September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-90272 In the Linux kernel, the following vulnerability has been resolved:
perf: arm_p... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90273 In the Linux kernel, the following vulnerability has been resolved:
coresight:... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90274 In the Linux kernel, the following vulnerability has been resolved:
coresight:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90257 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90258 In the Linux kernel, the following vulnerability has been resolved:
pinctrl: ai... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90259 In the Linux kernel, the following vulnerability has been resolved:
btrfs: qgro... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90261 In the Linux kernel, the following vulnerability has been resolved:
btrfs: zone... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90262 In the Linux kernel, the following vulnerability has been resolved:
btrfs: retr... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90263 In the Linux kernel, the following vulnerability has been resolved:
btrfs: chec... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90264 In the Linux kernel, the following vulnerability has been resolved:
btrfs: alwa... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90249 In the Linux kernel, the following vulnerability has been resolved:
iio: light:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90250 In the Linux kernel, the following vulnerability has been resolved:
bpf, cgroup... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90251 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90252 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90253 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90254 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90242 In the Linux kernel, the following vulnerability has been resolved:
iommu/vt-d:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90245 In the Linux kernel, the following vulnerability has been resolved:
fbdev: kyro... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90247 In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix mm... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90248 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90232 In the Linux kernel, the following vulnerability has been resolved:
amt: Don't... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90233 In the Linux kernel, the following vulnerability has been resolved:
nvme-pci: r... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90236 In the Linux kernel, the following vulnerability has been resolved:
NFSD: Relea... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90238 In the Linux kernel, the following vulnerability has been resolved:
media: amd:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90239 In the Linux kernel, the following vulnerability has been resolved:
media: amd:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90226 In the Linux kernel, the following vulnerability has been resolved:
nfc: llcp:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90218 In the Linux kernel, the following vulnerability has been resolved:
RDMA/cma: F... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90219 In the Linux kernel, the following vulnerability has been resolved:
RDMA/cxgb4:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90220 In the Linux kernel, the following vulnerability has been resolved:
ALSA: seq:... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90221 In the Linux kernel, the following vulnerability has been resolved:
nfc: nci: f... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90222 In the Linux kernel, the following vulnerability has been resolved:
nfc: pn533:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90209 In the Linux kernel, the following vulnerability has been resolved:
s390/debug:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90211 In the Linux kernel, the following vulnerability has been resolved:
bpf, s390:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90212 In the Linux kernel, the following vulnerability has been resolved:
arm64/efi:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90213 In the Linux kernel, the following vulnerability has been resolved:
firewire: c... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90214 In the Linux kernel, the following vulnerability has been resolved:
ASoC: xilin... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90215 In the Linux kernel, the following vulnerability has been resolved:
mtd: ubi: R... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90216 In the Linux kernel, the following vulnerability has been resolved:
ubi: Fix ro... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90201 In the Linux kernel, the following vulnerability has been resolved:
net: page_p... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90202 In the Linux kernel, the following vulnerability has been resolved:
scsi: mpt3s... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.