September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-61559 `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. |
critical | 9.6 | — | — | 2026-09-15 | 2026-09-30 |
| CVE-2026-61568 `@zereight/mcp-gitlab` is a Model Context Protocol server for GitLab. |
critical | 9.6 | — | — | 2026-09-15 | 2026-09-30 |
| CVE-2026-66887 The affected products are missing authorization on state-changing CGIs and sessi... |
critical | 9.6 | — | — | 2026-09-15 | 2026-09-18 |
| CVE-2026-54337 Fireshare facilitates self-hosted media and link sharing. |
critical | 9.8 | — | — | 2026-09-15 | 2026-09-30 |
| CVE-2026-92238 A maliciously constructed mail header could lead to multiple fields being parsed... |
critical | 9.8 | — | Mozilla / thunderbird | 2026-09-15 | 2026-09-24 |
| CVE-2026-92240 A malicious or compromised IMAP server can trigger an out-of-bounds read in the... |
critical | 9.1 | — | Mozilla / thunderbird | 2026-09-15 | 2026-09-24 |
| CVE-2026-89040 Tencent Mass Service Engine in Cluster (MSEC) allows a remote, unauthenticated a... |
critical | 9.8 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-87230 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
critical | 10.0 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-21 |
| CVE-2026-87223 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
critical | 9.1 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87214 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
critical | 9.1 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-21 |
| CVE-2026-87217 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
critical | 9.1 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-21 |
| CVE-2026-87184 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
critical | 9.8 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87186 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
critical | 9.6 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87188 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
critical | 9.8 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87189 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
critical | 9.1 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87173 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
critical | 9.1 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87175 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
critical | 9.1 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87176 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
critical | 9.1 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87170 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
critical | 9.1 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87172 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
critical | 9.9 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87128 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
critical | 9.1 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-21 |
| CVE-2026-87129 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
critical | 9.1 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-83462 Vulnerability in the Oracle Mobile Application Server product of Oracle E-Busine... |
critical | 9.8 | — | Oracle / mobile application server | 2026-09-15 | 2026-10-09 |
| CVE-2026-83452 Vulnerability in the Oracle Document Management and Collaboration product of Ora... |
critical | 9.8 | — | Oracle / document management and collaboration | 2026-09-15 | 2026-10-08 |
| CVE-2026-83355 Vulnerability in the Oracle Enterprise Manager for Fusion Middleware product of... |
critical | 9.8 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-83339 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
critical | 9.8 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-21 |
| CVE-2026-83327 Vulnerability in the Oracle Applications Framework product of Oracle E-Business... |
critical | 9.8 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-83282 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
critical | 9.9 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83283 Vulnerability in the Oracle Business Intelligence Enterprise Edition product of... |
critical | 9.8 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-83268 Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:... |
critical | 9.1 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83269 Vulnerability in the Oracle BI Publisher product of Oracle Analytics (component:... |
critical | 9.8 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-83260 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
critical | 9.1 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83261 Vulnerability in the Oracle Product Lifecycle Analytics product of Oracle Supply... |
critical | 9.8 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-83232 Vulnerability in the Oracle Data Integrator product of Oracle Fusion Middleware... |
critical | 9.8 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-83229 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
critical | 9.1 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83196 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
critical | 9.1 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83197 Vulnerability in the Siebel Apps - Financial Services product of Oracle Siebel C... |
critical | 9.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83201 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
critical | 9.1 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-21 |
| CVE-2026-83202 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
critical | 9.1 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-21 |
| CVE-2026-83154 Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component... |
critical | 9.1 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.