September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-97937 In the Linux kernel, the following vulnerability has been resolved:
ftrace: for... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97940 In the Linux kernel, the following vulnerability has been resolved:
ipv6: fix f... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97941 In the Linux kernel, the following vulnerability has been resolved:
mm/slab: ta... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97931 In the Linux kernel, the following vulnerability has been resolved:
ALSA: us122... |
high | 7.0 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97926 In the Linux kernel, the following vulnerability has been resolved:
ufs: valida... |
high | 7.0 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97911 In the Linux kernel, the following vulnerability has been resolved:
accel: etho... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97903 In the Linux kernel, the following vulnerability has been resolved:
exit: hold... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97910 In the Linux kernel, the following vulnerability has been resolved:
ASoC: sprd:... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97875 Rojo's "rojo serve" HTTP API (default port 34872) has no Host/Origin header vali... |
high | 8.1 | — | — | 2026-09-25 | 2026-09-30 |
| CVE-2026-97611 In the Linux kernel, the following vulnerability has been resolved:
net: openvs... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97612 In the Linux kernel, the following vulnerability has been resolved:
net: mpls:... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97608 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
high | 7.0 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97609 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
high | 7.0 | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97602 In the Linux kernel, the following vulnerability has been resolved:
inet: frags... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97589 In the Linux kernel, the following vulnerability has been resolved:
s390/crypto... |
high | 7.0 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97594 In the Linux kernel, the following vulnerability has been resolved:
landlock: F... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97595 In the Linux kernel, the following vulnerability has been resolved:
mac802154:... |
high | 7.5 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97583 In the Linux kernel, the following vulnerability has been resolved:
afs: Clear... |
high | 7.5 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97584 In the Linux kernel, the following vulnerability has been resolved:
afs: Fix in... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97573 In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Ha... |
high | 8.1 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97575 In the Linux kernel, the following vulnerability has been resolved:
media: v4l2... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97576 In the Linux kernel, the following vulnerability has been resolved:
media: v4l2... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97577 In the Linux kernel, the following vulnerability has been resolved:
media: veri... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97578 In the Linux kernel, the following vulnerability has been resolved:
media: veri... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97579 In the Linux kernel, the following vulnerability has been resolved:
media: medi... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97580 In the Linux kernel, the following vulnerability has been resolved:
media: rkvd... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97570 In the Linux kernel, the following vulnerability has been resolved:
bnxt_en: Bo... |
high | 8.1 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97557 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
high | 7.5 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97562 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
high | 7.5 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97548 In the Linux kernel, the following vulnerability has been resolved:
xfs: fix th... |
high | 7.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97555 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
high | 8.8 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97531 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
high | 7.5 | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97536 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
high | 7.5 | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97523 In the Linux kernel, the following vulnerability has been resolved:
mptcp: clos... |
high | 7.5 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97524 In the Linux kernel, the following vulnerability has been resolved:
mptcp: avoi... |
high | 7.5 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97525 In the Linux kernel, the following vulnerability has been resolved:
x86/mm/pat:... |
high | 8.2 | — | — | 2026-09-25 | 2026-10-19 |
| CVE-2026-97527 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
high | 8.8 | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-97528 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
high | 8.8 | — | — | 2026-09-25 | 2026-10-21 |
| CVE-2026-92550 A pre-authentication attacker could leverage type size/count handling to cause e... |
high | 7.5 | — | Apache / qpid broker-j | 2026-09-25 | 2026-10-05 |
| CVE-2026-92560 A pre-authentication attacker could leverage type size/count handling to cause e... |
high | 7.5 | — | Apache / qpid broker-j | 2026-09-25 | 2026-10-05 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.