September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-69579 Use after free in Windows Message Queuing allows an unauthorized attacker to exe... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69525 Use after free in Windows Remote Desktop Services allows an unauthorized attacke... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69496 Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized a... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69491 Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthoriz... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69493 Out-of-bounds read in Windows Event Logging Service allows an unauthorized attac... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
| CVE-2026-69463 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to ex... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69431 Heap-based buffer overflow in Telnet Client allows an unauthorized attacker to e... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69408 Integer overflow or wraparound in Microsoft Windows Media Foundation allows an u... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69356 Improper neutralization of input during web page generation ('cross-site scripti... |
critical | 9.3 | — | Microsoft / exchange server | 2026-09-08 | 2026-09-30 |
| CVE-2026-69276 Integer underflow (wrap or wraparound) in Microsoft UxTheme Library (uxtheme.dll... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-68839 Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an un... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-67643 Heap-based buffer overflow in SQL Server allows an unauthorized attacker to exec... |
critical | 9.8 | — | Microsoft / sql server 2022 | 2026-09-08 | 2026-09-17 |
| CVE-2026-67631 Heap-based buffer overflow in SQL Server allows an unauthorized attacker to exec... |
critical | 9.8 | — | Microsoft / sql server 2017 | 2026-09-08 | 2026-09-17 |
| CVE-2026-67636 Out-of-bounds read in SQL Server allows an unauthorized attacker to execute code... |
critical | 9.0 | — | Microsoft / sql server 2019 | 2026-09-08 | 2026-09-17 |
| CVE-2026-67378 Untrusted pointer dereference in SQL Server allows an unauthorized attacker to e... |
critical | 9.0 | — | Microsoft / sql server 2019 | 2026-09-08 | 2026-09-17 |
| CVE-2026-65669 Improper neutralization of special elements in output used by a downstream compo... |
critical | 9.6 | — | Microsoft / sql server management studio | 2026-09-08 | 2026-10-07 |
| CVE-2026-82533 DeepSeek Harness before 0.1.2-alpha.1 contains an authentication bypass vulnerab... |
critical | 9.6 | — | — | 2026-09-08 | 2026-09-10 |
| CVE-2026-78997 UC Browser for Android (package com.UCMobile.intl, version 13.7.8.1314) contains... |
critical | 9.3 | — | — | 2026-09-08 | 2026-09-09 |
| CVE-2026-79569 Movie_Recommend v1.0.0 was discovered to contain a SQL injection vulnerability i... |
critical | 9.8 | — | — | 2026-09-08 | 2026-09-09 |
| CVE-2026-79570 mfish-nocode-pro v1.0.0 was discovered to contain a SQL injection vulnerability... |
critical | 9.8 | — | — | 2026-09-08 | 2026-09-09 |
| CVE-2026-75156 Apache Airflow FAB provider versions 3.7.3 through 3.8.0 do not validate the iss... |
critical | 9.1 | — | Apache / apache-airflow-providers-fab | 2026-09-08 | 2026-09-18 |
| CVE-2026-26084 A improper access control vulnerability in Fortinet FortiSandbox 5.0.0 through 5... |
critical | 9.9 | — | — | 2026-09-08 | 2026-09-08 |
| CVE-2026-86840 The `vtoken-minting` and `slpx` pallets in Bifrost contain an improper authoriza... |
critical | 9.1 | — | — | 2026-09-08 | 2026-09-10 |
| CVE-2026-79574 An issue in the gateway server of mpush v0.8.1 allows attackers to execute arbit... |
critical | 9.8 | — | — | 2026-09-08 | 2026-09-09 |
| CVE-2026-79571 Incorrect access control in the SellerAuthorizeAspect component of springboot-pr... |
critical | 9.1 | — | — | 2026-09-08 | 2026-09-09 |
| CVE-2026-79576 An issue in the Single-Sign On (SSO) component of Digital-Infrastructure v9.6.7... |
critical | 9.8 | — | — | 2026-09-08 | 2026-09-09 |
| CVE-2026-79577 An issue in the /cas/login component of sso-master v1.0.0 allows attackers to au... |
critical | 9.8 | — | — | 2026-09-08 | 2026-09-14 |
| CVE-2026-61516 Netis NX10 firmware V4.0.1.5808 and V3.0.0.4142 contain an information disclosur... |
critical | 9.8 | — | — | 2026-09-08 | 2026-09-19 |
| CVE-2026-12744 A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM bef... |
critical | 9.8 | — | Ivanti / neurons for itsm | 2026-09-08 | 2026-09-18 |
| CVE-2026-12745 A Deserialization of Untrusted Data vulnerability in Ivanti Neurons for ITSM bef... |
critical | 9.8 | — | Ivanti / neurons for itsm | 2026-09-08 | 2026-09-18 |
| CVE-2026-73309 XenForo before 2.3.13 contains an authentication bypass vulnerability in the OAu... |
critical | 9.1 | — | Xenforo / xenforo | 2026-09-08 | 2026-09-11 |
| CVE-2026-77089 Command Center API contained an authentication bypass issue affecting privilege... |
critical | 9.8 | — | Commvault / commvault | 2026-09-08 | 2026-09-11 |
| CVE-2026-77092 Content Extractor contained a deserialization of untrusted data issue affecting... |
critical | 9.8 | — | Commvault / commvault | 2026-09-08 | 2026-09-11 |
| CVE-2026-77098 Private Metrics Server contained an SQL injection condition affecting database o... |
critical | 9.8 | — | Commvault / commvault | 2026-09-08 | 2026-09-11 |
| CVE-2026-78234 A flaw was found in hawtio-operator. |
critical | 9.9 | — | — | 2026-09-08 | 2026-09-08 |
| CVE-2026-71376 OS command injection vulnerability in Cosminexus Component Container. |
critical | 9.8 | — | — | 2026-09-08 | 2026-09-08 |
| CVE-2026-71377 Command Argument Injection Vulnerability in Cosminexus Component Container. |
critical | 9.8 | — | — | 2026-09-08 | 2026-09-08 |
| CVE-2026-62645 A vulnerability has been identified in Reyrolle 7SR5 (All versions < V2.70). |
critical | 9.8 | — | — | 2026-09-08 | 2026-09-08 |
| CVE-2026-50093 A vulnerability has been identified in Siveillance Control Pro V3.0 (All version... |
critical | 9.0 | — | — | 2026-09-08 | 2026-09-08 |
| CVE-2026-71374 Deserialization of untrusted data vulnerability in Cosminexus Component Containe... |
critical | 9.8 | — | — | 2026-09-08 | 2026-09-08 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.