September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-96749 An integer overflow in the BSON document encoding component of the MongoDB Pytho... |
high | 8.4 | — | — | 2026-09-24 | 2026-09-26 |
| CVE-2026-89325 An uncontrolled search path element in InsightVM assessment content in Rapid7 In... |
high | 7.8 | — | — | 2026-09-24 | 2026-09-26 |
| CVE-2026-81455 Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contain a Miss... |
high | 8.6 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-81473 Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-29 |
| CVE-2026-82157 Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Im... |
high | 8.3 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-77293 TREK is a collaborative travel planner. |
high | 7.1 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-77294 TREK is a collaborative travel planner. |
high | 8.1 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-61823 code16 Sharp is a Laravel-based framework for building content-management and ad... |
high | 7.3 | — | — | 2026-09-24 | 2026-09-30 |
| CVE-2026-61825 code16 Sharp is a Laravel-based framework for building content-management and ad... |
high | 8.7 | — | — | 2026-09-24 | 2026-09-29 |
| CVE-2026-57440 The EmbedVideo Extension is a MediaWiki extension which adds a parser function c... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-30 |
| CVE-2026-48070 Docmost is open-source collaborative wiki and documentation software. |
high | 7.1 | — | — | 2026-09-24 | 2026-10-05 |
| CVE-2026-13248 An Authenticated Remote Code Execution via Arbitrary File Write in the Intermec... |
high | 8.8 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-95985 The file write tool in Amazon Kiro IDE versions before 1.0.242 might allow remot... |
high | 8.8 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-85056 ZITADEL is an open source identity management platform. |
high | 8.2 | — | — | 2026-09-24 | 2026-09-28 |
| CVE-2026-85057 ZITADEL is an open source identity management platform. |
high | 8.7 | — | — | 2026-09-24 | 2026-10-05 |
| CVE-2026-71540 Wazuh is an open-source security platform providing unified XDR and SIEM protect... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-30 |
| CVE-2026-63645 OpenObserve is a cloud-native observability platform. |
high | 7.5 | — | — | 2026-09-24 | 2026-10-05 |
| CVE-2026-61815 zbateson/mail-mime-parser is a mail mime parser alternative to PHP's imap* funct... |
high | 7.2 | — | — | 2026-09-24 | 2026-10-05 |
| CVE-2026-61816 zbateson/mail-mime-parser is a mail mime parser alternative to PHP's imap* funct... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-30 |
| CVE-2026-61782 Rsdoctor is a build analyzer tailored for projects built with Rspack. |
high | 7.5 | — | — | 2026-09-24 | 2026-09-30 |
| CVE-2026-61788 DBHub is a database MCP server for Postgres, MySQL, SQL Server, Oracle, MariaDB,... |
high | 7.4 | — | — | 2026-09-24 | 2026-09-30 |
| CVE-2026-57178 Python Social Auth is a social authentication/registration mechanism. |
high | 7.4 | — | — | 2026-09-24 | 2026-09-28 |
| CVE-2026-97520 In the Linux kernel, the following vulnerability has been resolved:
gfs2: move... |
high | 7.1 | — | — | 2026-09-24 | 2026-09-28 |
| CVE-2026-97513 In the Linux kernel, the following vulnerability has been resolved:
media: chip... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-21 |
| CVE-2026-97508 In the Linux kernel, the following vulnerability has been resolved:
thunderbolt... |
high | 7.5 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97509 In the Linux kernel, the following vulnerability has been resolved:
thunderbolt... |
high | 8.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97496 In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd:... |
high | 7.1 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97497 In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd:... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97478 In the Linux kernel, the following vulnerability has been resolved:
virt: acrn:... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-21 |
| CVE-2026-97474 In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwi... |
high | 7.4 | — | — | 2026-09-24 | 2026-09-28 |
| CVE-2026-97448 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Add... |
high | 7.7 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97450 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: val... |
high | 8.4 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97451 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Fix... |
high | 8.4 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97452 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Pre... |
high | 8.4 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97454 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: add... |
high | 7.7 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97455 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Fix... |
high | 8.4 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97442 In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11... |
high | 8.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97444 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: add... |
high | 7.7 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97445 In the Linux kernel, the following vulnerability has been resolved:
ACPICA: Enh... |
high | 7.7 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97433 In the Linux kernel, the following vulnerability has been resolved:
nvme: valid... |
high | 8.2 | — | — | 2026-09-24 | 2026-09-25 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.