Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

September 2026 CVE archive

Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in September 2026Materially updated (Critical / KEV)
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32

Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-80912
In the Linux kernel, the following vulnerability has been resolved: selinux: re...
not reported— —— 2026-09-042026-09-14
CVE-2026-80913
In the Linux kernel, the following vulnerability has been resolved: selinux: re...
not reported— —— 2026-09-042026-09-04
CVE-2026-80905
In the Linux kernel, the following vulnerability has been resolved: net: tap: f...
not reported— —— 2026-09-042026-10-21
CVE-2026-80906
In the Linux kernel, the following vulnerability has been resolved: net: packet...
not reported— —— 2026-09-042026-09-04
CVE-2026-80907
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu:...
not reported— —— 2026-09-042026-09-07
CVE-2026-80908
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu:...
not reported— —— 2026-09-042026-09-07
CVE-2026-80909
In the Linux kernel, the following vulnerability has been resolved: drm/amdgpu:...
not reported— —— 2026-09-042026-09-07
CVE-2026-80910
In the Linux kernel, the following vulnerability has been resolved: ASoC: codec...
not reported— —— 2026-09-042026-09-04
CVE-2026-80911
In the Linux kernel, the following vulnerability has been resolved: ASoC: SOF:...
not reported— —— 2026-09-042026-09-04
CVE-2026-80902
In the Linux kernel, the following vulnerability has been resolved: dmaengine:...
not reported— —— 2026-09-042026-09-04
CVE-2026-80903
In the Linux kernel, the following vulnerability has been resolved: drm/xe/oa:...
not reported— —— 2026-09-042026-09-04
CVE-2026-80904
In the Linux kernel, the following vulnerability has been resolved: net/tls: Fa...
not reported— —— 2026-09-042026-09-04
CVE-2026-80898
In the Linux kernel, the following vulnerability has been resolved: netfs: clea...
not reported— —— 2026-09-042026-09-04
CVE-2026-80899
In the Linux kernel, the following vulnerability has been resolved: erofs: remo...
not reported— —— 2026-09-042026-09-07
CVE-2026-80900
In the Linux kernel, the following vulnerability has been resolved: ASoC: SDCA:...
not reported— —— 2026-09-042026-09-04
CVE-2026-80901
In the Linux kernel, the following vulnerability has been resolved: ipvs: fix t...
not reported— —— 2026-09-042026-09-04
CVE-2026-80890
In the Linux kernel, the following vulnerability has been resolved: sctp: rejec...
not reported— —— 2026-09-042026-09-04
CVE-2026-80891
In the Linux kernel, the following vulnerability has been resolved: KVM: s390:...
not reported— —— 2026-09-042026-09-04
CVE-2026-80892
In the Linux kernel, the following vulnerability has been resolved: erofs: cap...
not reported— —— 2026-09-042026-09-04
CVE-2026-80893
In the Linux kernel, the following vulnerability has been resolved: mm/hugetlb:...
not reported— —— 2026-09-042026-09-04
CVE-2026-80894
In the Linux kernel, the following vulnerability has been resolved: iommufd: Fi...
not reported— —— 2026-09-042026-09-04
CVE-2026-80895
In the Linux kernel, the following vulnerability has been resolved: mshv: Order...
not reported— —— 2026-09-042026-09-04
CVE-2026-80896
In the Linux kernel, the following vulnerability has been resolved: mshv: Fix r...
not reported— —— 2026-09-042026-09-04
CVE-2026-80897
In the Linux kernel, the following vulnerability has been resolved: netfs: rele...
not reported— —— 2026-09-042026-10-21
CVE-2026-80887
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx:...
not reported— —— 2026-09-042026-09-04
CVE-2026-80888
In the Linux kernel, the following vulnerability has been resolved: drm/vmwgfx:...
not reported— —— 2026-09-042026-09-14
CVE-2026-80889
In the Linux kernel, the following vulnerability has been resolved: can: isotp:...
not reported— —— 2026-09-042026-09-04
CVE-2026-73848
Emlog is an open source website building system.
not reported— —— 2026-09-042026-09-08
CVE-2026-50553
Note Mark is an open-source note-taking application.
not reported— —— 2026-09-042026-09-09
CVE-2026-53757
Emlog is an open source website building system.
not reported— —— 2026-09-042026-09-08
CVE-2026-53758
Emlog is an open source website building system.
not reported— —— 2026-09-042026-09-09
CVE-2026-53761
Frappe CRM is an open-source customer relationship management tool.
not reported— —— 2026-09-042026-09-09
CVE-2026-18745
Rejected reason: This CVE ID has been rejected or withdrawn by its CVE Numbering...
not reported— —— 2026-09-042026-10-16
CVE-2026-80884
In the Linux kernel, the following vulnerability has been resolved: ntb: Store...
not reported— —— 2026-09-042026-10-21
CVE-2026-80885
In the Linux kernel, the following vulnerability has been resolved: afs: Fix un...
not reported— —— 2026-09-042026-09-04
CVE-2026-80886
In the Linux kernel, the following vulnerability has been resolved: serial: msm...
not reported— —— 2026-09-042026-09-04
CVE-2026-80879
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix...
not reported— —— 2026-09-042026-09-04
CVE-2026-80880
In the Linux kernel, the following vulnerability has been resolved: IB/mlx5: Pr...
not reported— —— 2026-09-042026-09-04
CVE-2026-80881
In the Linux kernel, the following vulnerability has been resolved: ocfs2: fix...
not reported— —— 2026-09-042026-09-04
CVE-2026-80882
In the Linux kernel, the following vulnerability has been resolved: crypto: teg...
not reported— —— 2026-09-042026-09-04

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.