September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,833
Low
527
Severity not reported
2,537
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-83961 ColdFusion is affected by an Improper Authentication vulnerability that could re... |
high | 7.1 | — | Adobe / coldfusion | 2026-09-03 | 2026-09-09 |
| CVE-2026-75034 A flaw was found in Rancher Manager. |
high | 7.4 | — | Suse / rancher | 2026-09-03 | 2026-09-18 |
| CVE-2026-71963 Hermes Agent 0.18.2 through 0.21.0, fixed in commit f6234d0, contains a remote c... |
high | 8.8 | — | — | 2026-09-03 | 2026-09-08 |
| CVE-2026-55658 Gardens v2 is a modular governance framework that enables communities to create... |
high | 7.7 | — | — | 2026-09-03 | 2026-09-09 |
| CVE-2026-48486 Signum Node is a HDD-mined cryptocurrency using an energy efficient and fair Pro... |
high | 7.5 | — | — | 2026-09-03 | 2026-09-09 |
| CVE-2026-85211 Label Studio fails to apply organization filters when resolving storage URIs for... |
high | 7.7 | — | — | 2026-09-03 | 2026-09-10 |
| CVE-2026-85212 CRMEB contains an authentication bypass vulnerability in the verifyAuth() method... |
high | 8.3 | — | — | 2026-09-03 | 2026-09-10 |
| CVE-2026-85213 Kill Bill through 0.24.21 fails to enforce permission annotations on several Adm... |
high | 7.6 | — | — | 2026-09-03 | 2026-09-10 |
| CVE-2026-85214 vhr fails to validate user authorization in the PUT /hr/info endpoint, allowing... |
high | 8.1 | — | — | 2026-09-03 | 2026-09-10 |
| CVE-2026-85179 Label Studio through 1.23.0 fails to validate webhook URLs, allowing authenticat... |
high | 8.5 | — | — | 2026-09-03 | 2026-09-24 |
| CVE-2026-85180 Ollama fails to validate redirect destinations when pulling tensor-layer models,... |
high | 7.5 | — | — | 2026-09-03 | 2026-09-10 |
| CVE-2026-85182 vhr through commit 03abbd3 fails to verify that the account ID in PUT /hr/pass r... |
high | 7.5 | — | — | 2026-09-03 | 2026-09-10 |
| CVE-2026-85176 DbGate fails to validate jslid parameters in the jsldata controller, allowing au... |
high | 8.8 | — | — | 2026-09-03 | 2026-09-23 |
| CVE-2026-85178 Helicone's VaultManager.getDecryptedProviderKeyById() function in the GET /v1/va... |
high | 7.7 | — | — | 2026-09-03 | 2026-09-24 |
| CVE-2026-84989 ntopng is a web-based network traffic monitoring application. |
high | 7.1 | — | — | 2026-09-03 | 2026-09-09 |
| CVE-2026-71404 A flaw was found in Rancher Manager. |
high | 8.7 | — | Suse / rancher | 2026-09-03 | 2026-09-18 |
| CVE-2026-75033 A flaw was found in Rancher Manager. |
high | 7.7 | — | Suse / rancher | 2026-09-03 | 2026-09-18 |
| CVE-2026-85110 A vulnerability was identified in Tenda HG10 300001138. |
high | 8.8 | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2025-12737 The administrative operations within the Carbon Console do not adequately valida... |
high | 8.4 | — | Wso2 / api control plane | 2026-09-03 | 2026-10-19 |
| CVE-2026-9854 A vulnerability exists in SYS600 RBAC mechanism where users having access to the... |
high | 7.8 | — | Hitachienergy / microscada x sys600 | 2026-09-03 | 2026-09-09 |
| CVE-2026-85174 SiYuan before v3.8.2 logs API tokens from query parameters in plaintext to an ac... |
high | 8.8 | — | — | 2026-09-03 | 2026-09-08 |
| CVE-2026-85175 SiYuan versions <= 3.8.1 (fixed in v3.8.2) contain an incomplete blocklist in th... |
high | 8.8 | — | — | 2026-09-03 | 2026-09-08 |
| CVE-2026-9852 A CSV injection vulnerability exists in SYS600. |
high | 7.8 | — | Hitachienergy / microscada x sys600 | 2026-09-03 | 2026-09-09 |
| CVE-2026-9853 A vulnerability exists in SYS600 which allows any user authenticated to the oper... |
high | 7.8 | — | Hitachienergy / microscada x sys600 | 2026-09-03 | 2026-09-09 |
| CVE-2026-85168 n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain a remote code execution... |
high | 8.8 | — | N8n / n8n | 2026-09-03 | 2026-10-29 |
| CVE-2026-85169 n8n versions before 1.123.73, 2.35.4, and 2.36.2 contain an expression sandbox e... |
high | 8.8 | — | N8n / n8n | 2026-09-03 | 2026-10-29 |
| CVE-2026-85164 WWBN AVideo through commit c91b5975d contains a server-side request forgery vuln... |
high | 7.1 | — | — | 2026-09-03 | 2026-09-08 |
| CVE-2026-85155 WWBN AVideo contains a SQL injection vulnerability in the sort column parameter... |
high | 7.5 | — | — | 2026-09-03 | 2026-09-08 |
| CVE-2026-85160 AVideo through commit c91b5975d contains a cross-site request forgery and path t... |
high | 8.1 | — | — | 2026-09-03 | 2026-09-08 |
| CVE-2026-85105 A flaw has been found in NousResearch hermes-agent 0.18.0. |
high | 7.3 | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-85124 @fastify/http-proxy versions before 11.6.2 do not validate proxied HTTP request... |
high | 7.5 | — | Fastify / fastify\/http-proxy | 2026-09-03 | 2026-09-09 |
| CVE-2026-85150 A NULL pointer dereference flaw was found in GStreamer's RTSP support library. |
high | 7.5 | — | — | 2026-09-03 | 2026-09-21 |
| CVE-2026-85091 zlib versions 1.3.1.2 through 1.3.2 contain a heap buffer overflow vulnerability... |
high | 7.4 | — | — | 2026-09-03 | 2026-09-09 |
| CVE-2026-80753 In the Linux kernel, the following vulnerability has been resolved:
ovpn: run d... |
high | 8.4 | — | — | 2026-09-03 | 2026-09-07 |
| CVE-2026-80754 In the Linux kernel, the following vulnerability has been resolved:
Input: syna... |
high | 7.8 | — | — | 2026-09-03 | 2026-10-16 |
| CVE-2026-80745 In the Linux kernel, the following vulnerability has been resolved:
regulator:... |
high | 8.4 | — | — | 2026-09-03 | 2026-09-04 |
| CVE-2026-80747 In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd:... |
high | 8.0 | — | — | 2026-09-03 | 2026-10-30 |
| CVE-2026-80748 In the Linux kernel, the following vulnerability has been resolved:
mmc: loongs... |
high | 7.8 | — | — | 2026-09-03 | 2026-09-04 |
| CVE-2026-80749 In the Linux kernel, the following vulnerability has been resolved:
drm/connect... |
high | 7.1 | — | — | 2026-09-03 | 2026-09-04 |
| CVE-2026-80750 In the Linux kernel, the following vulnerability has been resolved:
pmdomain: m... |
high | 8.4 | — | — | 2026-09-03 | 2026-09-04 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.