September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-83149 Vulnerability in Oracle Application Testing Suite. |
critical | 9.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83151 Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa... |
critical | 9.8 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-83108 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
critical | 9.8 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
| CVE-2026-83099 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
critical | 10.0 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
| CVE-2026-83100 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
critical | 9.8 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
| CVE-2026-83103 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
critical | 9.1 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83104 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
critical | 9.1 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
| CVE-2026-83105 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
critical | 9.0 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83107 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
critical | 9.1 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83094 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
critical | 9.8 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
| CVE-2026-83095 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
critical | 9.8 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
| CVE-2026-83098 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
critical | 9.8 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
| CVE-2026-83064 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
critical | 9.1 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83066 Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa... |
critical | 9.8 | — | Oracle / internet directory | 2026-09-15 | 2026-09-22 |
| CVE-2026-83054 Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa... |
critical | 9.8 | — | Oracle / internet directory | 2026-09-15 | 2026-09-22 |
| CVE-2026-83055 Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa... |
critical | 9.9 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83056 Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa... |
critical | 9.9 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83057 Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa... |
critical | 9.9 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83058 Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa... |
critical | 9.9 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83059 Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa... |
critical | 10.0 | — | Oracle / internet directory | 2026-09-15 | 2026-09-22 |
| CVE-2026-83060 Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa... |
critical | 9.8 | — | Oracle / internet directory | 2026-09-15 | 2026-09-22 |
| CVE-2026-83061 Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa... |
critical | 9.8 | — | Oracle / internet directory | 2026-09-15 | 2026-09-22 |
| CVE-2026-83062 Vulnerability in the Oracle Internet Directory product of Oracle Fusion Middlewa... |
critical | 9.8 | — | Oracle / internet directory | 2026-09-15 | 2026-09-22 |
| CVE-2026-83037 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-23 |
| CVE-2026-83038 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware... |
critical | 9.9 | — | Oracle / weblogic server | 2026-09-15 | 2026-10-15 |
| CVE-2026-83039 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
critical | 9.9 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-23 |
| CVE-2026-83040 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
critical | 9.6 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-23 |
| CVE-2026-83042 Vulnerability in the Oracle Identity Manager product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / identity manager | 2026-09-15 | 2026-09-22 |
| CVE-2026-83043 Vulnerability in the Oracle WebCenter Portal product of Oracle Fusion Middleware... |
critical | 9.6 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-21 |
| CVE-2026-83029 Vulnerability in the Oracle Managed File Transfer product of Oracle Fusion Middl... |
critical | 9.6 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-83031 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware... |
critical | 9.9 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-23 |
| CVE-2026-83035 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-23 |
| CVE-2026-83036 Vulnerability in the Oracle WebCenter Sites product of Oracle Fusion Middleware... |
critical | 9.8 | — | Oracle / webcenter portal | 2026-09-15 | 2026-09-23 |
| CVE-2026-83027 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
critical | 9.3 | — | Oracle / identity manager connector | 2026-09-15 | 2026-09-22 |
| CVE-2026-83020 Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion... |
critical | 10.0 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83021 Vulnerability in the Oracle WebLogic Server product of Oracle Fusion Middleware... |
critical | 10.0 | — | Oracle / weblogic server | 2026-09-15 | 2026-09-28 |
| CVE-2026-83006 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
critical | 9.1 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-82995 Vulnerability in the Oracle Platform Security for Java product of Oracle Fusion... |
critical | 9.8 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-82997 Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa... |
critical | 9.9 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-82998 Vulnerability in the Service Delivery Platform product of Oracle Fusion Middlewa... |
critical | 9.9 | — | — | 2026-09-15 | 2026-09-16 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.