September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-101884 OpenClaw Windows Node before 2026.7.1 contains an incomplete environment-variabl... |
high | 7.5 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-101882 OpenClaw Windows Node before 2026.7.1 contains an incomplete validation vulnerab... |
high | 8.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-101880 OpenClaw Windows Node before 2026.7.1 contains an incorrect authorization vulner... |
high | 8.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-97256 Editor PHP Object Injection in Page Builder by SiteOrigin <= 2.36.0 versions. |
high | 7.2 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-97290 Unauthenticated Cross Site Scripting (XSS) in Photonic Gallery & Lightbox for Fl... |
high | 7.1 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-97291 Contributor PHP Object Injection in Schema & Structured Data for WP & AMP <= 1.6... |
high | 8.8 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-94171 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-09-30 | 2026-10-05 |
| CVE-2026-87004 Tugtainer is a self-hosted app for automating updates of Docker containers. |
high | 8.1 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-53605 Reachy Mini ISO for Wireless contains the necessary files to build a custom Rasp... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-103471 restbed through 5.0.0 buffers HTTP request headers without enforcing a maximum s... |
high | 7.5 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-103472 restbed through 5.0.0 accepts WebSocket frames with declared payload lengths up... |
high | 7.5 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-103473 Deno versions 2.7.0 through 2.9.7 on Windows contain a command injection vulnera... |
high | 8.1 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-103474 yii2-starter-kit through 4.2.0 fails to validate file types in the backend stora... |
high | 8.8 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-102376 Subscriber Cross Site Scripting (XSS) in Branda <= 3.4.32 versions. |
high | 7.1 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-102377 Contributor PHP Object Injection in Photo Gallery by 10Web <= 1.8.46 versions. |
high | 8.8 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-102391 Unauthenticated Cross Site Scripting (XSS) in JetFormBuilder <= 3.6.5.4 versions... |
high | 7.1 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-102392 Shop manager PHP Object Injection in Extra Product Options For WooCommerce | Cus... |
high | 7.2 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-100510 Unauthenticated Cross Site Scripting (XSS) in Post and Page Builder by BoldGrid... |
high | 7.1 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-46711 Soft Machine is a Virtual Machine–based agentic development environment / Cloud... |
high | 8.3 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-103232 A weakness has been identified in AdithyaYelloju Restaurant-Management-System up... |
high | 7.3 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-103241 A flaw has been found in vllm-project vLLM up to 0.26.0. |
high | 7.5 | — | Vllm / vllm | 2026-09-30 | 2026-10-06 |
| CVE-2026-102490 Zammad GmbH Zammad Improper Privilege Management Vulnerability |
high | 7.8 | Listed | Zammad GmbH / Zammad | 2026-09-30 | 2026-10-09 |
| CVE-2026-47598 NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source... |
high | 7.0 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47599 NVIDIA GPU Display Driver for Linux contains a vulnerability in the open-source... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47600 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47601 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47602 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
high | 7.1 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-47591 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47592 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47593 NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mod... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47594 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47595 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47596 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode... |
high | 7.0 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-47597 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47585 NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mod... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47587 NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileg... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47588 NVIDIA GPU Display Driver for Linux contains a vulnerability where an unprivileg... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47589 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47590 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability where a... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-47578 NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mod... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.