September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,833
Low
527
Severity not reported
2,537
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-67229 RabbitMQ is a messaging and streaming broker. |
medium | 4.9 | — | Broadcom / rabbitmq server | 2026-09-23 | 2026-10-19 |
| CVE-2026-66069 RabbitMQ is a messaging and streaming broker. |
medium | 4.3 | — | Broadcom / rabbitmq server | 2026-09-23 | 2026-10-30 |
| CVE-2026-66072 RabbitMQ is a messaging and streaming broker. |
medium | 6.5 | — | Broadcom / rabbitmq server | 2026-09-23 | 2026-10-19 |
| CVE-2026-66074 RabbitMQ is a messaging and streaming broker. |
medium | 6.5 | — | Broadcom / rabbitmq server | 2026-09-23 | 2026-10-19 |
| CVE-2026-66075 RabbitMQ is a messaging and streaming broker. |
medium | 5.4 | — | Broadcom / rabbitmq server | 2026-09-23 | 2026-10-19 |
| CVE-2026-66077 RabbitMQ is a messaging and streaming broker. |
medium | 6.1 | — | Broadcom / rabbitmq server | 2026-09-23 | 2026-10-19 |
| CVE-2026-66080 RabbitMQ is a messaging and streaming broker. |
medium | 4.9 | — | Broadcom / rabbitmq server | 2026-09-23 | 2026-10-19 |
| CVE-2026-67218 RabbitMQ is a messaging and streaming broker. |
medium | 6.5 | — | Broadcom / rabbitmq server | 2026-09-23 | 2026-10-19 |
| CVE-2026-66067 RabbitMQ is a messaging and streaming broker. |
medium | 6.5 | — | Broadcom / rabbitmq server | 2026-09-23 | 2026-10-30 |
| CVE-2026-66068 RabbitMQ is a messaging and streaming broker. |
medium | 4.4 | — | Broadcom / rabbitmq server | 2026-09-23 | 2026-10-19 |
| CVE-2026-96551 A vulnerability was determined in sfturing hosp_order up to 627f426331da8086ce8f... |
medium | 4.3 | — | — | 2026-09-23 | 2026-09-24 |
| CVE-2026-84724 An argument-injection flaw was found in the Ansible Automation Platform automati... |
medium | 6.6 | — | — | 2026-09-23 | 2026-09-26 |
| CVE-2026-84716 A flaw was found in the automation-controller instance
install-bundle endpoint. |
medium | 6.6 | — | — | 2026-09-23 | 2026-09-24 |
| CVE-2026-84717 A flaw was found in the Ansible Automation Platform automation-controller. |
medium | 5.3 | — | — | 2026-09-23 | 2026-09-26 |
| CVE-2026-84718 A flaw was found in the Ansible Automation Platform automation-controller. |
medium | 4.3 | — | — | 2026-09-23 | 2026-09-24 |
| CVE-2026-84720 A flaw was found in the Ansible Automation Platform automation-controller. |
medium | 6.5 | — | — | 2026-09-23 | 2026-09-24 |
| CVE-2026-84721 A server-side request forgery flaw was found in the Ansible Automation Platform... |
medium | 6.4 | — | — | 2026-09-23 | 2026-10-16 |
| CVE-2026-84712 A flaw was found in the automation-controller API. |
medium | 5.3 | — | — | 2026-09-23 | 2026-09-24 |
| CVE-2026-84713 A flaw was found in the automation-controller notification
subsystem. |
medium | 6.5 | — | — | 2026-09-23 | 2026-10-16 |
| CVE-2026-66076 RabbitMQ is a messaging and streaming broker. |
medium | 6.5 | — | Broadcom / rabbitmq server | 2026-09-23 | 2026-10-19 |
| CVE-2026-67238 RabbitMQ is a messaging and streaming broker. |
medium | 6.5 | — | Broadcom / rabbitmq server | 2026-09-23 | 2026-10-30 |
| CVE-2026-96545 An out-of-bounds heap read flaw was found in GIMP's TIM image loader. |
medium | 4.4 | — | — | 2026-09-23 | 2026-09-24 |
| CVE-2026-96548 A flaw has been found in sfturing hosp_order up to 627f426331da8086ce8fff2017d65... |
medium | 5.6 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-95600 Unauthenticated Sensitive Data Exposure in TrustedLogin Connector <= 2.0.3 versi... |
medium | 5.3 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-95602 Authorization Bypass Through User-Controlled Key vulnerability in YITH YITH WooC... |
medium | 6.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-95530 Subscriber Cross Site Scripting (XSS) in PixelYourSite – Your smart PIXEL (TAG)... |
medium | 6.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-95586 Contributor Cross Site Scripting (XSS) in Ultimate Addons for Contact Form 7 <=... |
medium | 6.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-95592 Unauthenticated Insecure Direct Object References (IDOR) in Team <= 6.0.0 versio... |
medium | 5.3 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-95514 Unauthenticated Bypass Vulnerability in Netgsm <= 2.10.0 versions. |
medium | 5.3 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-95523 Subscriber Bypass Vulnerability in WP User Frontend <= 4.3.11 versions. |
medium | 6.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-95524 Unauthenticated Bypass Vulnerability in WP User Frontend <= 4.3.11 versions. |
medium | 5.3 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-95525 Subscriber Arbitrary File Deletion in WP User Frontend <= 4.3.11 versions. |
medium | 6.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-95527 Unauthenticated Broken Access Control in Conekta Payment Gateway <= 6.2.4 versio... |
medium | 6.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-94671 Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions. |
medium | 6.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-94679 Subscriber Broken Access Control in Fluent Support <= 2.3.2 versions. |
medium | 5.4 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-94680 Contributor Cross Site Scripting (XSS) in The Post Grid <= 7.9.5 versions. |
medium | 6.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-94682 Contributor Cross Site Scripting (XSS) in Podcast Importer SecondLine <= 1.5.6 v... |
medium | 6.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-94391 Contributor Cross Site Scripting (XSS) in Ultimate FAQ <= 2.4.14 versions. |
medium | 6.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-94457 Unauthenticated Bypass Vulnerability in Captcha Code <= 3.32 versions. |
medium | 4.8 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-94461 Contributor Cross Site Scripting (XSS) in Ditty <= 3.1.69 versions. |
medium | 6.5 | — | — | 2026-09-23 | 2026-09-23 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.