September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,833
Low
527
Severity not reported
2,537
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-95320 Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allo... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95321 UI misrepresentation in Payments in Google Chrome on on Android prior to 154.0.8... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95323 UI misrepresentation in Chromium in Google Chrome on on iOS prior to 154.0.8037.... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95309 UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95303 Incomplete cleanup in SmartCard in Google Chrome prior to 154.0.8037.57 allowed... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-95305 UI misrepresentation in Chromoting in Google Chrome prior to 154.0.8037.57 allow... |
medium | 4.8 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95307 UI misrepresentation in ExtensionsMenu in Google Chrome prior to 154.0.8037.57 a... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95293 Uninitialized resource in GPU in Google Chrome prior to 154.0.8037.57 allowed a... |
medium | 4.7 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95294 UI misrepresentation in Browser in Google Chrome prior to 154.0.8037.57 allowed... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95295 Information leak in Mobile in Google Chrome on on iOS prior to 154.0.8037.57 all... |
medium | 4.6 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95296 Missing authorization in Core in Google Chrome on on Mac prior to 154.0.8037.57... |
medium | 4.3 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95297 Missing authorization in Contextual Tasks in Google Chrome prior to 154.0.8037.5... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95300 Missing authorization in DevTools in Google Chrome prior to 154.0.8037.57 allowe... |
medium | 4.8 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95287 Missing authorization in Navigation in Google Chrome prior to 154.0.8037.57 allo... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95288 UI misrepresentation in Mobile in Google Chrome on on iOS prior to 154.0.8037.57... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95289 Incorrect authorization in Scroll in Google Chrome prior to 154.0.8037.57 allowe... |
medium | 4.3 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95290 Missing authorization in NFC in Google Chrome prior to 154.0.8037.57 allowed a r... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-95291 UI misrepresentation in SecurityIndicators in Google Chrome on on iOS prior to 1... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95292 Incorrect authorization in Safebrowsing in Google Chrome prior to 154.0.8037.57... |
medium | 4.8 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95279 UI misrepresentation in Omnibox in Google Chrome on on Android prior to 154.0.80... |
medium | 5.4 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-95275 Incorrect reference resolution in MediaStream in Google Chrome prior to 154.0.80... |
medium | 6.5 | — | Google / chrome | 2026-09-29 | 2026-10-02 |
| CVE-2026-102808 PX4 Autopilot through 1.17.0 contains a NULL pointer dereference vulnerability i... |
medium | 6.5 | — | — | 2026-09-29 | 2026-10-02 |
| CVE-2026-102809 PX4 Autopilot through 1.17.0 contains an uncontrolled stack allocation vulnerabi... |
medium | 6.5 | — | — | 2026-09-29 | 2026-09-30 |
| CVE-2026-102806 OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in th... |
medium | 6.3 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102807 OpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in th... |
medium | 5.3 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102639 MobilityDB version 1.3.0 and earlier contains an out-of-bounds read vulnerabilit... |
medium | 6.5 | — | — | 2026-09-29 | 2026-10-02 |
| CVE-2026-92232 Joomla! |
medium | 6.5 | — | Joomla / joomla\! | 2026-09-29 | 2026-10-06 |
| CVE-2026-92224 Joomla! |
medium | 6.7 | — | Joomla / joomla\! | 2026-09-29 | 2026-10-06 |
| CVE-2026-92225 Joomla! |
medium | 6.7 | — | Joomla / joomla\! | 2026-09-29 | 2026-10-06 |
| CVE-2026-92226 Joomla! |
medium | 6.0 | — | Joomla / joomla\! | 2026-09-29 | 2026-10-06 |
| CVE-2026-92231 Joomla! |
medium | 6.7 | — | Joomla / joomla\! | 2026-09-29 | 2026-10-06 |
| CVE-2026-90907 Joomla! |
medium | 5.3 | — | Joomla / joomla\! | 2026-09-29 | 2026-10-06 |
| CVE-2026-90913 Joomla! |
medium | 5.5 | — | Joomla / joomla\! | 2026-09-29 | 2026-10-06 |
| CVE-2026-90914 Joomla! |
medium | 6.4 | — | Joomla / joomla\! | 2026-09-29 | 2026-10-06 |
| CVE-2026-90915 Joomla! |
medium | 6.5 | — | Joomla / joomla\! | 2026-09-29 | 2026-10-06 |
| CVE-2026-90917 Joomla! |
medium | 5.3 | — | Joomla / joomla\! | 2026-09-29 | 2026-10-06 |
| CVE-2026-90918 Joomla! |
medium | 5.3 | — | Joomla / joomla\! | 2026-09-29 | 2026-10-06 |
| CVE-2026-102635 ImageMagick versions before 7.1.2-32 and 6.9.13-57 contain uninitialized heap me... |
medium | 5.3 | — | Imagemagick / imagemagick | 2026-09-29 | 2026-10-15 |
| CVE-2026-102673 Electron is a framework for writing cross-platform desktop applications using Ja... |
medium | 6.1 | — | Electronjs / electron | 2026-09-29 | 2026-10-15 |
| CVE-2026-102674 Electron is a framework for writing cross-platform desktop applications using Ja... |
medium | 6.1 | — | Electronjs / electron | 2026-09-29 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.