September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-100190 The AIL Framework crawler splash domain page (showDomain.html) is vulnerable to... |
not reported | — | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-100174 The AIL Framework tag selector component (var/www/static/js/tags.js) is vulnerab... |
not reported | — | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-100172 The AIL Framework (ail-project/ail-framework) contains a stored cross-site scrip... |
not reported | — | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-95832 Improper Neutralization of Special Elements in Output Used by a Downstream Compo... |
not reported | — | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-97622 Rejected reason: ** REJECT ** DO NOT USE THIS CANDIDATE NUMBER. |
not reported | — | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-98106 In the Linux kernel, the following vulnerability has been resolved:
drm/pagemap... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98107 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-98103 In the Linux kernel, the following vulnerability has been resolved:
igmp: conve... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-98104 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98105 In the Linux kernel, the following vulnerability has been resolved:
net: ethern... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98101 In the Linux kernel, the following vulnerability has been resolved:
ipv6: mcast... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98102 In the Linux kernel, the following vulnerability has been resolved:
ipv6: mcast... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98085 In the Linux kernel, the following vulnerability has been resolved:
bpf: backtr... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-98086 In the Linux kernel, the following vulnerability has been resolved:
ALSA: ump:... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98087 In the Linux kernel, the following vulnerability has been resolved:
sched/rt,dl... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98088 In the Linux kernel, the following vulnerability has been resolved:
scsi: mpt3s... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98089 In the Linux kernel, the following vulnerability has been resolved:
bonding: al... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98077 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98079 In the Linux kernel, the following vulnerability has been resolved:
btrfs: zstd... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-98081 In the Linux kernel, the following vulnerability has been resolved:
btrfs: zone... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-98084 In the Linux kernel, the following vulnerability has been resolved:
bpf: backtr... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-98071 In the Linux kernel, the following vulnerability has been resolved:
net/rds: cl... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98072 In the Linux kernel, the following vulnerability has been resolved:
net/rds: us... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98074 In the Linux kernel, the following vulnerability has been resolved:
bonding: do... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98075 In the Linux kernel, the following vulnerability has been resolved:
bpf: reject... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98076 In the Linux kernel, the following vulnerability has been resolved:
tracing/pro... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98060 In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98061 In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98063 In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix NU... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98064 In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix NU... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98065 In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98066 In the Linux kernel, the following vulnerability has been resolved:
ALSA: caiaq... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98067 In the Linux kernel, the following vulnerability has been resolved:
erofs: disa... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-98068 In the Linux kernel, the following vulnerability has been resolved:
net/rds: do... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98055 In the Linux kernel, the following vulnerability has been resolved:
ASoC: Intel... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98057 In the Linux kernel, the following vulnerability has been resolved:
ring-buffer... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-98058 In the Linux kernel, the following vulnerability has been resolved:
bpf: Mark s... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-98043 In the Linux kernel, the following vulnerability has been resolved:
bpf: Don't... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-98044 In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-98045 In the Linux kernel, the following vulnerability has been resolved:
bpf: Mark f... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.