September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-85695 FastChat contains an authentication bypass vulnerability in the /register_worker... |
critical | 9.4 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85684 marker through 2.0.0 contains a path traversal vulnerability in the FastAPI /mar... |
critical | 9.1 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85688 TEN Framework 0.11.71 contains unauthenticated arbitrary file read and write vul... |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-24 |
| CVE-2026-85672 zerox 1.1.20 contains an OS command injection vulnerability in the file download... |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85667 xiaobei through 5.5.2 fails to implement authentication or signature validation... |
critical | 9.1 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85661 excel-mcp-server 0.1.8 fails to enforce path confinement in stdio mode when EXCE... |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-23 |
| CVE-2026-85663 Aim 3.29.1 remote tracking server fails to authenticate requests and dispatches... |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85596 Traefik versions >= v3.7.0 and <= v3.7.10 contain an authentication bypass in th... |
critical | 9.8 | — | Traefik / traefik | 2026-09-04 | 2026-10-08 |
| CVE-2026-85597 Traefik before v2.11.55 and v3.0.0 through v3.7.10 contain a TLS option conflict... |
critical | 9.1 | — | Traefik / traefik | 2026-09-04 | 2026-10-08 |
| CVE-2026-85594 Traefik versions from v3.7.1 fail to enforce crossProviderNamespaces restriction... |
critical | 9.8 | — | Traefik / traefik | 2026-09-04 | 2026-10-08 |
| CVE-2026-85595 Traefik versions before v2.11.55 and versions v3.0.0 through v3.7.10 contain an... |
critical | 9.8 | — | Traefik / traefik | 2026-09-04 | 2026-10-08 |
| CVE-2026-82923 The AI Website Builder WordPress plugin (GitHub build) 1.0.0 does not perform an... |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-85184 @fastify/middie versions >= 9.1.0 and before 9.3.4 decide whether to run path-sc... |
critical | 9.1 | — | Fastify / fastify\/middie | 2026-09-04 | 2026-09-15 |
| CVE-2026-85085 The Canva Android App before 2.376.0 allowed an external origin to be loaded in... |
critical | 9.6 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-80181 Apache Allura's webhooks are vulnerable to Server-Side Request Forgery (SSRF). |
critical | 9.1 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-62928 XING CPTrans-ME-X contains an OS Command Injection (CWE-78). |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-69657 XING CPTrans-ME-X contains a Use of Default Password (CWE-1393). |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-70403 XING CPTrans-ME-X contains a Use of Hard-coded Password (CWE-259). |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-85504 FreeIPMI before 1.6.19 has a stack-based buffer overflow in _ipmi_sel_oem_fujits... |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-85506 ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _get_del... |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-09 |
| CVE-2026-85507 ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_... |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-14 |
| CVE-2026-85508 ipmi-oem in FreeIPMI before 1.6.19 has a stack-based buffer overflow in _output_... |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-85509 FreeIPMI before 1.6.19 has a stack-based buffer overflow in _read_fru_data in li... |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-11613 The Divi Ajax Filter plugin for WordPress is vulnerable to Local File Inclusion... |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-07 |
| CVE-2026-85148 SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentia... |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-85146 SmartIT Desktop Manager developed by Lightstar has a Use of Hard-coded Credentia... |
critical | 9.8 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-85437 MOOS-IvP through 24.8.1 contains multiple buffer overflow vulnerabilities in IvP... |
critical | 9.8 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85438 MOOS-IvP through 24.8.1 contains a buffer overflow vulnerability in StringToIvPF... |
critical | 9.8 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85440 MOOS core-moos through 10.4.0 contains a pre-authentication heap overflow vulner... |
critical | 9.8 | — | Themoos / core-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-85430 MOOS essential-moos through 10.0.1 contains an authentication bypass vulnerabili... |
critical | 9.1 | — | Themoos / essential-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-85433 MOOS essential-moos pShare through 10.0.1 fails to properly authorize PSHARE_CMD... |
critical | 9.8 | — | Themoos / essential-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-85434 MOOS-IvP uFldShoreBroker through 24.8.1 fails to verify node ping authenticity b... |
critical | 9.1 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85435 MOOS-IvP uFldNodeBroker through 24.8.1 fails to validate the source of TRY_SHORE... |
critical | 9.1 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85424 MOOS core-moos through 10.4.0 lacks authentication in the wire protocol, allowin... |
critical | 9.8 | — | Themoos / core-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-85425 MOOS-IvP iSay through 24.8.1 contains a remote code execution vulnerability in t... |
critical | 9.8 | — | Mit / moos-ivp | 2026-09-03 | 2026-10-14 |
| CVE-2026-85426 MOOS-IvP uMemWatch through 24.8.1 constructs shell commands from attacker-chosen... |
critical | 9.8 | — | — | 2026-09-03 | 2026-09-08 |
| CVE-2026-85427 MOOS essential-moos pAntler through 10.0.1 contains a remote code execution vuln... |
critical | 9.8 | — | Themoos / essential-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-85428 MOOS core-moos through 10.4.0 contains an authentication bypass vulnerability in... |
critical | 9.8 | — | Themoos / core-moos | 2026-09-03 | 2026-10-14 |
| CVE-2026-70352 Missing authentication for critical function in Azure AI Language allows an unau... |
critical | 10.0 | — | Microsoft / azure ai language authoring | 2026-09-03 | 2026-10-14 |
| CVE-2026-80098 Improper verification of cryptographic signature in Copilot Studio allows an una... |
critical | 10.0 | — | Microsoft / copilot studio | 2026-09-03 | 2026-09-08 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.