Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

September 2026 CVE archive

Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in September 2026Materially updated (Critical / KEV)
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32

Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-90158
In the Linux kernel, the following vulnerability has been resolved: m68k: nfcon...
not reported— —— 2026-09-172026-10-19
CVE-2026-90144
In the Linux kernel, the following vulnerability has been resolved: dpll: fix N...
not reported— —— 2026-09-172026-10-21
CVE-2026-90147
In the Linux kernel, the following vulnerability has been resolved: clk: devres...
not reported— —— 2026-09-172026-10-19
CVE-2026-90148
In the Linux kernel, the following vulnerability has been resolved: NFSv4: Fix...
not reported— —— 2026-09-172026-10-21
CVE-2026-90150
In the Linux kernel, the following vulnerability has been resolved: pnfs/blockl...
not reported— —— 2026-09-172026-10-21
CVE-2026-90135
In the Linux kernel, the following vulnerability has been resolved: net: add mi...
not reported— —— 2026-09-172026-10-21
CVE-2026-90136
In the Linux kernel, the following vulnerability has been resolved: platform/x8...
not reported— —— 2026-09-172026-10-19
CVE-2026-90138
In the Linux kernel, the following vulnerability has been resolved: vsock: don'...
not reported— —— 2026-09-172026-10-21
CVE-2026-90139
In the Linux kernel, the following vulnerability has been resolved: fuse: check...
not reported— —— 2026-09-172026-10-19
CVE-2026-90140
In the Linux kernel, the following vulnerability has been resolved: cuse: wait...
not reported— —— 2026-09-172026-10-19
CVE-2026-90127
In the Linux kernel, the following vulnerability has been resolved: virtio: rtc...
not reported— —— 2026-09-172026-10-19
CVE-2026-90128
In the Linux kernel, the following vulnerability has been resolved: vdpa/mlx5:...
not reported— —— 2026-09-172026-10-19
CVE-2026-90129
In the Linux kernel, the following vulnerability has been resolved: virtio_ball...
not reported— —— 2026-09-172026-10-21
CVE-2026-90130
In the Linux kernel, the following vulnerability has been resolved: vdpa_sim: f...
not reported— —— 2026-09-172026-10-19
CVE-2026-90134
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix k...
not reported— —— 2026-09-172026-10-19
CVE-2026-90119
In the Linux kernel, the following vulnerability has been resolved: ALSA: ice17...
not reported— —— 2026-09-172026-10-19
CVE-2026-90121
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic...
not reported— —— 2026-09-172026-10-19
CVE-2026-90122
In the Linux kernel, the following vulnerability has been resolved: clk: viscon...
not reported— —— 2026-09-172026-10-19
CVE-2026-90123
In the Linux kernel, the following vulnerability has been resolved: irqchip/ast...
not reported— —— 2026-09-172026-10-19
CVE-2026-90124
In the Linux kernel, the following vulnerability has been resolved: irqchip/ren...
not reported— —— 2026-09-172026-10-19
CVE-2026-90125
In the Linux kernel, the following vulnerability has been resolved: smb: client...
not reported— —— 2026-09-172026-10-19
CVE-2026-90126
In the Linux kernel, the following vulnerability has been resolved: rtc: pcf856...
not reported— —— 2026-09-172026-10-19
CVE-2026-90112
In the Linux kernel, the following vulnerability has been resolved: net: qlcnic...
not reported— —— 2026-09-172026-10-21
CVE-2026-90113
In the Linux kernel, the following vulnerability has been resolved: netdevsim:...
not reported— —— 2026-09-172026-10-19
CVE-2026-90114
In the Linux kernel, the following vulnerability has been resolved: net: bridge...
not reported— —— 2026-09-172026-10-19
CVE-2026-90115
In the Linux kernel, the following vulnerability has been resolved: xsk: fix NU...
not reported— —— 2026-09-172026-10-19
CVE-2026-90116
In the Linux kernel, the following vulnerability has been resolved: ALSA: mtpav...
not reported— —— 2026-09-172026-10-21
CVE-2026-90117
In the Linux kernel, the following vulnerability has been resolved: ntfs: valid...
not reported— —— 2026-09-172026-10-19
CVE-2026-90105
In the Linux kernel, the following vulnerability has been resolved: vxlan: fix...
not reported— —— 2026-09-172026-10-21
CVE-2026-90106
In the Linux kernel, the following vulnerability has been resolved: net: bridge...
not reported— —— 2026-09-172026-10-21
CVE-2026-90107
In the Linux kernel, the following vulnerability has been resolved: net/smc: fr...
not reported— —— 2026-09-172026-10-19
CVE-2026-90108
In the Linux kernel, the following vulnerability has been resolved: net/smc: fr...
not reported— —— 2026-09-172026-10-19
CVE-2026-90109
In the Linux kernel, the following vulnerability has been resolved: net: sched:...
not reported— —— 2026-09-172026-10-21
CVE-2026-90094
In the Linux kernel, the following vulnerability has been resolved: arm64: proc...
not reported— —— 2026-09-172026-10-19
CVE-2026-90095
In the Linux kernel, the following vulnerability has been resolved: fuse: Fix t...
not reported— —— 2026-09-172026-10-19
CVE-2026-90096
In the Linux kernel, the following vulnerability has been resolved: fuse: inval...
not reported— —— 2026-09-172026-10-19
CVE-2026-90097
In the Linux kernel, the following vulnerability has been resolved: Drivers: hv...
not reported— —— 2026-09-172026-10-21
CVE-2026-90098
In the Linux kernel, the following vulnerability has been resolved: net: sparx5...
not reported— —— 2026-09-172026-10-19
CVE-2026-90099
In the Linux kernel, the following vulnerability has been resolved: net/sched:...
not reported— —— 2026-09-172026-10-21
CVE-2026-90100
In the Linux kernel, the following vulnerability has been resolved: ptp: netc:...
not reported— —— 2026-09-172026-10-19

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.