September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,827
Low
527
Severity not reported
2,543
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), apache (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-100587 OpenClaw versions before 2026.7.1 fail to properly validate owner authorization... |
high | 8.8 | — | — | 2026-09-26 | 2026-09-28 |
| CVE-2026-100588 OpenClaw (npm package 'openclaw') before 2026.7.1 does not enforce the administr... |
high | 8.3 | — | — | 2026-09-26 | 2026-10-05 |
| CVE-2026-100575 OpenClaw Slack versions before 2026.8.1 fail to properly enforce sender allowlis... |
high | 8.8 | — | — | 2026-09-26 | 2026-10-08 |
| CVE-2026-100578 OpenClaw (npm package `openclaw`) before 2026.7.1 fails to restrict owner-only i... |
high | 7.6 | — | — | 2026-09-26 | 2026-09-28 |
| CVE-2026-100579 OpenClaw (npm package 'openclaw') before 2026.7.1 incorrectly trusts requester p... |
high | 7.6 | — | — | 2026-09-26 | 2026-09-28 |
| CVE-2026-100580 OpenClaw (npm package 'openclaw') before 2026.7.1 improperly handles case sensit... |
high | 8.8 | — | — | 2026-09-26 | 2026-10-05 |
| CVE-2026-100570 OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 allow an... |
high | 7.8 | — | — | 2026-09-26 | 2026-09-29 |
| CVE-2026-100567 OpenClaw is an agent gateway distributed as the npm package 'openclaw'. |
high | 8.2 | — | — | 2026-09-26 | 2026-09-28 |
| CVE-2026-100568 OpenClaw versions before 2026.8.1 fail to properly restrict access to operator c... |
high | 8.3 | — | — | 2026-09-26 | 2026-10-05 |
| CVE-2026-100555 OpenClaw is an npm-distributed gateway application. |
high | 7.1 | — | — | 2026-09-26 | 2026-10-05 |
| CVE-2026-100557 OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability... |
high | 8.3 | — | — | 2026-09-26 | 2026-09-29 |
| CVE-2026-100558 OpenClaw versions before 2026.8.1 contain a resource exhaustion vulnerability in... |
high | 7.5 | — | — | 2026-09-26 | 2026-09-28 |
| CVE-2026-100559 OpenClaw versions before 2026.8.1 contain a command parser vulnerability where e... |
high | 8.0 | — | — | 2026-09-26 | 2026-10-05 |
| CVE-2026-100560 OpenClaw versions before 2026.8.1 contain an authorization bypass vulnerability... |
high | 7.5 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-100561 OpenClaw (npm package 'openclaw') versions >= 2026.3.22 and < 2026.8.1 contain a... |
high | 8.0 | — | — | 2026-09-26 | 2026-09-29 |
| CVE-2026-100551 OpenClaw for iOS versions >= 2026.7.1 and < 2026.8.11 do not enforce saved Gatew... |
high | 8.3 | — | — | 2026-09-26 | 2026-10-05 |
| CVE-2026-100552 OpenClaw (npm package 'openclaw') before 2026.8.1 does not correctly enforce per... |
high | 8.8 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-100543 OpenClaw (npm package openclaw) before 2026.8.1 could include deterministic hash... |
high | 7.5 | — | — | 2026-09-26 | 2026-10-05 |
| CVE-2026-100544 openclaw's @openclaw/voice-call package before 2026.8.1 launches the configured... |
high | 8.8 | — | — | 2026-09-26 | 2026-10-08 |
| CVE-2026-100535 OpenClaw (npm package 'openclaw') versions >= 2026.4.5 and < 2026.8.1 can lose t... |
high | 7.5 | — | — | 2026-09-26 | 2026-10-05 |
| CVE-2026-100541 OpenClaw's Matrix integration (npm package @openclaw/matrix) versions >= 2026.2.... |
high | 7.5 | — | — | 2026-09-26 | 2026-10-08 |
| CVE-2026-100530 OpenClaw versions before 2026.8.1 fail to bind working directory context to reus... |
high | 7.3 | — | — | 2026-09-26 | 2026-09-28 |
| CVE-2026-100532 @openclaw/whatsapp (npm) before 2026.8.1 exposes the WhatsApp login tool through... |
high | 8.1 | — | — | 2026-09-26 | 2026-10-08 |
| CVE-2026-100504 Ghidra versions through 12.1.4 contain a stack-based out-of-bounds write vulnera... |
high | 7.0 | — | Nsa / ghidra | 2026-09-26 | 2026-10-08 |
| CVE-2026-100520 Laranode versions before 1.2.1 contain a path traversal vulnerability in the POS... |
high | 8.8 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-96795 Horilla is an HR and CRM software. |
high | 8.8 | — | — | 2026-09-25 | 2026-09-28 |
| CVE-2026-100419 gitoxide gix-fs before 0.23.0 contains a path validation bypass vulnerability in... |
high | 7.0 | — | — | 2026-09-25 | 2026-09-28 |
| CVE-2026-91765 cleanup_xml_node() in the SOAP XML parser recurses once per XML nesting level wi... |
high | 7.5 | — | Php / php | 2026-09-25 | 2026-10-23 |
| CVE-2026-10758 Esri LERC is an open-source image or raster format which supports rapid encoding... |
high | 7.5 | — | — | 2026-09-25 | 2026-09-30 |
| CVE-2026-17545 On Windows, PHP's filesystem and stream APIs do not reject reserved device names... |
high | 7.5 | — | Php / php | 2026-09-25 | 2026-10-23 |
| CVE-2026-57443 SCBE-AETHERMOORE is a geometric AI governance and evaluation framework. |
high | 7.5 | — | — | 2026-09-25 | 2026-09-30 |
| CVE-2026-100387 pgPointcloud through 1.2.5 contains a heap out-of-bounds read vulnerability in d... |
high | 8.1 | — | — | 2026-09-25 | 2026-09-30 |
| CVE-2026-100389 GestSup versions before 3.2.62 contain a remote code execution vulnerability in... |
high | 8.1 | — | — | 2026-09-25 | 2026-09-30 |
| CVE-2026-100390 Zoraxy versions 3.2.3 through 3.3.4 fail to properly parse IPv6 addresses in the... |
high | 7.4 | — | — | 2026-09-25 | 2026-09-30 |
| CVE-2026-100391 MediaFlow Proxy through 2.4.9 contains a server-side request forgery vulnerabili... |
high | 8.2 | — | — | 2026-09-25 | 2026-10-05 |
| CVE-2026-100369 CliInvoke and its formerly named `AlastairLundy.CliInvoke` package are .NET libr... |
high | 8.4 | — | — | 2026-09-25 | 2026-09-30 |
| CVE-2026-5267 Ciena Navigator Network
Control Suite (NCS) contains an information exposure vul... |
high | 7.5 | — | — | 2026-09-25 | 2026-09-28 |
| CVE-2026-100372 ClipBucket v5 before 5.5.3-#197 contains a path traversal vulnerability in the a... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-30 |
| CVE-2026-100310 GNU libextractor before 1.16 loads plugins from an untrusted search path specifi... |
high | 7.0 | — | — | 2026-09-25 | 2026-09-30 |
| CVE-2026-100368 CliInvoke is a .NET library for invoking command-line programs, and its `CliInvo... |
high | 8.4 | — | — | 2026-09-25 | 2026-09-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.