September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,833
Low
527
Severity not reported
2,537
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-85288 Notepad++ is a free and open-source source code editor. |
medium | 6.7 | — | — | 2026-09-22 | 2026-09-26 |
| CVE-2026-77252 MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (C... |
medium | 6.5 | — | Mcp-atlassian / mcp atlassian | 2026-09-22 | 2026-09-25 |
| CVE-2026-77267 MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (C... |
medium | 6.5 | — | Mcp-atlassian / mcp atlassian | 2026-09-22 | 2026-09-29 |
| CVE-2026-77270 MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (C... |
medium | 6.5 | — | Mcp-atlassian / mcp atlassian | 2026-09-22 | 2026-09-28 |
| CVE-2026-77250 MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (C... |
medium | 6.1 | — | Mcp-atlassian / mcp atlassian | 2026-09-22 | 2026-09-29 |
| CVE-2026-77251 MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (C... |
medium | 6.5 | — | Mcp-atlassian / mcp atlassian | 2026-09-22 | 2026-09-29 |
| CVE-2026-85709 LightRAG provides simple and fast retrieval-augmented generation. |
medium | 5.3 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-85725 LightRAG provides simple and fast retrieval-augmented generation. |
medium | 5.9 | — | — | 2026-09-22 | 2026-09-26 |
| CVE-2026-86062 LightRAG provides simple and fast retrieval-augmented generation. |
medium | 6.1 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-83600 Netdata is an open source observability tool. |
medium | 6.5 | — | — | 2026-09-22 | 2026-09-23 |
| CVE-2026-83601 Netdata is an open source observability tool. |
medium | 6.5 | — | — | 2026-09-22 | 2026-09-26 |
| CVE-2026-83602 Netdata is an open source observability tool. |
medium | 6.5 | — | — | 2026-09-22 | 2026-09-28 |
| CVE-2026-84301 FastGPT is an open-source LLM platform for building AI applications on a knowled... |
medium | 6.3 | — | — | 2026-09-22 | 2026-09-26 |
| CVE-2026-76805 Nuclei is a vulnerability scanner built on a simple YAML-based DSL. |
medium | 5.3 | — | — | 2026-09-22 | 2026-09-23 |
| CVE-2026-56682 9Router is an AI router & token saver. |
medium | 5.3 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-76802 Nuclei is a vulnerability scanner built on a simple YAML-based DSL. |
medium | 4.7 | — | — | 2026-09-22 | 2026-09-24 |
| CVE-2026-76803 Nuclei is a vulnerability scanner built on a simple YAML-based DSL. |
medium | 5.3 | — | — | 2026-09-22 | 2026-09-26 |
| CVE-2026-76804 Nuclei is a vulnerability scanner built on a simple YAML-based DSL. |
medium | 5.5 | — | — | 2026-09-22 | 2026-09-28 |
| CVE-2026-90462 A flaw was found in SSSD. |
medium | 5.4 | — | Fedoraproject / sssd | 2026-09-22 | 2026-10-07 |
| CVE-2026-86805 A time-of-check to time-of-use (TOCTOU) race condition in the dynamic loader (ld... |
medium | 6.3 | — | — | 2026-09-22 | 2026-09-23 |
| CVE-2026-88010 Traefik is an open source HTTP reverse proxy and load balancer. |
medium | 5.3 | — | Traefik / traefik | 2026-09-22 | 2026-10-29 |
| CVE-2026-81882 radare2 is a UNIX-like reverse engineering framework and command-line toolset. |
medium | 6.1 | — | Radare / radare2 | 2026-09-22 | 2026-09-28 |
| CVE-2026-81885 radare2 is a UNIX-like reverse engineering framework and command-line toolset. |
medium | 5.5 | — | Radare / radare2 | 2026-09-22 | 2026-09-28 |
| CVE-2026-81886 radare2 is a UNIX-like reverse engineering framework and command-line toolset. |
medium | 5.5 | — | Radare / radare2 | 2026-09-22 | 2026-09-28 |
| CVE-2026-81878 radare2 is a UNIX-like reverse engineering framework and command-line toolset. |
medium | 5.5 | — | Radare / radare2 | 2026-09-22 | 2026-09-25 |
| CVE-2026-81879 radare2 is a UNIX-like reverse engineering framework and command-line toolset. |
medium | 6.1 | — | Radare / radare2 | 2026-09-22 | 2026-09-25 |
| CVE-2026-81880 radare2 is a UNIX-like reverse engineering framework and command-line toolset. |
medium | 5.5 | — | Radare / radare2 | 2026-09-22 | 2026-09-26 |
| CVE-2026-81881 radare2 is a UNIX-like reverse engineering framework and command-line toolset. |
medium | 4.4 | — | Radare / radare2 | 2026-09-22 | 2026-09-25 |
| CVE-2026-79913 Cloudreve is a self-hosted file management and sharing system. |
medium | 6.5 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-79311 webpy web.py 0.76 is vulnerable to Cross Site Scripting (XSS) via render_jinja._... |
medium | 6.1 | — | — | 2026-09-22 | 2026-10-06 |
| CVE-2026-79312 webpy web.py 0.76 is vulnerable to Session Fixation. |
medium | 6.8 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-75517 Novu provides an API for sending notifications through multiple channels. |
medium | 6.5 | — | — | 2026-09-22 | 2026-09-24 |
| CVE-2026-95501 A vulnerability was found in mtrano APENCMS up to 6546096d354153309693efabb9a0d8... |
medium | 4.3 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-94570 SGLang contains a DoS vulnerability caused by missing input validation for AUX_D... |
medium | 5.9 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-93344 MarketKing plugin for WordPress before 2.1.72 contains a missing authorization v... |
medium | 6.5 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-79315 A reflected cross-site scripting vulnerability exists in x-ui 0.3.2. |
medium | 4.7 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-65127 NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att... |
medium | 4.9 | — | Nvidia / infra controller | 2026-09-22 | 2026-09-29 |
| CVE-2026-65112 NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att... |
medium | 6.5 | — | Nvidia / infra controller | 2026-09-22 | 2026-09-29 |
| CVE-2026-65115 NVIDIA Infrastructure Controller for Linux contains a vulnerability where an att... |
medium | 6.5 | — | Nvidia / infra controller | 2026-09-22 | 2026-09-29 |
| CVE-2026-95666 Mattermost versions 11.9.x <= 11.9.1, 11.8.x <= 11.8.5, 11.7.x <= 11.7.10, 11.10... |
medium | 4.3 | — | Mattermost / mattermost server | 2026-09-22 | 2026-10-07 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.