September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-80883 In the Linux kernel, the following vulnerability has been resolved:
drm/tegra:... |
not reported | — | — | — | 2026-09-04 | 2026-09-07 |
| CVE-2026-80871 In the Linux kernel, the following vulnerability has been resolved:
crypto: xil... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80872 In the Linux kernel, the following vulnerability has been resolved:
ALSA: hda/t... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80873 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80874 In the Linux kernel, the following vulnerability has been resolved:
arm64: dts:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80875 In the Linux kernel, the following vulnerability has been resolved:
ipvs: use p... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80876 In the Linux kernel, the following vulnerability has been resolved:
ring-buffer... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80877 In the Linux kernel, the following vulnerability has been resolved:
afs: Fix vl... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80878 In the Linux kernel, the following vulnerability has been resolved:
afs: Fix le... |
not reported | — | — | — | 2026-09-04 | 2026-09-14 |
| CVE-2026-80865 In the Linux kernel, the following vulnerability has been resolved:
bpf: Add mi... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80866 In the Linux kernel, the following vulnerability has been resolved:
tipc: avoid... |
not reported | — | — | — | 2026-09-04 | 2026-10-21 |
| CVE-2026-80867 In the Linux kernel, the following vulnerability has been resolved:
alpha/PCI:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80868 In the Linux kernel, the following vulnerability has been resolved:
ntfs3: Allo... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80869 In the Linux kernel, the following vulnerability has been resolved:
ntfs: bound... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80870 In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-85730 smol-toml is a small, fast, and correct TOML parser and serializer. |
not reported | — | — | — | 2026-09-04 | 2026-09-09 |
| CVE-2026-82911 Cross-Site Request Forgery (CSRF) in the OrderConfirmController at GET /order/co... |
not reported | — | — | — | 2026-09-04 | 2026-09-09 |
| CVE-2026-80859 In the Linux kernel, the following vulnerability has been resolved:
fuse: fix m... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80860 In the Linux kernel, the following vulnerability has been resolved:
fuse: fix r... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80861 In the Linux kernel, the following vulnerability has been resolved:
usb: xhci:... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80862 In the Linux kernel, the following vulnerability has been resolved:
nvme-tcp: f... |
not reported | — | — | — | 2026-09-04 | 2026-10-21 |
| CVE-2026-80863 In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: F... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80864 In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: F... |
not reported | — | — | — | 2026-09-04 | 2026-10-21 |
| CVE-2026-80852 In the Linux kernel, the following vulnerability has been resolved:
tls: device... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80853 In the Linux kernel, the following vulnerability has been resolved:
KVM: SEV: A... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80854 In the Linux kernel, the following vulnerability has been resolved:
usb: gadget... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80855 In the Linux kernel, the following vulnerability has been resolved:
fuse: fix i... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80856 In the Linux kernel, the following vulnerability has been resolved:
fuse: fix i... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80857 In the Linux kernel, the following vulnerability has been resolved:
fuse: wait... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80858 In the Linux kernel, the following vulnerability has been resolved:
fuse: publi... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80844 In the Linux kernel, the following vulnerability has been resolved:
xfrm: ah6:... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80845 In the Linux kernel, the following vulnerability has been resolved:
xfrm: avoid... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80846 In the Linux kernel, the following vulnerability has been resolved:
xfrm: drop... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80847 In the Linux kernel, the following vulnerability has been resolved:
tcp: clamp... |
not reported | — | — | — | 2026-09-04 | 2026-10-21 |
| CVE-2026-80848 In the Linux kernel, the following vulnerability has been resolved:
xfrm: espin... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80849 In the Linux kernel, the following vulnerability has been resolved:
net/tcp-ao:... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80850 In the Linux kernel, the following vulnerability has been resolved:
tcp: fix AO... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80851 In the Linux kernel, the following vulnerability has been resolved:
gtp: serial... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80837 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
| CVE-2026-80838 In the Linux kernel, the following vulnerability has been resolved:
vxlan: keep... |
not reported | — | — | — | 2026-09-04 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.