forgery vulnerability where URL va... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-24 |
| CVE-2026-85691 MegaParse 0.0.55 contains an unauthenticated server-side request forgery vulnera... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85694 LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkd... |
high | 8.1 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85685 AgentScope through 2.0.7.post1 contains a path traversal vulnerability in LocalW... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85686 ms-swift 4.5.2 contains a server-side request forgery vulnerability in the swift... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85687 surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read v... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85690 Plandex 2.2.1 contains a path traversal vulnerability in the ApplyFiles function... |
high | 7.8 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85671 QAnything 2.0.0 contains an authentication bypass vulnerability in the /api/loca... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85673 LLaMA-Factory contains a server-side request forgery vulnerability in the OpenAI... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-24 |
| CVE-2026-85674 aider (aider-chat) automatically loads a .aider.conf.yml configuration file from... |
high | 7.8 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85675 OWL's DocumentProcessingToolkit contains a server-side request forgery vulnerabi... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-24 |
| CVE-2026-85664 Chroma 1.5.9 fails to validate maximum bounds on HNSW index parameters max_neigh... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85666 OGX (formerly Llama Stack, affected at commit fbe8e0f) contains an unauthenticat... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85668 Xinference (affected commit 4a94832, v3.x) contains an unauthenticated arbitrary... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-24 |
| CVE-2026-85626 git-mcp-server 2.15.1 contains an argument injection vulnerability in the ref an... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85651 Trigger.dev versions before 4.5.2 fail to validate environment membership during... |
high | 8.5 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85660 cli-mcp-server 0.2.5 contains a command allowlist bypass vulnerability in the _v... |
high | 8.1 | — | — | 2026-09-04 | 2026-09-24 |
| CVE-2026-85619 AppFlowy-Cloud 0.9.64 fails to verify that requested collab objects belong to th... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85620 Postgres MCP Pro 0.3.0 contains a restricted-mode bypass vulnerability where fun... |
high | 8.6 | — | — | 2026-09-04 | 2026-09-24 |
| CVE-2026-85623 goose 1.37.0 executes arbitrary commands from recipe stdio extensions and retry.... |
high | 8.8 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85625 sift (sift.js) 17.1.3 enumerates query keys with for...in, which walks the objec... |
high | 8.1 | — | — | 2026-09-04 | 2026-09-14 |
| CVE-2026-85606 firecrawl-mcp-server 3.20.2 contains an arbitrary local file read vulnerability... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85607 Blinko 1.8.7 contains an authorization bypass (IDOR) vulnerability in multiple t... |
high | 8.8 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85608 Douyin_TikTok_Download_API through 4.1.2 contains a server-side request forgery... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-6958 Acunetix 25.11.251107123 for Windows contains a local privilege escalation vulne... |
high | 7.8 | — | — | 2026-09-04 | 2026-09-24 |
| CVE-2026-81832 IBM App Connect Enterprise 13.0.1.0 through 13.0.8.1, and 12.0.1.0 through 12.0.... |
high | 7.7 | — | Ibm / app connect enterprise | 2026-09-04 | 2026-09-08 |
| CVE-2026-19205 Observable response discrepancy vulnerability in GastroMenum GastroMenum Web Pan... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-52691 ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used... |
high | 8.8 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-12483 The LearnDash LMS plugin for WordPress is vulnerable to Unrestricted File Type U... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-85516 A vulnerability was detected in code-projects Vehicle Management System 1.0. |
high | 7.3 | — | — | 2026-09-04 | 2026-09-11 |
| CVE-2026-85649 (Holloway) Chew, Kean Ho's Actualizer v1.2.0 and earlier contains a fail-open pa... |
high | 7.9 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-18198 Improper neutralization of special elements used in an SQL command ('SQL injecti... |
high | 8.8 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-85616 Snipe-IT versions before 8.6.2 contain an authorization bypass vulnerability in... |
high | 8.5 | — | Snipeitapp / snipe-it | 2026-09-04 | 2026-09-16 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.