September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-89610 In the Linux kernel, the following vulnerability has been resolved:
ntfs: verif... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89611 In the Linux kernel, the following vulnerability has been resolved:
ntfs: valid... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89612 In the Linux kernel, the following vulnerability has been resolved:
ntfs: rejec... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89613 In the Linux kernel, the following vulnerability has been resolved:
ntfs: rejec... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89614 In the Linux kernel, the following vulnerability has been resolved:
ntfs: bound... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89555 In the Linux kernel, the following vulnerability has been resolved:
mpls: reloa... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89558 In the Linux kernel, the following vulnerability has been resolved:
md/raid10:... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89550 In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: svc... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89551 In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: xdr... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89541 In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: har... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89542 In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: har... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89546 In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: clo... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89532 In the Linux kernel, the following vulnerability has been resolved:
svcrdma: Fi... |
critical | 9.1 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89533 In the Linux kernel, the following vulnerability has been resolved:
svcrdma: Fi... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89536 In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: wai... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89537 In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Rej... |
critical | 9.1 | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89538 In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: Rej... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89526 In the Linux kernel, the following vulnerability has been resolved:
svcrdma: Va... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89530 In the Linux kernel, the following vulnerability has been resolved:
svcrdma: Re... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89492 In the Linux kernel, the following vulnerability has been resolved:
ocfs2: vali... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89494 In the Linux kernel, the following vulnerability has been resolved:
ocfs2: vali... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89495 In the Linux kernel, the following vulnerability has been resolved:
ocfs2: boun... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89485 In the Linux kernel, the following vulnerability has been resolved:
lockd: pin... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89478 In the Linux kernel, the following vulnerability has been resolved:
sctp: drop... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89479 In the Linux kernel, the following vulnerability has been resolved:
sctp: stop... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89482 In the Linux kernel, the following vulnerability has been resolved:
nvme-tcp: d... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89448 In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d:... |
critical | 9.3 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-81002 In the Linux kernel, the following vulnerability has been resolved:
xdp: fix ze... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80986 In the Linux kernel, the following vulnerability has been resolved:
net/smc: bo... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80980 In the Linux kernel, the following vulnerability has been resolved:
net/smc: st... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-80981 In the Linux kernel, the following vulnerability has been resolved:
net/smc: fi... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80976 In the Linux kernel, the following vulnerability has been resolved:
seg6: reset... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80945 In the Linux kernel, the following vulnerability has been resolved:
crypto: iaa... |
critical | 9.1 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-80926 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: fix... |
critical | 9.8 | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-53952 GetSimple CMS is a content management system (CMS), and GetSimple CMS CE is the... |
critical | 9.8 | — | — | 2026-09-11 | 2026-09-30 |
| CVE-2026-52630 SQL Injection vulnerability in Woltlab WCF v.6.2.4 and before allows a remote at... |
critical | 9.8 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-79395 An improper authentication vulnerability in the WS-Security (wsse:UsernameToken)... |
critical | 9.8 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-79396 Use of hardcoded default credentials in Xiongmai IP Camera XM530 firmware HMT.CM... |
critical | 9.8 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-62103 Unauthenticated PHP Object Injection in Everest Forms <= 3.6.0 versions. |
critical | 9.8 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-62105 Unauthenticated PHP Object Injection in ThemeREX Addons < 2.45.0 versions. |
critical | 9.8 | — | — | 2026-09-11 | 2026-09-11 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.