September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-54072 Authorizer is an open-source, self-hostable authentication and authorization ser... |
critical | 9.3 | — | — | 2026-09-11 | 2026-09-30 |
| CVE-2026-82617 The two built-in name-finder patterns exposed by
opennlp.tools.namefind.RegexNam... |
critical | 9.8 | — | Apache / opennlp | 2026-09-11 | 2026-09-16 |
| CVE-2026-72709 SPIP before version 4.4.18 contains a missing authorization vulnerability in sen... |
critical | 9.8 | — | — | 2026-09-11 | 2026-09-15 |
| CVE-2026-72710 SPIP before 4.4.18 contains a mass assignment vulnerability in the editer_objet... |
critical | 9.8 | — | — | 2026-09-11 | 2026-09-15 |
| CVE-2026-89009 WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 cont... |
critical | 9.1 | — | — | 2026-09-11 | 2026-09-15 |
| CVE-2026-89010 WAVLINK WN535M1 and WN535M3 routers running firmware prior to M35M1_V250922 cont... |
critical | 9.8 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-71644 An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: c... |
critical | 9.8 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-80462 A vulnerability in the Chef Automate API gateway and identity validation path ma... |
critical | 10.0 | — | — | 2026-09-11 | 2026-09-18 |
| CVE-2026-84390 A inclusion of sensitive information in source code vulnerability in Fortinet Fo... |
critical | 9.8 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-89259 Hugo is a static site generator. |
critical | 9.8 | — | — | 2026-09-11 | 2026-09-24 |
| CVE-2026-86793 SGLang allows unauthenticated pickle deserialization through /update_weights_fro... |
critical | 9.8 | — | — | 2026-09-11 | 2026-09-14 |
| CVE-2026-14563 The advanced-customized-prompts WordPress plugin through 1.0.1 does not verify t... |
critical | 9.8 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-14559 The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not verify a... |
critical | 9.8 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-14560 The teddy-bear-customize-addon WordPress plugin through 1.0.5 does not properly... |
critical | 10.0 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-8778 The MIPL Grouped Checkout Fields for WooCommerce – Customize & Organize Checkout... |
critical | 9.8 | — | — | 2026-09-11 | 2026-09-11 |
| CVE-2026-82107 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
critical | 9.6 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-80424 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
critical | 9.1 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-81204 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute a... |
critical | 9.8 | — | Langflow / langflow | 2026-09-10 | 2026-09-16 |
| CVE-2026-79724 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote attacker to execute a... |
critical | 9.8 | — | Langflow / langflow | 2026-09-10 | 2026-09-16 |
| CVE-2026-78573 IBM ContextForge MCP Gateway 1.0.0 through 1.0.7 could allow a remote attacker t... |
critical | 9.8 | — | Ibm / contextforge | 2026-09-10 | 2026-09-16 |
| CVE-2026-71640 An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e... |
critical | 9.1 | — | — | 2026-09-10 | 2026-09-22 |
| CVE-2026-45764 Suricata is a network Intrusion Detection System, Intrusion Prevention System an... |
critical | 9.1 | — | Oisf / suricata | 2026-09-10 | 2026-09-16 |
| CVE-2026-19646 IBM Common Licensing Agent 9.0, Agent 9.0.0.1, Agent 9.0.0.2, ART 9.0, ART 9.0.0... |
critical | 9.1 | — | — | 2026-09-10 | 2026-09-11 |
| CVE-2026-89094 Forgejo before 16.0.4 allows remote code execution via a crafted template reposi... |
critical | 9.9 | — | — | 2026-09-10 | 2026-09-22 |
| CVE-2026-85025 IBM Langflow OSS 1.0.0 through 1.11.5 Langflow could allow an unauthenticated at... |
critical | 9.8 | — | Langflow / langflow | 2026-09-10 | 2026-09-15 |
| CVE-2026-75940 A vulnerability was reported in Lenovo Health Android Application, distributed e... |
critical | 9.1 | — | — | 2026-09-10 | 2026-09-11 |
| CVE-2026-89086 In the jose package before 0.11.0 for OCaml, library calls to validate an RSA si... |
critical | 9.1 | — | — | 2026-09-10 | 2026-09-22 |
| CVE-2026-89049 A server-side request forgery issue due to improper validation of equivalent add... |
critical | 9.9 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-88056 Angular is a development platform for building mobile and desktop web applicatio... |
critical | 9.1 | — | Angular / angular | 2026-09-10 | 2026-09-29 |
| CVE-2026-89042 passport-saml-encrypted through 0.1.13 makes SAML signature verification conditi... |
critical | 9.1 | — | — | 2026-09-10 | 2026-09-11 |
| CVE-2026-68006 An issue in Puma v.5.0.0 and before v.8.0.3 allows an attacker to execute arbitr... |
critical | 9.1 | — | — | 2026-09-10 | 2026-09-14 |
| CVE-2026-88044 rclone is a command-line program to sync files and directories to and from diffe... |
critical | 9.1 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-85228 An integer overflow in the tensor buffer validation component in Amazon Deep Jav... |
critical | 9.1 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-68487 Path traversal in Plesk's Backup Manager causes arbitrary file write as root by... |
critical | 9.9 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-68488 A Time-of-check Time-of-use (TOCTOU) race condition leading to insecure symlink... |
critical | 9.9 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-52098 An issue in Flowise 3.1.2 allows a remote attacker to execute arbitrary code via... |
critical | 9.8 | — | Flowiseai / flowise | 2026-09-10 | 2026-09-15 |
| CVE-2026-88899 knowns versions before 0.31.0 fail to properly validate the x-opencode-directory... |
critical | 9.8 | — | — | 2026-09-10 | 2026-09-11 |
| CVE-2026-88018 rclone is a command-line program to sync files and directories to and from diffe... |
critical | 9.8 | — | Rclone / rclone | 2026-09-10 | 2026-09-14 |
| CVE-2026-81467 Dell ThinOS 10, versions prior to 2605_10. |
critical | 9.8 | — | Dell / thinos | 2026-09-10 | 2026-09-16 |
| CVE-2026-81046 Dell ThinOS 10, versions prior to 2605_10.2616, contain a Protection Mechanism F... |
critical | 9.4 | — | Dell / thinos | 2026-09-10 | 2026-09-16 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.