Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

September 2026 CVE archive

Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in September 2026Materially updated (Critical / KEV)
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32

Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-89896
In the Linux kernel, the following vulnerability has been resolved: media: cedr...
not reported— —— 2026-09-162026-10-19
CVE-2026-89900
In the Linux kernel, the following vulnerability has been resolved: media: cec:...
not reported— —— 2026-09-162026-10-19
CVE-2026-89886
In the Linux kernel, the following vulnerability has been resolved: media: inte...
not reported— —— 2026-09-162026-10-19
CVE-2026-89889
In the Linux kernel, the following vulnerability has been resolved: media: i2c:...
not reported— —— 2026-09-162026-10-19
CVE-2026-89891
In the Linux kernel, the following vulnerability has been resolved: media: em28...
not reported— —— 2026-09-162026-10-19
CVE-2026-89892
In the Linux kernel, the following vulnerability has been resolved: media: em28...
not reported— —— 2026-09-162026-10-19
CVE-2026-89878
In the Linux kernel, the following vulnerability has been resolved: media: s225...
not reported— —— 2026-09-162026-10-19
CVE-2026-89879
In the Linux kernel, the following vulnerability has been resolved: media: s225...
not reported— —— 2026-09-162026-10-19
CVE-2026-89881
In the Linux kernel, the following vulnerability has been resolved: media: rtl2...
not reported— —— 2026-09-162026-10-19
CVE-2026-89884
In the Linux kernel, the following vulnerability has been resolved: media: plat...
not reported— —— 2026-09-162026-10-21
CVE-2026-89869
In the Linux kernel, the following vulnerability has been resolved: media: qcom...
not reported— —— 2026-09-162026-10-19
CVE-2026-89871
In the Linux kernel, the following vulnerability has been resolved: media: vide...
not reported— —— 2026-09-162026-10-19
CVE-2026-89872
In the Linux kernel, the following vulnerability has been resolved: media: v4l2...
not reported— —— 2026-09-162026-10-19
CVE-2026-89874
In the Linux kernel, the following vulnerability has been resolved: media: v4l2...
not reported— —— 2026-09-162026-10-19
CVE-2026-89876
In the Linux kernel, the following vulnerability has been resolved: media: tda1...
not reported— —— 2026-09-162026-10-19
CVE-2026-89862
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x...
not reported— —— 2026-09-162026-10-19
CVE-2026-89864
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x...
not reported— —— 2026-09-162026-10-19
CVE-2026-89865
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x...
not reported— —— 2026-09-162026-10-19
CVE-2026-89866
In the Linux kernel, the following vulnerability has been resolved: media: chip...
not reported— —— 2026-09-162026-10-19
CVE-2026-89867
In the Linux kernel, the following vulnerability has been resolved: media: chip...
not reported— —— 2026-09-162026-10-19
CVE-2026-89868
In the Linux kernel, the following vulnerability has been resolved: media: chip...
not reported— —— 2026-09-162026-10-19
CVE-2026-89853
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x...
not reported— —— 2026-09-162026-10-19
CVE-2026-89855
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x...
not reported— —— 2026-09-162026-10-19
CVE-2026-89858
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x...
not reported— —— 2026-09-162026-10-19
CVE-2026-89859
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x...
not reported— —— 2026-09-162026-10-21
CVE-2026-89850
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x...
not reported— —— 2026-09-162026-10-19
CVE-2026-89851
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x...
not reported— —— 2026-09-162026-10-19
CVE-2026-89852
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x...
not reported— —— 2026-09-162026-10-19
CVE-2026-89842
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x...
not reported— —— 2026-09-162026-10-19
CVE-2026-89843
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x...
not reported— —— 2026-09-162026-10-19
CVE-2026-89845
In the Linux kernel, the following vulnerability has been resolved: scsi: qla2x...
not reported— —— 2026-09-162026-10-19
CVE-2026-89833
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix t...
not reported— —— 2026-09-162026-10-21
CVE-2026-89834
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix t...
not reported— —— 2026-09-162026-10-21
CVE-2026-89835
In the Linux kernel, the following vulnerability has been resolved: f2fs: avoid...
not reported— —— 2026-09-162026-10-21
CVE-2026-89837
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix d...
not reported— —— 2026-09-162026-10-21
CVE-2026-89839
In the Linux kernel, the following vulnerability has been resolved: f2fs: use t...
not reported— —— 2026-09-162026-10-19
CVE-2026-89827
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu:...
not reported— —— 2026-09-162026-10-21
CVE-2026-89828
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu:...
not reported— —— 2026-09-162026-10-19
CVE-2026-89830
In the Linux kernel, the following vulnerability has been resolved: f2fs: fix v...
not reported— —— 2026-09-162026-10-19
CVE-2026-89831
In the Linux kernel, the following vulnerability has been resolved: f2fs: prote...
not reported— —— 2026-09-162026-10-19

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.