September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-90327 In the Linux kernel, the following vulnerability has been resolved:
phonet: pep... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90328 In the Linux kernel, the following vulnerability has been resolved:
HID: steam:... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90313 In the Linux kernel, the following vulnerability has been resolved:
bpf, cgroup... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90314 In the Linux kernel, the following vulnerability has been resolved:
remoteproc:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90315 In the Linux kernel, the following vulnerability has been resolved:
PCI/sysfs:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90318 In the Linux kernel, the following vulnerability has been resolved:
fat: releas... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90319 In the Linux kernel, the following vulnerability has been resolved:
rapidio: cl... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90304 In the Linux kernel, the following vulnerability has been resolved:
ARM: 9484/1... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90305 In the Linux kernel, the following vulnerability has been resolved:
ARM: 9483/1... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90306 In the Linux kernel, the following vulnerability has been resolved:
ARM: 9481/2... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90307 In the Linux kernel, the following vulnerability has been resolved:
RDMA/srp: f... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90310 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-09-17 | 2026-10-16 |
| CVE-2026-90311 In the Linux kernel, the following vulnerability has been resolved:
thermal: hw... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90297 In the Linux kernel, the following vulnerability has been resolved:
drm/sun4i:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90298 In the Linux kernel, the following vulnerability has been resolved:
drm/sun4i:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90299 In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix sl... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90300 In the Linux kernel, the following vulnerability has been resolved:
bpf: Clear... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90302 In the Linux kernel, the following vulnerability has been resolved:
ocfs2: sync... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90303 In the Linux kernel, the following vulnerability has been resolved:
ARM: 9485/1... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90290 In the Linux kernel, the following vulnerability has been resolved:
arm64: hibe... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90295 In the Linux kernel, the following vulnerability has been resolved:
cpufreq: im... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90296 In the Linux kernel, the following vulnerability has been resolved:
cpufreq: im... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90283 In the Linux kernel, the following vulnerability has been resolved:
hugetlbfs:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90284 In the Linux kernel, the following vulnerability has been resolved:
firmware_lo... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90285 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90287 In the Linux kernel, the following vulnerability has been resolved:
phy: sunplu... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90275 In the Linux kernel, the following vulnerability has been resolved:
md/raid1: d... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90276 In the Linux kernel, the following vulnerability has been resolved:
md/md-llbit... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90277 In the Linux kernel, the following vulnerability has been resolved:
md/md-llbit... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90278 In the Linux kernel, the following vulnerability has been resolved:
md: wait fo... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90279 In the Linux kernel, the following vulnerability has been resolved:
md/raid5: r... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90280 In the Linux kernel, the following vulnerability has been resolved:
phy: qcom:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90281 In the Linux kernel, the following vulnerability has been resolved:
phy: qcom:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90282 In the Linux kernel, the following vulnerability has been resolved:
phy: qcom:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90265 In the Linux kernel, the following vulnerability has been resolved:
btrfs: defr... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90266 In the Linux kernel, the following vulnerability has been resolved:
btrfs: zone... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90267 In the Linux kernel, the following vulnerability has been resolved:
scsi: sd: F... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90269 In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90270 In the Linux kernel, the following vulnerability has been resolved:
arm_mpam: D... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90271 In the Linux kernel, the following vulnerability has been resolved:
arm_mpam: F... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.