September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,833
Low
527
Severity not reported
2,537
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-97440 In the Linux kernel, the following vulnerability has been resolved:
net: qrtr:... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97441 In the Linux kernel, the following vulnerability has been resolved:
ata: ahci:... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97443 In the Linux kernel, the following vulnerability has been resolved:
perf/ftrace... |
not reported | — | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-97446 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Fix... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97447 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Enh... |
not reported | — | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-97430 In the Linux kernel, the following vulnerability has been resolved:
xhci: Preve... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97431 In the Linux kernel, the following vulnerability has been resolved:
drm/amd/dis... |
not reported | — | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-97432 In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwi... |
not reported | — | — | — | 2026-09-24 | 2026-10-21 |
| CVE-2026-97434 In the Linux kernel, the following vulnerability has been resolved:
dpaa2-switc... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97435 In the Linux kernel, the following vulnerability has been resolved:
net: dsa: s... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97436 In the Linux kernel, the following vulnerability has been resolved:
dpaa2-switc... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97422 In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd:... |
not reported | — | — | — | 2026-09-24 | 2026-10-30 |
| CVE-2026-97423 In the Linux kernel, the following vulnerability has been resolved:
cxl/region:... |
not reported | — | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-97424 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/... |
not reported | — | — | — | 2026-09-24 | 2026-10-21 |
| CVE-2026-97425 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu:... |
not reported | — | — | — | 2026-09-24 | 2026-10-30 |
| CVE-2026-97426 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/... |
not reported | — | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-97427 In the Linux kernel, the following vulnerability has been resolved:
drm/amd/pm:... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97414 In the Linux kernel, the following vulnerability has been resolved:
ASoC: media... |
not reported | — | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-97416 In the Linux kernel, the following vulnerability has been resolved:
btrfs: bala... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97418 In the Linux kernel, the following vulnerability has been resolved:
ALSA: es18x... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97419 In the Linux kernel, the following vulnerability has been resolved:
hsr: broadc... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97420 In the Linux kernel, the following vulnerability has been resolved:
bpf: NUL-te... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97407 In the Linux kernel, the following vulnerability has been resolved:
ASoC: rockc... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97408 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97410 In the Linux kernel, the following vulnerability has been resolved:
netconsole:... |
not reported | — | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-97411 In the Linux kernel, the following vulnerability has been resolved:
net: ibm: e... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97412 In the Linux kernel, the following vulnerability has been resolved:
pds_core: q... |
not reported | — | — | — | 2026-09-24 | 2026-10-21 |
| CVE-2026-93824 In the Linux kernel, the following vulnerability has been resolved:
tls: reject... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93825 In the Linux kernel, the following vulnerability has been resolved:
spi: Add NU... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93828 In the Linux kernel, the following vulnerability has been resolved:
exfat: fix... |
not reported | — | — | — | 2026-09-24 | 2026-10-30 |
| CVE-2026-93829 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
not reported | — | — | — | 2026-09-24 | 2026-10-30 |
| CVE-2026-94604 Rejected reason: This CVE is a duplicate of another CVE. |
not reported | — | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-93815 In the Linux kernel, the following vulnerability has been resolved:
net: au1000... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93818 In the Linux kernel, the following vulnerability has been resolved:
PCI: plda:... |
not reported | — | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-93819 In the Linux kernel, the following vulnerability has been resolved:
PCI: mediat... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93820 In the Linux kernel, the following vulnerability has been resolved:
PCI: rockch... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93821 In the Linux kernel, the following vulnerability has been resolved:
PCI: altera... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93822 In the Linux kernel, the following vulnerability has been resolved:
PCI: iproc:... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93823 In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd:... |
not reported | — | — | — | 2026-09-24 | 2026-10-30 |
| CVE-2026-93811 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: Fix... |
not reported | — | — | — | 2026-09-24 | 2026-10-03 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.