September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-47511 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47512 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47513 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47502 NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability i... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47503 NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47504 NVIDIA Linux GPU Display Driver contains a vulnerability in the NGX updater wher... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47505 NVIDIA GPU Display Driver for Windows contains a vulnerability in the kernel mod... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47507 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47495 NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability i... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47496 NVIDIA GPU Display Driver for Linux contains a vulnerability in the Virtual GPU... |
high | 7.3 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47497 NVIDIA Virtual GPU Manager contains a vulnerability in the GPU System Processor... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47498 NVIDIA vGPU Manager contains a vulnerability in the GPU System Processor (GSP) p... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47499 NVIDIA vGPU Virtual GPU Manager for Windows and Linux contains a vulnerability i... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47500 NVIDIA GPU Display Driver for Windows and Linux contains a vulnerability in the... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47501 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47489 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode... |
high | 7.8 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-47491 NVIDIA GPU Display Driver for Linux contains a vulnerability in the kernel mode... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47493 NVIDIA vGPU software for Windows and Linux contains a vulnerability in the GPU k... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-47494 NVIDIA GPU Display Driver for Linux contains a vulnerability where a user might... |
high | 7.8 | — | — | 2026-09-30 | 2026-10-01 |
| CVE-2026-103432 apcupsd through 3.14.14 has an sscanf stack-based buffer overflow in getupsvar()... |
high | 8.1 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-103229 A vulnerability was found in AdithyaYelloju Restaurant-Management-System up to 7... |
high | 7.3 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-103230 A vulnerability was determined in AdithyaYelloju Restaurant-Management-System up... |
high | 7.3 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-103231 A vulnerability was identified in AdithyaYelloju Restaurant-Management-System up... |
high | 7.3 | — | — | 2026-09-30 | 2026-10-02 |
| CVE-2026-100276 In JetBrains YouTrack before 2026.2.19197 guest users could remove a workflow ac... |
high | 7.5 | — | Jetbrains / youtrack | 2026-09-30 | 2026-10-02 |
| CVE-2026-100262 In JetBrains YouTrack before 2026.2.18991 missing authorisation allowed users wi... |
high | 7.1 | — | Jetbrains / youtrack | 2026-09-30 | 2026-10-02 |
| CVE-2026-100256 In JetBrains IntelliJ IDEA before 2026.2.3 rCE via Structural Search script cons... |
high | 7.8 | — | Jetbrains / intellij idea | 2026-09-30 | 2026-10-02 |
| CVE-2026-100253 In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 sandbox escape leadin... |
high | 8.8 | — | Jetbrains / teamcity | 2026-09-30 | 2026-10-06 |
| CVE-2026-100254 In JetBrains TeamCity before 2026.2,
2026.1.4,
2025.11.8 authenticated users c... |
high | 8.8 | — | Jetbrains / teamcity | 2026-09-30 | 2026-10-06 |
| CVE-2026-62097 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti... |
high | 7.6 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-18783 Missing authentication for critical function vulnerability in Trex Digital Smart... |
high | 8.8 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-47097 AJA HELO Plus firmware before 2.1.7 contains an information disclosure vulnerabi... |
high | 7.5 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-103398 OpenSave through 2.4.0 fails to properly validate save paths supplied by paired... |
high | 8.1 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-103270 LightLLM through 1.2.0 mounts reinforcement learning control routes on the publi... |
high | 7.5 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-102717 MQTT WebSocket setter ABI mismatch may disclose memory or cause a crash |
high | 7.5 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-101295 Path traversal / arbitrary file write in oc-mirror's operator catalog image extr... |
high | 7.3 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-97289 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
high | 7.1 | — | — | 2026-09-30 | 2026-10-09 |
| CVE-2026-97293 Contributor SQL Injection in Media LIbrary Assistant <= 3.41 versions. |
high | 8.5 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-97271 Unauthenticated Cross Site Scripting (XSS) in WPFunnels <= 3.13.1 versions. |
high | 7.1 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-97272 Unauthenticated Cross Site Scripting (XSS) in Premmerce Permalink Manager for Wo... |
high | 7.1 | — | — | 2026-09-30 | 2026-09-30 |
| CVE-2026-97287 Improper Neutralization of Special Elements used in an SQL Command ('SQL Injecti... |
high | 8.5 | — | — | 2026-09-30 | 2026-10-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.