September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-90460 An issue was discovered in OpenStack Keystone before 29.0.3. |
not reported | — | — | — | 2026-09-11 | 2026-10-13 |
| CVE-2026-44715 OpenMRS is an open source electronic medical record system platform. |
not reported | — | — | — | 2026-09-11 | 2026-09-25 |
| CVE-2026-45056 matrix-sdk-crypto is a no-network-IO implementation of a state machine that hand... |
not reported | — | — | — | 2026-09-11 | 2026-09-30 |
| CVE-2026-49992 Kimai is an open-source time tracking application. |
not reported | — | — | — | 2026-09-11 | 2026-09-23 |
| CVE-2026-54165 Dobase is an open-source, self-hosted workspace with installable tools. |
not reported | — | — | — | 2026-09-11 | 2026-09-30 |
| CVE-2026-48490 ArduinoCore-avr contains the source code and configuration files of the Arduino... |
not reported | — | — | — | 2026-09-11 | 2026-09-30 |
| CVE-2026-49865 Kimai is an open-source time tracking application. |
not reported | — | — | — | 2026-09-11 | 2026-09-23 |
| CVE-2026-50025 Mousehole is a background service to update a seedbox IP for MAM and web app to... |
not reported | — | — | — | 2026-09-11 | 2026-09-30 |
| CVE-2026-47773 ArduinoBLE enables Bluetooth Low Energy connectivity on certain Arduino models. |
not reported | — | — | — | 2026-09-11 | 2026-09-30 |
| CVE-2026-89768 In the Linux kernel, the following vulnerability has been resolved:
fs: fix use... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89770 In the Linux kernel, the following vulnerability has been resolved:
iomap: don'... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89772 In the Linux kernel, the following vulnerability has been resolved:
btrfs: writ... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89773 In the Linux kernel, the following vulnerability has been resolved:
drm/amd/dis... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89765 In the Linux kernel, the following vulnerability has been resolved:
timers/itim... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89766 In the Linux kernel, the following vulnerability has been resolved:
pidfd: hold... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89751 In the Linux kernel, the following vulnerability has been resolved:
x86/tdx: Fi... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89752 In the Linux kernel, the following vulnerability has been resolved:
mm: memcg:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89753 In the Linux kernel, the following vulnerability has been resolved:
mm/vmscan:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89756 In the Linux kernel, the following vulnerability has been resolved:
mm/migrate:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89757 In the Linux kernel, the following vulnerability has been resolved:
mm/mglru: f... |
not reported | — | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89759 In the Linux kernel, the following vulnerability has been resolved:
mm/kmemleak... |
not reported | — | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89745 In the Linux kernel, the following vulnerability has been resolved:
debugfs: Fi... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89749 In the Linux kernel, the following vulnerability has been resolved:
tracing: Fi... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89737 In the Linux kernel, the following vulnerability has been resolved:
usb: typec:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89739 In the Linux kernel, the following vulnerability has been resolved:
usb: dwc3:... |
not reported | — | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89740 In the Linux kernel, the following vulnerability has been resolved:
serial: imx... |
not reported | — | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89727 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89728 In the Linux kernel, the following vulnerability has been resolved:
i3c: renesa... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89730 In the Linux kernel, the following vulnerability has been resolved:
fpga: alter... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89732 In the Linux kernel, the following vulnerability has been resolved:
usb: gadget... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89734 In the Linux kernel, the following vulnerability has been resolved:
usb: gadget... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89735 In the Linux kernel, the following vulnerability has been resolved:
usb: gadget... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89726 In the Linux kernel, the following vulnerability has been resolved:
lib/ucs2_st... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89721 In the Linux kernel, the following vulnerability has been resolved:
phy: rockch... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89722 In the Linux kernel, the following vulnerability has been resolved:
PCI/sysfs:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89719 In the Linux kernel, the following vulnerability has been resolved:
zram: fix o... |
not reported | — | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89716 In the Linux kernel, the following vulnerability has been resolved:
zram: valid... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89717 In the Linux kernel, the following vulnerability has been resolved:
zram: set d... |
not reported | — | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89718 In the Linux kernel, the following vulnerability has been resolved:
zram: fix o... |
not reported | — | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89710 In the Linux kernel, the following vulnerability has been resolved:
NFSv4.1: fi... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.