Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

September 2026 CVE archive

Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in September 2026Materially updated (Critical / KEV)
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32

Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-89982
In the Linux kernel, the following vulnerability has been resolved: i2c: mux: F...
not reported— —— 2026-09-162026-10-19
CVE-2026-89983
In the Linux kernel, the following vulnerability has been resolved: i2c: core:...
not reported— —— 2026-09-162026-10-19
CVE-2026-89984
In the Linux kernel, the following vulnerability has been resolved: perf/x86/in...
not reported— —— 2026-09-162026-10-19
CVE-2026-89987
In the Linux kernel, the following vulnerability has been resolved: mm/huge_mem...
not reported— —— 2026-09-162026-10-21
CVE-2026-89975
In the Linux kernel, the following vulnerability has been resolved: nvme-fabric...
not reported— —— 2026-09-162026-10-21
CVE-2026-89976
In the Linux kernel, the following vulnerability has been resolved: accel/ethos...
not reported— —— 2026-09-162026-10-19
CVE-2026-89977
In the Linux kernel, the following vulnerability has been resolved: accel/ethos...
not reported— —— 2026-09-162026-10-19
CVE-2026-89978
In the Linux kernel, the following vulnerability has been resolved: accel/amdxd...
not reported— —— 2026-09-162026-10-19
CVE-2026-89966
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb_...
not reported— —— 2026-09-162026-10-19
CVE-2026-89958
In the Linux kernel, the following vulnerability has been resolved: s390/vfio-a...
not reported— —— 2026-09-162026-10-19
CVE-2026-89962
In the Linux kernel, the following vulnerability has been resolved: powerpc/kex...
not reported— —— 2026-09-162026-10-21
CVE-2026-89963
In the Linux kernel, the following vulnerability has been resolved: powerpc/kex...
not reported— —— 2026-09-162026-10-19
CVE-2026-89964
In the Linux kernel, the following vulnerability has been resolved: parisc: eis...
not reported— —— 2026-09-162026-10-19
CVE-2026-89949
In the Linux kernel, the following vulnerability has been resolved: batman-adv:...
not reported— —— 2026-09-162026-10-19
CVE-2026-89950
In the Linux kernel, the following vulnerability has been resolved: batman-adv:...
not reported— —— 2026-09-162026-10-19
CVE-2026-89952
In the Linux kernel, the following vulnerability has been resolved: mtd: rawnan...
not reported— —— 2026-09-162026-10-19
CVE-2026-89953
In the Linux kernel, the following vulnerability has been resolved: mtd: mtdoop...
not reported— —— 2026-09-162026-10-19
CVE-2026-89955
In the Linux kernel, the following vulnerability has been resolved: s390/vfio-a...
not reported— —— 2026-09-162026-10-19
CVE-2026-89956
In the Linux kernel, the following vulnerability has been resolved: s390/vfio-a...
not reported— —— 2026-09-162026-10-21
CVE-2026-89944
In the Linux kernel, the following vulnerability has been resolved: ASoC: hdac_...
not reported— —— 2026-09-162026-10-21
CVE-2026-89945
In the Linux kernel, the following vulnerability has been resolved: ASoC: cs35l...
not reported— —— 2026-09-162026-10-19
CVE-2026-89946
In the Linux kernel, the following vulnerability has been resolved: ASoC: cs35l...
not reported— —— 2026-09-162026-10-19
CVE-2026-89948
In the Linux kernel, the following vulnerability has been resolved: batman-adv:...
not reported— —— 2026-09-162026-10-19
CVE-2026-89936
In the Linux kernel, the following vulnerability has been resolved: iio: dac: m...
not reported— —— 2026-09-162026-10-19
CVE-2026-89937
In the Linux kernel, the following vulnerability has been resolved: iio: chemic...
not reported— —— 2026-09-162026-10-19
CVE-2026-89939
In the Linux kernel, the following vulnerability has been resolved: iio: chemic...
not reported— —— 2026-09-162026-10-19
CVE-2026-89931
In the Linux kernel, the following vulnerability has been resolved: KVM: nVMX:...
not reported— —— 2026-09-162026-10-19
CVE-2026-89933
In the Linux kernel, the following vulnerability has been resolved: iio: pressu...
not reported— —— 2026-09-162026-10-19
CVE-2026-89934
In the Linux kernel, the following vulnerability has been resolved: iio: light:...
not reported— —— 2026-09-162026-10-21
CVE-2026-89935
In the Linux kernel, the following vulnerability has been resolved: iio: light:...
not reported— —— 2026-09-162026-10-19
CVE-2026-89921
In the Linux kernel, the following vulnerability has been resolved: KVM: s390:...
not reported— —— 2026-09-162026-10-21
CVE-2026-89923
In the Linux kernel, the following vulnerability has been resolved: KVM: s390:...
not reported— —— 2026-09-162026-10-19
CVE-2026-89924
In the Linux kernel, the following vulnerability has been resolved: KVM: s390:...
not reported— —— 2026-09-162026-10-19
CVE-2026-89925
In the Linux kernel, the following vulnerability has been resolved: KVM: s390:...
not reported— —— 2026-09-162026-10-19
CVE-2026-89926
In the Linux kernel, the following vulnerability has been resolved: KVM: s390:...
not reported— —— 2026-09-162026-10-19
CVE-2026-89917
In the Linux kernel, the following vulnerability has been resolved: KVM: arm64:...
not reported— —— 2026-09-162026-10-19
CVE-2026-89901
In the Linux kernel, the following vulnerability has been resolved: media: airs...
not reported— —— 2026-09-162026-10-19
CVE-2026-89905
In the Linux kernel, the following vulnerability has been resolved: LoongArch:...
not reported— —— 2026-09-162026-10-19
CVE-2026-89909
In the Linux kernel, the following vulnerability has been resolved: LoongArch:...
not reported— —— 2026-09-162026-10-19
CVE-2026-89895
In the Linux kernel, the following vulnerability has been resolved: media: coba...
not reported— —— 2026-09-162026-10-19

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.