September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,833
Low
527
Severity not reported
2,537
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-92589 Craft CMS 5.0.0 through 5.10.12 (fixed in 5.10.13) contains a broken access cont... |
medium | 4.3 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92590 Craft CMS versions from 5.7.0 before 5.10.13 contain a stored cross-site scripti... |
medium | 5.4 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92591 Craft CMS 5.0.0 through 5.10.12 treats a database connection failure as meaning... |
medium | 5.9 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92579 In AVideo through 29.0, the autoCSRFGuard() function maintains a hardcoded allow... |
medium | 5.4 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92581 In AVideo through 29.0, Like::__construct() performs counter arithmetic on raw r... |
medium | 4.3 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92583 AVideo through 29.0 contains a race condition in the enforceRateLimit() function... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92584 AVideo through 29.0 (current revision e01e41ecc) contains a stored cross-site sc... |
medium | 6.1 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-89034 TCH QRing smart ring model R20_B006 running firmware RT09R20_1.00.00_250318 cont... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-64684 RMCP is an official Rust SDK for the Model Context Protocol. |
medium | 6.8 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92813 Metabase through 0.63.18 fails to properly validate the unspecified address 0.0.... |
medium | 4.9 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92814 changedetection.io through 0.60.6 fails to escape the scraped page title in HTML... |
medium | 4.2 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92809 PrestaShop psgdpr versions through 1.4.3 fail to validate that GDPR consent log... |
medium | 4.3 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92810 PrestaShop blockwishlist through 3.0.2 fails to validate wishlist ownership in t... |
medium | 4.3 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92811 browserless versions 1.44.0 through 2.56.7 fail to enforce file protocol restric... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92795 Coze Studio through 0.5.1 fails to restrict the server URL supplied when registe... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-92800 Docs before 5.4.1 fails to properly revoke websocket collaboration connections w... |
medium | 6.8 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92802 kan through 0.6.0 fails to properly validate board creation permissions in the G... |
medium | 4.3 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92803 LibreTranslate through 1.9.6 omits the access_check decorator from the download_... |
medium | 5.3 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92789 Graylog through 7.1.4 validates outbound URLs against an allowlist before making... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92790 Higress before 2.2.4 panics when processing a Cookie header segment without an e... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-92781 Builder.io Gen2 SDKs through versions 5.2.11 and 0.25.13 contain a prototype pol... |
medium | 6.3 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-92774 Wiki.js through 2.5.314 omits page tags from authorization checks in multiple Gr... |
medium | 4.3 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-92775 Wiki.js through 2.5.314 contains a server-side request forgery vulnerability in... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-92778 CMAK through 3.0.0.6 fails to apply the scheduled leader election feature toggle... |
medium | 5.4 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92764 OpenCVE versions 2.4.0 before 3.1.0 fails to properly scope the organizations AP... |
medium | 4.3 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92765 ArcherySec through 2.0.6 fails to validate organization ownership in the WebScan... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-92770 Harbor through 2.15.2 fails to properly restrict the q query parameter filtering... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-92771 Twenty before 2.35.0 fails to validate field and row permissions in the groupBy-... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92754 PatrowlManager through 1.8.4 contains an improper access control vulnerability i... |
medium | 4.3 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92759 SecObserve versions before 1.59.1 contain an information disclosure vulnerabilit... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-92760 Shlink through 5.1.6 fails to enforce API key role restrictions when issuing Mer... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92527 A vulnerability has been found in chatwoot up to 4.17.1. |
medium | 6.3 | — | — | 2026-09-16 | 2026-09-17 |
| CVE-2026-92750 Harness through 3.3.0 omits access control validation in the infrastructure prov... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-76449 A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Id... |
medium | 4.9 | — | Cisco / identity services engine | 2026-09-16 | 2026-09-28 |
| CVE-2026-76450 A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Id... |
medium | 4.9 | — | Cisco / identity services engine | 2026-09-16 | 2026-09-28 |
| CVE-2026-76451 A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Id... |
medium | 4.9 | — | Cisco / identity services engine passive identity connector | 2026-09-16 | 2026-09-28 |
| CVE-2026-76446 A vulnerability in an API of Cisco ISE and Cisco ISE-PIC could allow an authenti... |
medium | 4.9 | — | Cisco / identity services engine | 2026-09-16 | 2026-09-28 |
| CVE-2026-76447 A vulnerability in the Online Certificate Status Protocol (OCSP) responder of Ci... |
medium | 5.3 | — | Cisco / identity services engine passive identity connector | 2026-09-16 | 2026-09-28 |
| CVE-2026-76448 A vulnerability in Cisco Identity Services Engine (ISE) and Cisco ISE Passive Id... |
medium | 4.9 | — | Cisco / identity services engine | 2026-09-16 | 2026-09-28 |
| CVE-2026-76439 A vulnerability in the endpoint posture status reporting functionality of the gu... |
medium | 5.3 | — | Cisco / identity services engine | 2026-09-16 | 2026-09-28 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.