Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

September 2026 CVE archive

Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in September 2026Materially updated (Critical / KEV)
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32

Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-93805
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80...
not reported— —— 2026-09-242026-10-03
CVE-2026-93807
In the Linux kernel, the following vulnerability has been resolved: wifi: rsi:...
not reported— —— 2026-09-242026-10-03
CVE-2026-93808
In the Linux kernel, the following vulnerability has been resolved: ALSA: usb-a...
not reported— —— 2026-09-242026-10-03
CVE-2026-93809
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu:...
not reported— —— 2026-09-242026-09-25
CVE-2026-93794
In the Linux kernel, the following vulnerability has been resolved: smb/client:...
not reported— —— 2026-09-242026-10-03
CVE-2026-93795
In the Linux kernel, the following vulnerability has been resolved: blk-cgroup:...
not reported— —— 2026-09-242026-10-03
CVE-2026-93797
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwi...
not reported— —— 2026-09-242026-10-03
CVE-2026-93800
In the Linux kernel, the following vulnerability has been resolved: btrfs: fix...
not reported— —— 2026-09-242026-10-03
CVE-2026-93784
In the Linux kernel, the following vulnerability has been resolved: wifi: cfg80...
not reported— —— 2026-09-242026-10-03
CVE-2026-93785
In the Linux kernel, the following vulnerability has been resolved: cifs: valid...
not reported— —— 2026-09-242026-10-03
CVE-2026-93788
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwi...
not reported— —— 2026-09-242026-10-03
CVE-2026-93789
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwi...
not reported— —— 2026-09-242026-10-03
CVE-2026-93791
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwi...
not reported— —— 2026-09-242026-10-03
CVE-2026-93792
In the Linux kernel, the following vulnerability has been resolved: wifi: iwlwi...
not reported— —— 2026-09-242026-10-03
CVE-2026-93781
In the Linux kernel, the following vulnerability has been resolved: scsi: core:...
not reported— —— 2026-09-242026-10-03
CVE-2026-93783
In the Linux kernel, the following vulnerability has been resolved: Bluetooth:...
not reported— —— 2026-09-242026-10-03
CVE-2026-93285
In the Linux kernel, the following vulnerability has been resolved: f2fs: embed...
not reported— —— 2026-09-242026-10-21
CVE-2026-93286
In the Linux kernel, the following vulnerability has been resolved: net: applet...
not reported— —— 2026-09-242026-10-03
CVE-2026-56744
`@bsv/wallet-toolbox` provides BRC-100 wallet signing and storage components, wh...
not reported— —— 2026-09-242026-09-30
CVE-2026-26054
SumatraPDF is a multi-format reader for Windows.
not reported— —— 2026-09-242026-09-28
CVE-2026-56738
phpMyFAQ is an open source FAQ web application.
not reported— —— 2026-09-242026-10-05
CVE-2026-96873
Improper neutralization of input during web page generation ('cross-site scripti...
not reported— —— 2026-09-242026-09-24
CVE-2026-93278
In the Linux kernel, the following vulnerability has been resolved: staging: oc...
not reported— —— 2026-09-242026-10-19
CVE-2026-93279
In the Linux kernel, the following vulnerability has been resolved: staging: oc...
not reported— —— 2026-09-242026-10-19
CVE-2026-93281
In the Linux kernel, the following vulnerability has been resolved: wifi: rtw89...
not reported— —— 2026-09-242026-10-19
CVE-2026-93283
In the Linux kernel, the following vulnerability has been resolved: i3c: master...
not reported— —— 2026-09-242026-10-19
CVE-2026-93270
In the Linux kernel, the following vulnerability has been resolved: bpf: Disall...
not reported— —— 2026-09-242026-10-19
CVE-2026-93271
In the Linux kernel, the following vulnerability has been resolved: wifi: ath11...
not reported— —— 2026-09-242026-10-19
CVE-2026-93272
In the Linux kernel, the following vulnerability has been resolved: remoteproc:...
not reported— —— 2026-09-242026-10-21
CVE-2026-93273
In the Linux kernel, the following vulnerability has been resolved: regulator:...
not reported— —— 2026-09-242026-10-19
CVE-2026-93274
In the Linux kernel, the following vulnerability has been resolved: pinctrl: bc...
not reported— —— 2026-09-242026-10-19
CVE-2026-93275
In the Linux kernel, the following vulnerability has been resolved: perf/x86/in...
not reported— —— 2026-09-242026-10-19
CVE-2026-93276
In the Linux kernel, the following vulnerability has been resolved: phy: renesa...
not reported— —— 2026-09-242026-10-19
CVE-2026-93263
In the Linux kernel, the following vulnerability has been resolved: clk: eswin:...
not reported— —— 2026-09-242026-10-19
CVE-2026-93264
In the Linux kernel, the following vulnerability has been resolved: RDMA/efa: F...
not reported— —— 2026-09-242026-10-19
CVE-2026-93266
In the Linux kernel, the following vulnerability has been resolved: arm64: RSI:...
not reported— —— 2026-09-242026-10-19
CVE-2026-93267
In the Linux kernel, the following vulnerability has been resolved: RDMA/core:...
not reported— —— 2026-09-242026-10-19
CVE-2026-93268
In the Linux kernel, the following vulnerability has been resolved: ext4: skip...
not reported— —— 2026-09-242026-10-19
CVE-2026-93269
In the Linux kernel, the following vulnerability has been resolved: ext4: fix c...
not reported— —— 2026-09-242026-10-19
CVE-2026-93255
In the Linux kernel, the following vulnerability has been resolved: btrfs: make...
not reported— —— 2026-09-242026-10-19

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.