Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

September 2026 CVE archive

Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in September 2026Materially updated (Critical / KEV)
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32

Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-97907
In the Linux kernel, the following vulnerability has been resolved: Bluetooth:...
not reported— —— 2026-09-252026-10-19
CVE-2026-97908
In the Linux kernel, the following vulnerability has been resolved: Bluetooth:...
not reported— —— 2026-09-252026-10-21
CVE-2026-97909
In the Linux kernel, the following vulnerability has been resolved: ASoC: sti:...
not reported— —— 2026-09-252026-10-19
CVE-2026-97618
In the Linux kernel, the following vulnerability has been resolved: io_uring/ne...
not reported— —— 2026-09-252026-10-19
CVE-2026-97619
In the Linux kernel, the following vulnerability has been resolved: io_uring/rw...
not reported— —— 2026-09-252026-10-21
CVE-2026-97620
In the Linux kernel, the following vulnerability has been resolved: drm/xe: Flu...
not reported— —— 2026-09-252026-10-19
CVE-2026-97621
In the Linux kernel, the following vulnerability has been resolved: drm/rockchi...
not reported— —— 2026-09-252026-10-19
CVE-2026-97899
In the Linux kernel, the following vulnerability has been resolved: drm/i915: F...
not reported— —— 2026-09-252026-10-19
CVE-2026-97900
In the Linux kernel, the following vulnerability has been resolved: drm/drm_exe...
not reported— —— 2026-09-252026-10-19
CVE-2026-97901
In the Linux kernel, the following vulnerability has been resolved: genetlink:...
not reported— —— 2026-09-252026-10-21
CVE-2026-97610
In the Linux kernel, the following vulnerability has been resolved: netfs: Fix...
not reported— —— 2026-09-252026-10-19
CVE-2026-97613
In the Linux kernel, the following vulnerability has been resolved: net: mana:...
not reported— —— 2026-09-252026-10-19
CVE-2026-97614
In the Linux kernel, the following vulnerability has been resolved: net: dsa: t...
not reported— —— 2026-09-252026-10-19
CVE-2026-97615
In the Linux kernel, the following vulnerability has been resolved: net: bridge...
not reported— —— 2026-09-252026-10-21
CVE-2026-97616
In the Linux kernel, the following vulnerability has been resolved: net/sched:...
not reported— —— 2026-09-252026-10-21
CVE-2026-97617
In the Linux kernel, the following vulnerability has been resolved: ring-buffer...
not reported— —— 2026-09-252026-10-19
CVE-2026-97604
In the Linux kernel, the following vulnerability has been resolved: fbdev: vfb:...
not reported— —— 2026-09-252026-10-19
CVE-2026-97605
In the Linux kernel, the following vulnerability has been resolved: erofs: pres...
not reported— —— 2026-09-252026-10-21
CVE-2026-97606
In the Linux kernel, the following vulnerability has been resolved: fs: autofs:...
not reported— —— 2026-09-252026-10-19
CVE-2026-97607
In the Linux kernel, the following vulnerability has been resolved: vdpa: ifcvf...
not reported— —— 2026-09-252026-10-19
CVE-2026-97603
In the Linux kernel, the following vulnerability has been resolved: idpf: disab...
not reported— —— 2026-09-252026-10-19
CVE-2026-97597
In the Linux kernel, the following vulnerability has been resolved: ipv6: flowl...
not reported— —— 2026-09-252026-10-21
CVE-2026-97598
In the Linux kernel, the following vulnerability has been resolved: ipv4: fib:...
not reported— —— 2026-09-252026-10-19
CVE-2026-97599
In the Linux kernel, the following vulnerability has been resolved: ieee802154:...
not reported— —— 2026-09-252026-10-19
CVE-2026-97600
In the Linux kernel, the following vulnerability has been resolved: ieee802154:...
not reported— —— 2026-09-252026-10-21
CVE-2026-97601
In the Linux kernel, the following vulnerability has been resolved: ieee802154:...
not reported— —— 2026-09-252026-10-19
CVE-2026-97590
In the Linux kernel, the following vulnerability has been resolved: s390/crypto...
not reported— —— 2026-09-252026-10-19
CVE-2026-97591
In the Linux kernel, the following vulnerability has been resolved: s390/crypto...
not reported— —— 2026-09-252026-10-19
CVE-2026-97592
In the Linux kernel, the following vulnerability has been resolved: s390/crypto...
not reported— —— 2026-09-252026-10-19
CVE-2026-97593
In the Linux kernel, the following vulnerability has been resolved: iommu/s390:...
not reported— —— 2026-09-252026-10-19
CVE-2026-97596
In the Linux kernel, the following vulnerability has been resolved: ipvs: rejec...
not reported— —— 2026-09-252026-10-19
CVE-2026-97582
In the Linux kernel, the following vulnerability has been resolved: hwmon: (gpi...
not reported— —— 2026-09-252026-10-19
CVE-2026-97585
In the Linux kernel, the following vulnerability has been resolved: afs: Fix do...
not reported— —— 2026-09-252026-10-19
CVE-2026-97586
In the Linux kernel, the following vulnerability has been resolved: afs: Fix mi...
not reported— —— 2026-09-252026-10-19
CVE-2026-97587
In the Linux kernel, the following vulnerability has been resolved: perf: RISC-...
not reported— —— 2026-09-252026-10-21
CVE-2026-97588
In the Linux kernel, the following vulnerability has been resolved: s390/crypto...
not reported— —— 2026-09-252026-10-19
CVE-2026-97574
In the Linux kernel, the following vulnerability has been resolved: bnxt_en: Do...
not reported— —— 2026-09-252026-10-19
CVE-2026-97581
In the Linux kernel, the following vulnerability has been resolved: media: veri...
not reported— —— 2026-09-252026-10-19
CVE-2026-97564
In the Linux kernel, the following vulnerability has been resolved: smb: client...
not reported— —— 2026-09-252026-10-19
CVE-2026-97565
In the Linux kernel, the following vulnerability has been resolved: smb: client...
not reported— —— 2026-09-252026-10-19

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.