Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

September 2026 CVE archive

Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in September 2026Materially updated (Critical / KEV)
Total records
15,074
Critical
1,387
High
5,790
Medium
4,827
Low
527
Severity not reported
2,543
In CISA KEV
32

Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-93141
In the Linux kernel, the following vulnerability has been resolved: usb: gadget...
not reported— —— 2026-09-172026-10-19
CVE-2026-93142
In the Linux kernel, the following vulnerability has been resolved: thermal/dri...
not reported— —— 2026-09-172026-10-19
CVE-2026-93143
In the Linux kernel, the following vulnerability has been resolved: staging: me...
not reported— —— 2026-09-172026-10-19
CVE-2026-93145
In the Linux kernel, the following vulnerability has been resolved: clk: qcom:...
not reported— —— 2026-09-172026-10-19
CVE-2026-93146
In the Linux kernel, the following vulnerability has been resolved: time/namesp...
not reported— —— 2026-09-172026-10-21
CVE-2026-93132
In the Linux kernel, the following vulnerability has been resolved: ACPI: RISC-...
not reported— —— 2026-09-172026-10-19
CVE-2026-93133
In the Linux kernel, the following vulnerability has been resolved: ACPI: RISC-...
not reported— —— 2026-09-172026-10-19
CVE-2026-93134
In the Linux kernel, the following vulnerability has been resolved: printk: Fix...
not reported— —— 2026-09-172026-10-19
CVE-2026-93135
In the Linux kernel, the following vulnerability has been resolved: bpf: Reject...
not reported— —— 2026-09-172026-10-19
CVE-2026-93136
In the Linux kernel, the following vulnerability has been resolved: bus: mhi: e...
not reported— —— 2026-09-172026-10-19
CVE-2026-93139
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu/...
not reported— —— 2026-09-172026-10-19
CVE-2026-93140
In the Linux kernel, the following vulnerability has been resolved: udf: Mark L...
not reported— —— 2026-09-172026-10-19
CVE-2026-93123
In the Linux kernel, the following vulnerability has been resolved: serial: qco...
not reported— —— 2026-09-172026-10-19
CVE-2026-93124
In the Linux kernel, the following vulnerability has been resolved: platform/x8...
not reported— —— 2026-09-172026-10-19
CVE-2026-93126
In the Linux kernel, the following vulnerability has been resolved: remoteproc:...
not reported— —— 2026-09-172026-10-19
CVE-2026-93128
In the Linux kernel, the following vulnerability has been resolved: platform/x8...
not reported— —— 2026-09-172026-10-21
CVE-2026-93129
In the Linux kernel, the following vulnerability has been resolved: platform/x8...
not reported— —— 2026-09-172026-10-21
CVE-2026-93130
In the Linux kernel, the following vulnerability has been resolved: platform/x8...
not reported— —— 2026-09-172026-10-19
CVE-2026-93131
In the Linux kernel, the following vulnerability has been resolved: platform/x8...
not reported— —— 2026-09-172026-10-19
CVE-2026-93115
In the Linux kernel, the following vulnerability has been resolved: platform/me...
not reported— —— 2026-09-172026-10-19
CVE-2026-93117
In the Linux kernel, the following vulnerability has been resolved: usb: fix UA...
not reported— —— 2026-09-172026-10-19
CVE-2026-93118
In the Linux kernel, the following vulnerability has been resolved: usb: gadget...
not reported— —— 2026-09-172026-10-19
CVE-2026-93119
In the Linux kernel, the following vulnerability has been resolved: usb: ljca:...
not reported— —— 2026-09-172026-10-19
CVE-2026-93120
In the Linux kernel, the following vulnerability has been resolved: usb: gadget...
not reported— —— 2026-09-172026-10-19
CVE-2026-93108
In the Linux kernel, the following vulnerability has been resolved: RDMA/ipoib:...
not reported— —— 2026-09-172026-10-19
CVE-2026-93109
In the Linux kernel, the following vulnerability has been resolved: RDMA/mlx5:...
not reported— —— 2026-09-172026-10-19
CVE-2026-93110
In the Linux kernel, the following vulnerability has been resolved: RDMA/core:...
not reported— —— 2026-09-172026-10-19
CVE-2026-93113
In the Linux kernel, the following vulnerability has been resolved: clk: qcom:...
not reported— —— 2026-09-172026-10-19
CVE-2026-93114
In the Linux kernel, the following vulnerability has been resolved: platform/su...
not reported— —— 2026-09-172026-10-19
CVE-2026-93099
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl:...
not reported— —— 2026-09-172026-10-19
CVE-2026-93100
In the Linux kernel, the following vulnerability has been resolved: fs/resctrl:...
not reported— —— 2026-09-172026-10-21
CVE-2026-93101
In the Linux kernel, the following vulnerability has been resolved: media: v4l2...
not reported— —— 2026-09-172026-10-19
CVE-2026-93102
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1:...
not reported— —— 2026-09-172026-10-19
CVE-2026-93103
In the Linux kernel, the following vulnerability has been resolved: RDMA/hfi1:...
not reported— —— 2026-09-172026-10-19
CVE-2026-93104
In the Linux kernel, the following vulnerability has been resolved: RDMA/rvt: R...
not reported— —— 2026-09-172026-10-21
CVE-2026-93106
In the Linux kernel, the following vulnerability has been resolved: crash_dump:...
not reported— —— 2026-09-172026-10-19
CVE-2026-93091
In the Linux kernel, the following vulnerability has been resolved: firmware: a...
not reported— —— 2026-09-172026-10-19
CVE-2026-93092
In the Linux kernel, the following vulnerability has been resolved: firmware: a...
not reported— —— 2026-09-172026-10-19
CVE-2026-93093
In the Linux kernel, the following vulnerability has been resolved: firmware: a...
not reported— —— 2026-09-172026-10-21
CVE-2026-93094
In the Linux kernel, the following vulnerability has been resolved: wifi: ath12...
not reported— —— 2026-09-172026-10-19

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.