September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-92476 In the Linux kernel, the following vulnerability has been resolved:
crypto: kee... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-92477 In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-92478 In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-92479 In the Linux kernel, the following vulnerability has been resolved:
scsi: ufs:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90431 In the Linux kernel, the following vulnerability has been resolved:
remoteproc:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90432 In the Linux kernel, the following vulnerability has been resolved:
sched_ext:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90433 In the Linux kernel, the following vulnerability has been resolved:
spi: oc-tin... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90434 In the Linux kernel, the following vulnerability has been resolved:
isofs: rele... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90424 In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90426 In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90428 In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90430 In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90417 In the Linux kernel, the following vulnerability has been resolved:
RDMA/cxgb4:... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90418 In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90420 In the Linux kernel, the following vulnerability has been resolved:
nilfs2: fix... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90421 In the Linux kernel, the following vulnerability has been resolved:
PCI: Fix UA... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90422 In the Linux kernel, the following vulnerability has been resolved:
clk: mediat... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90415 In the Linux kernel, the following vulnerability has been resolved:
RDMA/cxgb4:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90416 In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90412 In the Linux kernel, the following vulnerability has been resolved:
nvmet: fix... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90411 In the Linux kernel, the following vulnerability has been resolved:
nvme-fc: un... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90404 In the Linux kernel, the following vulnerability has been resolved:
platform/ch... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90405 In the Linux kernel, the following vulnerability has been resolved:
media: stm3... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90406 In the Linux kernel, the following vulnerability has been resolved:
media: qcom... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90409 In the Linux kernel, the following vulnerability has been resolved:
drm/panthor... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90410 In the Linux kernel, the following vulnerability has been resolved:
spi: davinc... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90394 In the Linux kernel, the following vulnerability has been resolved:
power: supp... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90395 In the Linux kernel, the following vulnerability has been resolved:
power: supp... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90396 In the Linux kernel, the following vulnerability has been resolved:
block: fix... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90397 In the Linux kernel, the following vulnerability has been resolved:
firmware: q... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90400 In the Linux kernel, the following vulnerability has been resolved:
md: recheck... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90389 In the Linux kernel, the following vulnerability has been resolved:
md: scope m... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90390 In the Linux kernel, the following vulnerability has been resolved:
md/bitmap:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90391 In the Linux kernel, the following vulnerability has been resolved:
lib/test_hm... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90393 In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix po... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90378 In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90382 In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90384 In the Linux kernel, the following vulnerability has been resolved:
iomap: rele... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90385 In the Linux kernel, the following vulnerability has been resolved:
md/raid1: c... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90386 In the Linux kernel, the following vulnerability has been resolved:
i3c: dw: av... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.