September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-13046 A deserialization of untrusted data vulnerability in WatchGuard Fireware OS's SA... |
high | 7.2 | — | Watchguard / fireware | 2026-09-30 | 2026-10-08 |
| CVE-2026-103043 anchorme through 3.0.8 contains a regular expression denial of service vulnerabi... |
high | 7.5 | — | — | 2026-09-29 | 2026-10-20 |
| CVE-2026-103042 LightLLM through 1.2.0 contains a memory exhaustion vulnerability in the NCCL co... |
high | 7.5 | — | — | 2026-09-29 | 2026-10-02 |
| CVE-2026-91191 The device's update mechanism includes conditions that allow unauthorized softwa... |
high | 7.5 | — | — | 2026-09-29 | 2026-09-30 |
| CVE-2026-84409 The device's update mechanism retrieves metadata for software updates over an un... |
high | 7.5 | — | — | 2026-09-29 | 2026-09-30 |
| CVE-2026-74220 U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_read_reply() functio... |
high | 8.2 | — | — | 2026-09-29 | 2026-09-30 |
| CVE-2026-74221 U-Boot before 2026.10-rc5 contains a buffer overflow in nfs_readlink_reply() fun... |
high | 8.2 | — | — | 2026-09-29 | 2026-09-30 |
| CVE-2026-74222 U-Boot before 2026.10-rc5 contains a use-after-free vulnerability in the httpc_r... |
high | 8.2 | — | — | 2026-09-29 | 2026-10-02 |
| CVE-2026-74225 U-Boot before 2026.10-rc5 contains out-of-bounds memory access in dhcp6_parse_op... |
high | 7.1 | — | — | 2026-09-29 | 2026-09-30 |
| CVE-2026-71971 U-Boot before 2026.10-rc3 with CONFIG_IP_DEFRAG enabled contains an out-of-bound... |
high | 8.2 | — | — | 2026-09-29 | 2026-09-30 |
| CVE-2026-71302 The application accepts user-supplied session identifiers and does not regenerat... |
high | 7.1 | — | — | 2026-09-29 | 2026-09-30 |
| CVE-2026-94204 The central cloud storage backend for the entire dashcam platform is misconfigur... |
high | 7.5 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102925 virtualenv is a tool for creating isolated virtual python environments. |
high | 7.8 | — | — | 2026-09-29 | 2026-09-30 |
| CVE-2026-102253 iperf3 versions prior to 3.22 contains a denial of service vulnerability that al... |
high | 7.5 | — | — | 2026-09-29 | 2026-09-30 |
| CVE-2026-96274 In Baicells Nova 430H, an unauthenticated device within radio range can send a m... |
high | 7.4 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-94953 A stack-based buffer overflow vulnerability exists in the web management interfa... |
high | 8.8 | — | — | 2026-09-29 | 2026-09-30 |
| CVE-2026-79403 An issue in Kilo Code before v7.4.1 allows a local attacker to execute arbitrary... |
high | 8.4 | — | — | 2026-09-29 | 2026-09-30 |
| CVE-2026-76726 An authentication bypass vulnerability in the API endpoint of HPE Networking Ins... |
high | 8.1 | — | — | 2026-09-29 | 2026-10-01 |
| CVE-2026-76727 Command injection vulnerabilities exist in the affected interface of HPE Network... |
high | 7.2 | — | — | 2026-09-29 | 2026-10-01 |
| CVE-2026-76728 A vulnerability in the API endpoint of HPE Networking Instant ON APs could allow... |
high | 7.2 | — | — | 2026-09-29 | 2026-10-06 |
| CVE-2026-67993 basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f contains a l... |
high | 8.8 | — | — | 2026-09-29 | 2026-09-30 |
| CVE-2026-67987 crmne/ruby_llm at commit fa6f279847d6d7027814539d9c0dfc3bbdfd2a83 contains polyn... |
high | 7.5 | — | — | 2026-09-29 | 2026-10-01 |
| CVE-2026-61519 Liberu CRM 0.9.1 before 10.0.0 contains a broken access control vulnerability th... |
high | 8.8 | — | — | 2026-09-29 | 2026-09-30 |
| CVE-2026-102875 VLC media player before 3.0.24 contains a path traversal vulnerability in the sk... |
high | 7.8 | — | — | 2026-09-29 | 2026-09-30 |
| CVE-2026-102876 SurrealDB before 3.3.0 contains an authorization bypass in HTTP session construc... |
high | 8.1 | — | — | 2026-09-29 | 2026-10-02 |
| CVE-2026-102878 mcp-chrome-bridge through 1.0.31 contains an origin validation error in the nati... |
high | 8.1 | — | — | 2026-09-29 | 2026-09-30 |
| CVE-2026-102327 Incorrect authorization in WebView in Google Chrome on on Android prior to 154.0... |
high | 7.5 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-102328 Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-102321 Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-102323 Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-102324 Use after free in PictureInPicture in Google Chrome prior to 154.0.8037.92 allow... |
high | 8.3 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-102326 Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-102317 Improper privilege management in Mojo in Google Chrome on on Windows prior to 15... |
high | 8.6 | — | Google / chrome | 2026-09-29 | 2026-09-30 |
| CVE-2026-102302 Buffer overflow in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote a... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-102299 Type confusion in V8 in Google Chrome prior to 154.0.8037.92 allowed a remote at... |
high | 8.8 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-102301 Out of bounds write in GPU in Google Chrome prior to 154.0.8037.92 allowed a rem... |
high | 8.3 | — | Google / chrome | 2026-09-29 | 2026-10-01 |
| CVE-2026-100296 In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUs... |
high | 8.1 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-100298 In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, two user‑information endpoin... |
high | 8.8 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-100292 In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can... |
high | 8.8 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-100293 In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud upd... |
high | 8.8 | — | — | 2026-09-29 | 2026-09-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.