September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-89552 In the Linux kernel, the following vulnerability has been resolved:
params: fix... |
not reported | — | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89543 In the Linux kernel, the following vulnerability has been resolved:
sunrpc: fix... |
not reported | — | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89539 In the Linux kernel, the following vulnerability has been resolved:
SUNRPC: rej... |
not reported | — | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89525 In the Linux kernel, the following vulnerability has been resolved:
udf: reject... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89527 In the Linux kernel, the following vulnerability has been resolved:
svcrdma: Us... |
not reported | — | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89529 In the Linux kernel, the following vulnerability has been resolved:
svcrdma: Re... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89531 In the Linux kernel, the following vulnerability has been resolved:
svcrdma: Re... |
not reported | — | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89515 In the Linux kernel, the following vulnerability has been resolved:
scsi: core:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89516 In the Linux kernel, the following vulnerability has been resolved:
sched_ext:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89517 In the Linux kernel, the following vulnerability has been resolved:
sched_ext:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89518 In the Linux kernel, the following vulnerability has been resolved:
sched_ext:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89519 In the Linux kernel, the following vulnerability has been resolved:
sched_ext:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89509 In the Linux kernel, the following vulnerability has been resolved:
RDMA/ionic:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89512 In the Linux kernel, the following vulnerability has been resolved:
remoteproc:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89514 In the Linux kernel, the following vulnerability has been resolved:
scsi: fnic:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89502 In the Linux kernel, the following vulnerability has been resolved:
ring-buffer... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89505 In the Linux kernel, the following vulnerability has been resolved:
RDMA/uverbs... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89506 In the Linux kernel, the following vulnerability has been resolved:
RDMA/uverbs... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89496 In the Linux kernel, the following vulnerability has been resolved:
ocfs2: alwa... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89498 In the Linux kernel, the following vulnerability has been resolved:
orangefs: f... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89484 In the Linux kernel, the following vulnerability has been resolved:
lockd: fix... |
not reported | — | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89490 In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89491 In the Linux kernel, the following vulnerability has been resolved:
ocfs2: clus... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89473 In the Linux kernel, the following vulnerability has been resolved:
power: supp... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89474 In the Linux kernel, the following vulnerability has been resolved:
power: supp... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89475 In the Linux kernel, the following vulnerability has been resolved:
power: supp... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89461 In the Linux kernel, the following vulnerability has been resolved:
power: supp... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89462 In the Linux kernel, the following vulnerability has been resolved:
power: supp... |
not reported | — | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89463 In the Linux kernel, the following vulnerability has been resolved:
power: supp... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89464 In the Linux kernel, the following vulnerability has been resolved:
power: supp... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89467 In the Linux kernel, the following vulnerability has been resolved:
power: supp... |
not reported | — | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89468 In the Linux kernel, the following vulnerability has been resolved:
power: supp... |
not reported | — | — | — | 2026-09-11 | 2026-10-21 |
| CVE-2026-89454 In the Linux kernel, the following vulnerability has been resolved:
PCI: plda:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89455 In the Linux kernel, the following vulnerability has been resolved:
PCI: plda:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89457 In the Linux kernel, the following vulnerability has been resolved:
s390/dasd:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89458 In the Linux kernel, the following vulnerability has been resolved:
s390/dasd:... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89460 In the Linux kernel, the following vulnerability has been resolved:
s390/cpum_c... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89446 In the Linux kernel, the following vulnerability has been resolved:
iommufd: Re... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89447 In the Linux kernel, the following vulnerability has been resolved:
iommufd: Av... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
| CVE-2026-89449 In the Linux kernel, the following vulnerability has been resolved:
iommu: Fix... |
not reported | — | — | — | 2026-09-11 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.