September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,826
Low
527
Severity not reported
2,544
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-55157 Token Optimizer MCP measures token savings per AI coding agent, optimizes contex... |
high | 8.4 | — | — | 2026-09-28 | 2026-10-01 |
| CVE-2026-55160 Stringer is a self-hosted, anti-social RSS reader. |
high | 7.6 | — | — | 2026-09-28 | 2026-09-30 |
| CVE-2026-54674 FreePBX is an open source IP PBX. |
high | 8.8 | — | Sangoma / freepbx | 2026-09-28 | 2026-10-16 |
| CVE-2026-54675 FreePBX is an open source IP PBX. |
high | 8.8 | — | Sangoma / freepbx | 2026-09-28 | 2026-10-16 |
| CVE-2026-54708 FreePBX is an open source IP PBX. |
high | 8.8 | — | Sangoma / freepbx | 2026-09-28 | 2026-10-16 |
| CVE-2026-45562 FreePBX is an open source IP PBX. |
high | 7.2 | — | Sangoma / freepbx | 2026-09-28 | 2026-10-16 |
| CVE-2026-88816 DBI versions before 1.654 for Perl incorrectly treat numeric values as strings i... |
high | 7.5 | — | — | 2026-09-28 | 2026-09-30 |
| CVE-2026-85644 XS::Parse::Infix versions from 0.40 through 0.49 for Perl treat a number as an a... |
high | 7.5 | — | — | 2026-09-28 | 2026-09-30 |
| CVE-2026-87114 A flaw was found in kube-compare. |
high | 7.1 | — | — | 2026-09-28 | 2026-10-07 |
| CVE-2026-55096 fast-mcp-telegram is a Telegram MCP Server. |
high | 7.1 | — | — | 2026-09-28 | 2026-10-01 |
| CVE-2026-54160 Network UPS Tools is a collection of programs which provide a common interface f... |
high | 8.2 | — | — | 2026-09-28 | 2026-09-30 |
| CVE-2026-93348 Unsloth Zoo versions 2025.9.9 before 2026.8.14, as implemented in Unsloth 2025.9... |
high | 8.1 | — | — | 2026-09-28 | 2026-09-30 |
| CVE-2026-88805 Incorrect credential cleaning on logout could be used by remote attackers to kee... |
high | 8.1 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-88808 A vulnerability has been identified within Rancher Manager where the Fleet agent... |
high | 8.8 | — | Suse / rancher fleet | 2026-09-28 | 2026-10-07 |
| CVE-2026-93538 A cross-tenant authorization issue was discovered in SUSE Rancher Fleet. |
high | 7.1 | — | Suse / rancher fleet | 2026-09-28 | 2026-10-07 |
| CVE-2026-80357 Dell Boot Optimized Server Storage (BOSS), versions prior to 2.2.13.2038, contai... |
high | 7.0 | — | — | 2026-09-28 | 2026-09-28 |
| CVE-2026-4556 Exam4 is affected by a local privilege escalation vulnerability in the com.exteg... |
high | 7.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-101073 A security flaw has been discovered in Netcore NR289-GE 1.4.5102. |
high | 8.3 | — | — | 2026-09-28 | 2026-10-01 |
| CVE-2026-97335 Incorrect authorization in the custom storage volume creation endpoint in Canoni... |
high | 7.7 | — | — | 2026-09-28 | 2026-09-28 |
| CVE-2026-86595 Improper neutralization of special elements used in an SQL command ('SQL injecti... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-28 |
| CVE-2026-90925 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') v... |
high | 7.1 | — | — | 2026-09-28 | 2026-09-28 |
| CVE-2026-90926 Improper Control of Generation of Code ('Code Injection') vulnerability in Innot... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-28 |
| CVE-2026-86330 An OS command injection flaw was found in the set_hostname_internal function of... |
high | 7.2 | — | — | 2026-09-28 | 2026-09-30 |
| CVE-2026-82323 Authorization bypass through User-Controlled key vulnerability in Enocta Educati... |
high | 8.1 | — | — | 2026-09-28 | 2026-09-28 |
| CVE-2026-101292 Apache ActiveMQ Artemis before 2.34.0 contains an unsafe reflection vulnerabilit... |
high | 8.2 | — | — | 2026-09-28 | 2026-10-20 |
| CVE-2026-12265 Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insuffi... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-101066 A vulnerability was determined in dbgate up to 7.3.1. |
high | 7.3 | — | — | 2026-09-28 | 2026-09-28 |
| CVE-2026-101067 A vulnerability was identified in dbgate up to 6.8.1/7.0.2/7.1.8/7.2.5/7.3.1. |
high | 7.3 | — | — | 2026-09-28 | 2026-10-01 |
| CVE-2026-78424 Improper parameter handling in NeuVector allows any authenticated user who holds... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-101053 A vulnerability was determined in Thinkware U3000 up to 1.02.04. |
high | 7.3 | — | — | 2026-09-28 | 2026-09-28 |
| CVE-2026-12264 Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitra... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-101052 A security vulnerability has been detected in refly-ai refly up to 1.1.0. |
high | 7.3 | — | — | 2026-09-28 | 2026-09-28 |
| CVE-2026-91006 Apache Karaf's instance-management service (InstanceServiceImpl) builds the comm... |
high | 8.8 | — | Apache / karaf | 2026-09-28 | 2026-10-08 |
| CVE-2026-12268 ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell comman... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-12269 Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived config... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-12267 ManageEngine DDI Central versions below 6201 are vulnerable to Command injection... |
high | 7.2 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-90979 LDAPCache and LDAPBackingEngine build LDAP search filters for user lookup and ro... |
high | 7.3 | — | Apache / karaf | 2026-09-28 | 2026-10-08 |
| CVE-2026-94286 An out-of-bounds read in libXtst's RECORD reply parser in libXtst before 1.2.6 c... |
high | 7.1 | — | — | 2026-09-28 | 2026-09-30 |
| CVE-2026-95104 Stack-based buffer overflow vulnerability exists in BUFFALO Wi-Fi products. |
high | 7.5 | — | — | 2026-09-28 | 2026-09-30 |
| CVE-2026-85134 Unrestricted upload of file with dangerous type vulnerability in Bimser Solution... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-28 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.