September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-77697 Zohocorp ManageEngine Endpoint Central versions below 11.4.2540.23 are vulnerabl... |
medium | 6.3 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86293 A flaw has been found in SourceCodester Simple Traffic Offense System 1.0. |
medium | 6.5 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86347 Affected versions of MISP allow any authenticated user to access TemplatesContro... |
medium | 6.5 | — | Misp-project / misp | 2026-09-07 | 2026-09-09 |
| CVE-2026-86291 A security vulnerability has been detected in itsourcecode Sales and Inventory S... |
medium | 6.3 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-77698 Zohocorp ManageEngine Endpoint Central versions before 11.5.2605.01 are vulnerab... |
medium | 5.7 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86285 A vulnerability was detected in BookStack up to 26.05.2. |
medium | 4.3 | — | — | 2026-09-07 | 2026-09-09 |
| CVE-2026-86288 A vulnerability has been found in ModelCloud GPTQModel up to 7.2.0. |
medium | 6.3 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86289 A vulnerability was found in Ollama up to 0.31.1. |
medium | 4.3 | — | — | 2026-09-07 | 2026-09-11 |
| CVE-2026-86332 A flaw was found in odh-dashboard in Red Hat OpenShift AI. |
medium | 6.5 | — | — | 2026-09-07 | 2026-10-22 |
| CVE-2026-86342 Affected versions of MISP contain improper authorization checks in the freetext... |
medium | 4.3 | — | Misp-project / misp | 2026-09-07 | 2026-09-09 |
| CVE-2026-86281 A security flaw has been discovered in SourceCodester Syllabus-Aligned Learning... |
medium | 4.3 | — | — | 2026-09-07 | 2026-09-11 |
| CVE-2026-86284 A security vulnerability has been detected in jaychouchannel Tourism-Management-... |
medium | 5.3 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86280 A vulnerability was identified in SourceCodester Syllabus-Aligned Learning Manag... |
medium | 5.3 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86278 A vulnerability was found in SourceCodester Syllabus-Aligned Learning Management... |
medium | 4.3 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86279 A vulnerability was determined in SourceCodester Syllabus-Aligned Learning Manag... |
medium | 6.3 | — | — | 2026-09-07 | 2026-09-09 |
| CVE-2026-86274 A security vulnerability has been detected in projeto-siga siga up to 11.0.2.10/... |
medium | 5.3 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86275 A vulnerability was detected in SourceCodester Syllabus-Aligned Learning Managem... |
medium | 5.3 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86270 A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. |
medium | 6.3 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-86271 A vulnerability was found in FluentCMS up to 0.0.5. |
medium | 4.7 | — | — | 2026-09-07 | 2026-09-09 |
| CVE-2026-86267 A security vulnerability has been detected in itsourcecode Information System So... |
medium | 6.3 | — | — | 2026-09-07 | 2026-09-28 |
| CVE-2026-86269 A flaw has been found in itsourcecode Sales and Inventory System 1.0. |
medium | 6.3 | — | — | 2026-09-07 | 2026-10-24 |
| CVE-2026-86315 An out-of-bounds write caused by numeric truncation Samsung Open Source Escargot... |
medium | 6.2 | — | — | 2026-09-07 | 2026-09-28 |
| CVE-2026-86265 A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. |
medium | 6.3 | — | — | 2026-09-07 | 2026-10-24 |
| CVE-2026-86264 A flaw has been found in sfturing ssm_pro up to 627f426331da8086ce8fff2017d65b1d... |
medium | 4.3 | — | — | 2026-09-07 | 2026-09-28 |
| CVE-2026-86314 Integer overflow in the source-bounds check in Memory::init() (src/runtime/Memor... |
medium | 6.2 | — | — | 2026-09-07 | 2026-09-28 |
| CVE-2026-86260 A security flaw has been discovered in sfturing hosp_order up to 627f426331da808... |
medium | 6.5 | — | — | 2026-09-07 | 2026-09-28 |
| CVE-2026-86241 A weakness has been identified in liufee FeehiCMS up to 2.1.1. |
medium | 4.3 | — | — | 2026-09-07 | 2026-09-28 |
| CVE-2026-86244 A security vulnerability has been detected in FastAdmin up to 1.2.0.20210401_bet... |
medium | 4.3 | — | — | 2026-09-07 | 2026-09-28 |
| CVE-2026-86245 A vulnerability was detected in itsourcecode Sales and Inventory System 1.0. |
medium | 6.3 | — | — | 2026-09-07 | 2026-10-24 |
| CVE-2026-20513 In Audio HAL, there is a possible information disclosure due to improper input v... |
medium | 4.4 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-20514 In Audio HAL, there is a possible information disclosure due to a missing permis... |
medium | 4.4 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-20515 In gpu, there is a possible system crash due to use after free. |
medium | 5.5 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-20516 In MiracastService, there is a possible escalation of privilege due to a confuse... |
medium | 5.5 | — | — | 2026-09-07 | 2026-09-22 |
| CVE-2026-20517 In geniezone, there is a possible escalation of privilege due to use after free. |
medium | 6.7 | — | — | 2026-09-07 | 2026-09-08 |
| CVE-2026-20518 In geniezone, there is a possible information disclosure due to a missing bounds... |
medium | 4.4 | — | — | 2026-09-07 | 2026-09-28 |
| CVE-2026-86239 A vulnerability was identified in liufee FeehiCMS up to 2.1.1. |
medium | 5.3 | — | — | 2026-09-07 | 2026-09-28 |
| CVE-2026-86240 A security flaw has been discovered in liufee FeehiCMS up to 2.1.1. |
medium | 4.7 | — | — | 2026-09-07 | 2026-09-28 |
| CVE-2026-20503 In Modem, there is a possible system crash due to a missing bounds check. |
medium | 5.3 | — | Mediatek / mt2716 firmware | 2026-09-07 | 2026-09-09 |
| CVE-2026-20504 In Modem, there is a possible system crash due to a missing bounds check. |
medium | 5.3 | — | Mediatek / mt2735 firmware | 2026-09-07 | 2026-09-09 |
| CVE-2026-20506 In Audio HAL, there is a possible escalation of privilege due to use after free. |
medium | 6.7 | — | — | 2026-09-07 | 2026-09-08 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.