September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-90206 In the Linux kernel, the following vulnerability has been resolved:
nvmet: fix... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90208 In the Linux kernel, the following vulnerability has been resolved:
clocksource... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90193 In the Linux kernel, the following vulnerability has been resolved:
mailbox: qc... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90194 In the Linux kernel, the following vulnerability has been resolved:
ACPI: scan:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90195 In the Linux kernel, the following vulnerability has been resolved:
riscv, bpf:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90196 In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90197 In the Linux kernel, the following vulnerability has been resolved:
HID: haptic... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90198 In the Linux kernel, the following vulnerability has been resolved:
ALSA: core:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90200 In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: f... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90186 In the Linux kernel, the following vulnerability has been resolved:
null_blk: r... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90187 In the Linux kernel, the following vulnerability has been resolved:
null_blk: f... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90188 In the Linux kernel, the following vulnerability has been resolved:
null_blk: f... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90189 In the Linux kernel, the following vulnerability has been resolved:
null_blk: r... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90190 In the Linux kernel, the following vulnerability has been resolved:
null_blk: u... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90192 In the Linux kernel, the following vulnerability has been resolved:
mailbox: qc... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90180 In the Linux kernel, the following vulnerability has been resolved:
block: mtip... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90181 In the Linux kernel, the following vulnerability has been resolved:
ublk: avoid... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90182 In the Linux kernel, the following vulnerability has been resolved:
blk-iocost:... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90183 In the Linux kernel, the following vulnerability has been resolved:
blk-iolaten... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90184 In the Linux kernel, the following vulnerability has been resolved:
null_blk: s... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90185 In the Linux kernel, the following vulnerability has been resolved:
null_blk: s... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90175 In the Linux kernel, the following vulnerability has been resolved:
smb: server... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90178 In the Linux kernel, the following vulnerability has been resolved:
hwmon: (cor... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90179 In the Linux kernel, the following vulnerability has been resolved:
apparmor: f... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90167 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: seri... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90168 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-09-17 | 2026-10-16 |
| CVE-2026-90169 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: free... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90170 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: vali... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90171 In the Linux kernel, the following vulnerability has been resolved:
smb: smbdir... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90159 In the Linux kernel, the following vulnerability has been resolved:
bpf: Disall... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90160 In the Linux kernel, the following vulnerability has been resolved:
lwt_bpf: Re... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90163 In the Linux kernel, the following vulnerability has been resolved:
smb/server:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90164 In the Linux kernel, the following vulnerability has been resolved:
smb/server:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90165 In the Linux kernel, the following vulnerability has been resolved:
smb/server:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90166 In the Linux kernel, the following vulnerability has been resolved:
smb/server:... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90152 In the Linux kernel, the following vulnerability has been resolved:
smb/server:... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90154 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: scop... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90155 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: deta... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90156 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: safe... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90157 In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.