Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

September 2026 CVE archive

Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in September 2026Materially updated (Critical / KEV)
Total records
15,074
Critical
1,387
High
5,790
Medium
4,833
Low
527
Severity not reported
2,537
In CISA KEV
32

Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-102090
Kiteworks Core before version 9.5.1 is vulnerable to Content Injection.
medium 4.3 —Accellion / kiteworks 2026-09-302026-10-07
CVE-2026-103387
A weakness has been identified in garycourt uri-js up to 4.4.1.
medium 4.3 —— 2026-09-302026-10-01
CVE-2026-102991
Mako is a template library written in Python.
medium 6.5 —— 2026-09-302026-09-30
CVE-2026-101883
OpenClaw Windows Node through 2026.9.4 contains a server-side request forgery vu...
medium 5.4 —— 2026-09-302026-10-02
CVE-2026-101881
OpenClaw Windows Node before 2026.7.1 contains an allocation of resources withou...
medium 6.5 —— 2026-09-302026-10-01
CVE-2026-101879
OpenClaw Windows Node before 2026.7.1-3 contains a missing authorization vulnera...
medium 6.5 —— 2026-09-302026-10-02
CVE-2026-97265
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti...
medium 6.5 —— 2026-09-302026-09-30
CVE-2026-103500
An attacker could cause a heap buffer overflow by getting a user to open an emai...
medium 6.1 —Mozilla / thunderbird 2026-09-302026-10-16
CVE-2026-103476
yii2-starter-kit through 4.2.0 fails to validate article publication status in t...
medium 5.3 —— 2026-09-302026-10-01
CVE-2026-103399
A flaw was found in SoupServer (libsoup).
medium 5.3 —— 2026-09-302026-09-30
CVE-2026-102375
Missing Authorization vulnerability in Optimole Optimole optimole-wp allows Expl...
medium 6.5 —— 2026-09-302026-10-07
CVE-2026-102397
Unauthenticated Broken Access Control in Ultimate Maps by Supsystic <= 1.5.5 ver...
medium 6.5 —— 2026-09-302026-09-30
CVE-2026-103233
A security vulnerability has been detected in AdithyaYelloju Restaurant-Manageme...
medium 6.3 —— 2026-09-302026-09-30
CVE-2026-47604
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the...
medium 5.5 —— 2026-09-302026-09-30
CVE-2026-55174
UltrafastSecp256k1 is a high-performance, multi-backend secp256k1 engine with re...
medium 5.9 —— 2026-09-302026-09-30
CVE-2026-47603
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the...
medium 5.5 —— 2026-09-302026-09-30
CVE-2026-47586
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the...
medium 6.4 —— 2026-09-302026-09-30
CVE-2026-47581
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mod...
medium 5.5 —— 2026-09-302026-09-30
CVE-2026-47584
NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mod...
medium 5.5 —— 2026-09-302026-09-30
CVE-2026-47565
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode...
medium 6.4 —— 2026-09-302026-10-01
CVE-2026-47566
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode...
medium 5.5 —— 2026-09-302026-09-30
CVE-2026-47567
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode...
medium 5.5 —— 2026-09-302026-09-30
CVE-2026-47568
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode...
medium 5.5 —— 2026-09-302026-09-30
CVE-2026-47557
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode...
medium 5.5 —— 2026-09-302026-09-30
CVE-2026-47562
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode...
medium 4.4 —— 2026-09-302026-09-30
CVE-2026-47555
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the...
medium 5.5 —— 2026-09-302026-09-30
CVE-2026-47546
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the...
medium 6.7 —— 2026-09-302026-10-01
CVE-2026-47547
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the...
medium 6.7 —— 2026-09-302026-10-01
CVE-2026-47549
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel modul...
medium 5.5 —— 2026-09-302026-09-30
CVE-2026-47539
NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel...
medium 6.7 —— 2026-09-302026-10-01
CVE-2026-47542
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the...
medium 6.7 —— 2026-09-302026-10-01
CVE-2026-47543
VIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the k...
medium 6.7 —— 2026-09-302026-10-01
CVE-2026-47544
NVIDIA vGPU Virtual GPU Manager for Linux contains a vulnerability in the kernel...
medium 6.7 —— 2026-09-302026-10-01
CVE-2026-47533
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the...
medium 6.7 —— 2026-09-302026-10-01
CVE-2026-47534
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the...
medium 5.5 —— 2026-09-302026-09-30
CVE-2026-47537
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode...
medium 6.7 —— 2026-09-302026-10-01
CVE-2026-47538
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the...
medium 6.7 —— 2026-09-302026-10-01
CVE-2026-47526
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the...
medium 4.4 —— 2026-09-302026-09-30
CVE-2026-47527
NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the...
medium 6.7 —— 2026-09-302026-10-02
CVE-2026-47529
NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode...
medium 6.7 —— 2026-09-302026-10-02

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.