September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-97566 In the Linux kernel, the following vulnerability has been resolved:
mptcp: pm:... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97567 In the Linux kernel, the following vulnerability has been resolved:
mptcp: prev... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97568 In the Linux kernel, the following vulnerability has been resolved:
mptcp: sync... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97569 In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Pr... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97571 In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Pr... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97572 In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Pr... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97556 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97558 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97559 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97560 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97561 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97563 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97547 In the Linux kernel, the following vulnerability has been resolved:
xfs: fix ex... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97549 In the Linux kernel, the following vulnerability has been resolved:
xfs: fix un... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97550 In the Linux kernel, the following vulnerability has been resolved:
xfs: fix un... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97551 In the Linux kernel, the following vulnerability has been resolved:
xfs: initia... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97552 In the Linux kernel, the following vulnerability has been resolved:
xfs: initia... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97553 In the Linux kernel, the following vulnerability has been resolved:
xfs: lock t... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97554 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97538 In the Linux kernel, the following vulnerability has been resolved:
hwmon: (asu... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97539 In the Linux kernel, the following vulnerability has been resolved:
usb: xusbat... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97540 In the Linux kernel, the following vulnerability has been resolved:
net: usb: p... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97541 In the Linux kernel, the following vulnerability has been resolved:
wifi: ath9k... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97542 In the Linux kernel, the following vulnerability has been resolved:
xfs: bail o... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97543 In the Linux kernel, the following vulnerability has been resolved:
xfs: destro... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97544 In the Linux kernel, the following vulnerability has been resolved:
xfs: don't... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97545 In the Linux kernel, the following vulnerability has been resolved:
xfs: don't... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97546 In the Linux kernel, the following vulnerability has been resolved:
xfs: don't... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97529 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97530 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97532 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97533 In the Linux kernel, the following vulnerability has been resolved:
x86/mm/pat:... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97534 In the Linux kernel, the following vulnerability has been resolved:
f2fs: accur... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97535 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97537 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
not reported | — | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97522 In the Linux kernel, the following vulnerability has been resolved:
mptcp: fix... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97526 In the Linux kernel, the following vulnerability has been resolved:
s390/pai: S... |
not reported | — | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-27867 An attacker with access via network to the Regesta Smart HD-PLC of the provider... |
not reported | — | — | — | 2026-09-25 | 2026-09-30 |
| CVE-2026-92106 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
not reported | — | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-97898 Insecure Direct Object Reference / missing object-level authorization in the Aki... |
not reported | — | — | — | 2026-09-25 | 2026-09-25 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.