September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-86518 A vulnerability has been found in code-projects Student Crud Operation 1.0. |
medium | 6.3 | — | — | 2026-09-08 | 2026-09-28 |
| CVE-2026-86511 A vulnerability was found in java-json-tools jackson-coreutils 2.0. |
medium | 5.3 | — | — | 2026-09-08 | 2026-09-28 |
| CVE-2026-86512 A vulnerability was identified in java-json-tools json-patch up to 1.13. |
medium | 6.3 | — | — | 2026-09-08 | 2026-09-28 |
| CVE-2026-86513 A security flaw has been discovered in java-json-tools jackson-coreutils 2.0. |
medium | 5.3 | — | — | 2026-09-08 | 2026-09-28 |
| CVE-2026-86514 A weakness has been identified in vgmstream up to r2117. |
medium | 6.3 | — | — | 2026-09-08 | 2026-09-28 |
| CVE-2026-86515 A security vulnerability has been detected in vgmstream up to r2117. |
medium | 4.3 | — | — | 2026-09-08 | 2026-09-28 |
| CVE-2026-76963 Due to a missing authorization check in Application Server ABAP of SAP NetWeaver... |
medium | 4.3 | — | — | 2026-09-08 | 2026-09-08 |
| CVE-2026-76968 SAP Web Dispatcher, Internet Communication Manager and SAP Content Server allows... |
medium | 6.5 | — | — | 2026-09-08 | 2026-09-08 |
| CVE-2026-76971 Due to a Server-Side Request Forgery (SSRF) vulnerability in SAP Manufacturing I... |
medium | 6.5 | — | — | 2026-09-08 | 2026-09-08 |
| CVE-2026-76977 SAP UI5 does not sufficiently validate the parent frame's origin against the con... |
medium | 4.3 | — | — | 2026-09-08 | 2026-09-08 |
| CVE-2026-76959 SAP S/4HANA Finance (Advanced Payment Management) does not perform sufficient Cr... |
medium | 4.6 | — | — | 2026-09-08 | 2026-09-08 |
| CVE-2026-76962 SAP S/4HANA (Manage Bank Chains app) does not perform sufficient authorization c... |
medium | 4.3 | — | — | 2026-09-08 | 2026-09-08 |
| CVE-2026-44766 SAP S/4HANA (Intercompany Matching and Reconciliation) allows a low-privileged a... |
medium | 6.5 | — | — | 2026-09-08 | 2026-09-08 |
| CVE-2026-86436 Lara Dashboard before 1.3.2 fails to authorize access to the post-builder image... |
medium | 5.4 | — | — | 2026-09-07 | 2026-09-09 |
| CVE-2026-86506 In JetBrains GoLand before 2026.2.2.1 missing authentication on the GoLand profi... |
medium | 5.9 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86497 In JetBrains YouTrack before 2026.2.18769 changing a mailbox host without re-aut... |
medium | 6.8 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86499 In JetBrains YouTrack before 2026.1.14047 predefined search fields leaked all gr... |
medium | 4.3 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86500 In JetBrains YouTrack before 2026.1.14047 a missing escalation check let a user... |
medium | 5.5 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86488 In JetBrains YouTrack before 2026.2.18634 iDOR via the watchRules and issueListC... |
medium | 6.5 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86489 In JetBrains YouTrack before 2026.2.18634 an IDOR in the user profile API disclo... |
medium | 6.5 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86490 In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed ove... |
medium | 6.5 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86493 In JetBrains YouTrack before 2026.2.18634 improper permission checks allowed rea... |
medium | 6.5 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86495 In JetBrains YouTrack before 2026.2.18687 missing permission checks allowed crea... |
medium | 6.5 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86496 In JetBrains YouTrack before 2026.2.18769 missing access control on Helpdesk aut... |
medium | 4.3 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86481 In JetBrains YouTrack before 2026.2.18634 signed URL reuse allowed disclosure of... |
medium | 4.3 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86483 In JetBrains YouTrack before 2026.2.18634 stored XSS via a custom field on Agile... |
medium | 5.4 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86484 In JetBrains YouTrack before 2026.2.18634 angularJS template injection in assign... |
medium | 4.6 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-79975 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.5 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-80058 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.5 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-80125 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.9 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-80126 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 6.5 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-80167 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.5 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-80176 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 4.7 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-86321 A vulnerability was found in java-json-tools jackson-coreutils 2.0. |
medium | 5.3 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86469 A flaw was found in GLib2. |
medium | 5.3 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-79642 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.6 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-79943 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 4.8 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-80054 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.5 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-86318 A flaw has been found in java-json-tools json-patch up to 1.13. |
medium | 5.3 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86319 A vulnerability has been found in java-json-tools json-patch up to 1.13. |
medium | 5.3 | — | — | 2026-09-07 | 2026-09-09 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.