September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-87446 Incomplete cleanup in Extensions in Google Chrome prior to 153.0.8010.36 allowed... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87429 Missing authorization in ServiceWorker in Google Chrome prior to 153.0.8010.36 a... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87432 Incorrect authorization in Navigation in Google Chrome prior to 153.0.8010.36 al... |
medium | 4.2 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87435 Information leak in ControlledFrame in Google Chrome prior to 153.0.8010.36 allo... |
medium | 5.3 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-87436 Incomplete cleanup in Browser in Google Chrome prior to 153.0.8010.36 allowed a... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-10 |
| CVE-2026-87437 Information leak in Frames in Google Chrome prior to 153.0.8010.36 allowed a rem... |
medium | 6.5 | — | Google / chrome | 2026-09-09 | 2026-09-09 |
| CVE-2026-53937 MCP Kotlin SDK is the Kotlin Multiplatform software development kit for the Mode... |
medium | 6.2 | — | — | 2026-09-09 | 2026-09-14 |
| CVE-2026-53637 Sylius is an Open Source eCommerce Framework on Symfony. |
medium | 6.5 | — | — | 2026-09-08 | 2026-09-09 |
| CVE-2026-53638 Sylius is an Open Source eCommerce Framework on Symfony. |
medium | 4.3 | — | — | 2026-09-08 | 2026-09-14 |
| CVE-2026-18090 A flaw was found in gdk-pixbuf. |
medium | 6.1 | — | — | 2026-09-08 | 2026-09-14 |
| CVE-2026-86995 n8n is an open source workflow automation platform. |
medium | 4.3 | — | N8n / n8n | 2026-09-08 | 2026-09-10 |
| CVE-2026-86996 n8n is an open source workflow automation platform. |
medium | 5.4 | — | N8n / n8n | 2026-09-08 | 2026-09-10 |
| CVE-2026-86082 n8n is an open source workflow automation platform. |
medium | 6.5 | — | N8n / n8n | 2026-09-08 | 2026-09-14 |
| CVE-2026-86084 n8n is an open source workflow automation platform. |
medium | 5.5 | — | N8n / n8n | 2026-09-08 | 2026-09-10 |
| CVE-2026-86085 n8n is an open source workflow automation platform. |
medium | 4.9 | — | N8n / n8n | 2026-09-08 | 2026-09-14 |
| CVE-2026-86993 n8n is an open source workflow automation platform. |
medium | 4.9 | — | N8n / n8n | 2026-09-08 | 2026-09-10 |
| CVE-2026-86994 n8n is an open source workflow automation platform. |
medium | 4.3 | — | N8n / n8n | 2026-09-08 | 2026-09-10 |
| CVE-2026-86077 n8n is an open source workflow automation platform. |
medium | 6.5 | — | N8n / n8n | 2026-09-08 | 2026-09-14 |
| CVE-2026-86078 n8n is an open source workflow automation platform. |
medium | 6.5 | — | N8n / n8n | 2026-09-08 | 2026-09-11 |
| CVE-2026-86079 n8n is an open source workflow automation platform. |
medium | 6.5 | — | N8n / n8n | 2026-09-08 | 2026-09-11 |
| CVE-2026-86080 n8n is an open source workflow automation platform. |
medium | 5.3 | — | N8n / n8n | 2026-09-08 | 2026-09-11 |
| CVE-2026-85981 The administrative panel of the Auth0 AD/LDAP Connector (versions 6.5.0 and earl... |
medium | 6.7 | — | — | 2026-09-08 | 2026-09-10 |
| CVE-2026-81993 Acrobat Reader is affected by a Heap-based Buffer Overflow vulnerability that co... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81994 Acrobat Reader is affected by an Improperly Controlled Modification of Object Pr... |
medium | 6.3 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81997 Acrobat Reader is affected by an Incorrect Authorization vulnerability that coul... |
medium | 6.3 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-82001 Acrobat Reader is affected by an Uncontrolled Resource Consumption vulnerability... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-11 |
| CVE-2026-84685 The react-native-auth0 SDK's web platform implementation does not scope its in-m... |
medium | 6.5 | — | — | 2026-09-08 | 2026-09-10 |
| CVE-2026-81991 Acrobat Reader is affected by an out-of-bounds read vulnerability that could lea... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81977 Acrobat Reader is affected by an Integer Underflow (Wrap or Wraparound) vulnerab... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-11 |
| CVE-2026-81978 Acrobat Reader is affected by an out-of-bounds read vulnerability that could lea... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81982 Acrobat Reader is affected by an out-of-bounds read vulnerability that could lea... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-11 |
| CVE-2026-81984 Acrobat Reader is affected by a Use After Free vulnerability that could lead to... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-80160 Acrobat Reader is affected by an out-of-bounds read vulnerability that could lea... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-80162 Acrobat Reader is affected by a Use After Free vulnerability that could lead to... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-78742 Silverpeas Core <=6.4.6 is vulnerable to Cross Site Scripting (XSS) via the Mult... |
medium | 6.1 | — | — | 2026-09-08 | 2026-09-09 |
| CVE-2026-78971 In Halo <= 2.25.4, the plugin management feature allows users to install/update... |
medium | 4.6 | — | — | 2026-09-08 | 2026-09-14 |
| CVE-2026-79588 U-speed WIFI4 N300 T1 Pro v1.0.0 is vulnerable to Cleartext transmission of admi... |
medium | 4.3 | — | — | 2026-09-08 | 2026-09-09 |
| CVE-2026-79910 Acrobat Reader is affected by an out-of-bounds read vulnerability that could lea... |
medium | 5.5 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-80159 Acrobat Reader is affected by an Untrusted Search Path vulnerability that could... |
medium | 4.0 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-78622 The Okta Verify for Windows uninstaller does not verify whether the user data di... |
medium | 6.0 | — | — | 2026-09-08 | 2026-09-10 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.