September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,833
Low
527
Severity not reported
2,537
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-87169 Vulnerability in the Oracle Contract Lifecycle Management for Public Sector prod... |
medium | 6.1 | — | — | 2026-09-15 | 2026-09-18 |
| CVE-2026-83488 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
medium | 5.4 | — | Oracle / helidon | 2026-09-15 | 2026-09-25 |
| CVE-2026-83491 Vulnerability in the Oracle iRecruitment product of Oracle E-Business Suite (com... |
medium | 6.8 | — | Oracle / irecruitment | 2026-09-15 | 2026-09-22 |
| CVE-2026-83480 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: Web... |
medium | 5.3 | — | Oracle / helidon | 2026-09-15 | 2026-09-25 |
| CVE-2026-83458 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: JSO... |
medium | 5.3 | — | Oracle / helidon | 2026-09-15 | 2026-09-28 |
| CVE-2026-83459 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
medium | 5.3 | — | Oracle / helidon | 2026-09-15 | 2026-09-28 |
| CVE-2026-83460 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: LRA... |
medium | 6.5 | — | Oracle / helidon | 2026-09-15 | 2026-09-25 |
| CVE-2026-83441 Vulnerability in the Oracle Product Hub product of Oracle E-Business Suite (comp... |
medium | 6.8 | — | Oracle / product hub | 2026-09-15 | 2026-09-22 |
| CVE-2026-83443 Vulnerability in the Oracle Assets product of Oracle E-Business Suite (component... |
medium | 6.5 | — | Oracle / e-business suite | 2026-09-15 | 2026-10-09 |
| CVE-2026-83431 Vulnerability in the Oracle Product Workbench product of Oracle E-Business Suite... |
medium | 5.4 | — | Oracle / product workbench | 2026-09-15 | 2026-10-08 |
| CVE-2026-83433 Vulnerability in the Oracle Depot Repair product of Oracle E-Business Suite (com... |
medium | 6.5 | — | Oracle / e-business suite | 2026-09-15 | 2026-10-09 |
| CVE-2026-83416 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo... |
medium | 4.3 | — | Oracle / coherence | 2026-09-15 | 2026-09-21 |
| CVE-2026-83419 Vulnerability in the Oracle Communications Cloud Native Core Security Edge Prote... |
medium | 5.4 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-83346 Vulnerability in the Oracle Fusion Middleware Control product of Oracle Fusion M... |
medium | 5.4 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83347 Vulnerability in the Oracle Net Services component of Oracle Database Server. |
medium | 6.5 | — | — | 2026-09-15 | 2026-09-18 |
| CVE-2026-83354 Vulnerability in the Oracle Coherence product of Oracle Fusion Middleware (compo... |
medium | 6.3 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-83278 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
medium | 6.8 | — | — | 2026-09-15 | 2026-09-18 |
| CVE-2026-83279 Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Ch... |
medium | 5.5 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-83274 Vulnerability in the Oracle Agile PLM MCAD Connector product of Oracle Supply Ch... |
medium | 5.5 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83250 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
medium | 6.5 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83251 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
medium | 6.5 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83198 Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (co... |
medium | 5.4 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83200 Vulnerability in the Oracle Process Manufacturing Intelligence product of Oracle... |
medium | 6.5 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83175 Vulnerability in the Oracle Application Object Library product of Oracle E-Busin... |
medium | 6.5 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83140 Vulnerability in the Oracle Field Service product of Oracle E-Business Suite (co... |
medium | 6.5 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-83109 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
medium | 5.3 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
| CVE-2026-83097 Vulnerability in the Oracle Forms product of Oracle Fusion Middleware (component... |
medium | 6.5 | — | Oracle / forms | 2026-09-15 | 2026-09-23 |
| CVE-2026-83076 Vulnerability in the Oracle HR Intelligence product of Oracle E-Business Suite (... |
medium | 6.8 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-83077 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM... |
medium | 6.4 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-22 |
| CVE-2026-81925 Concrete CMS before 9.5.3 improperly neutralized a user-supplied custom date for... |
medium | 6.1 | — | Concretecms / concrete cms | 2026-09-15 | 2026-09-21 |
| CVE-2026-76707 A vulnerability in HPE Networking EdgeConnect SD-WAN Gateways could allow an una... |
medium | 4.3 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76796 The LoadImageAsPngBase64 endpoint of the Newell Brands DYMO Connect Desktop loca... |
medium | 4.0 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-76705 A buffer overflow vulnerability exists in the API endpoint of HPE Networking Edg... |
medium | 5.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76706 A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchest... |
medium | 5.3 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76698 A command injection vulnerability exists in the web-based management interface o... |
medium | 6.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76699 A buffer overflow vulnerability exists in a system service within the underlying... |
medium | 6.4 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76700 Vulnerabilities in HPE Networking EdgeConnect SD-WAN Gateways could allow an una... |
medium | 5.9 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76701 A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Gateway... |
medium | 5.9 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76702 A vulnerability in the operating system of HPE Networking EdgeConnect SD-WAN Gat... |
medium | 5.8 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
| CVE-2026-76703 A buffer overflow vulnerability exists in the web-based management interface of... |
medium | 5.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-28 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.