September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-90101 In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Fi... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90090 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90087 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90088 In the Linux kernel, the following vulnerability has been resolved:
Bluetooth:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90086 In the Linux kernel, the following vulnerability has been resolved:
xsk: honor... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90078 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90079 In the Linux kernel, the following vulnerability has been resolved:
octeontx2-a... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90080 In the Linux kernel, the following vulnerability has been resolved:
octeontx2-p... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90081 In the Linux kernel, the following vulnerability has been resolved:
net/rds: us... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90082 In the Linux kernel, the following vulnerability has been resolved:
net: mana:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90083 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90084 In the Linux kernel, the following vulnerability has been resolved:
octeontx2-v... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90085 In the Linux kernel, the following vulnerability has been resolved:
octeontx2-a... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90072 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90073 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90074 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90075 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90076 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90077 In the Linux kernel, the following vulnerability has been resolved:
net: fix a... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90063 In the Linux kernel, the following vulnerability has been resolved:
virtio-net:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90064 In the Linux kernel, the following vulnerability has been resolved:
drm/xe: Rej... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90065 In the Linux kernel, the following vulnerability has been resolved:
net/smc: re... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90066 In the Linux kernel, the following vulnerability has been resolved:
samples/ftr... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90068 In the Linux kernel, the following vulnerability has been resolved:
ASoC: dapm:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90070 In the Linux kernel, the following vulnerability has been resolved:
tpm: st33zp... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90055 In the Linux kernel, the following vulnerability has been resolved:
usb: atm: u... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90056 In the Linux kernel, the following vulnerability has been resolved:
net: fec: o... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90058 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90060 In the Linux kernel, the following vulnerability has been resolved:
ALSA: contr... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90061 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
not reported | — | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90050 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90052 Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90053 In the Linux kernel, the following vulnerability has been resolved:
net/sched:... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90054 In the Linux kernel, the following vulnerability has been resolved:
tcp: fix co... |
not reported | — | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-54587 mport is the MidnightBSD Package Manager. |
not reported | — | — | — | 2026-09-17 | 2026-09-17 |
| CVE-2026-54579 mport is the MidnightBSD Package Manager. |
not reported | — | — | — | 2026-09-17 | 2026-09-24 |
| CVE-2026-54580 mport is the MidnightBSD Package Manager. |
not reported | — | — | — | 2026-09-17 | 2026-09-24 |
| CVE-2026-54581 mport is the MidnightBSD Package Manager. |
not reported | — | — | — | 2026-09-17 | 2026-09-17 |
| CVE-2026-54582 mport is the MidnightBSD Package Manager. |
not reported | — | — | — | 2026-09-17 | 2026-09-17 |
| CVE-2026-54583 mport is the MidnightBSD Package Manager. |
not reported | — | — | — | 2026-09-17 | 2026-09-17 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.