September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-97437 In the Linux kernel, the following vulnerability has been resolved:
ntfs3: fix... |
high | 7.1 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97438 In the Linux kernel, the following vulnerability has been resolved:
fs/ntfs3: v... |
high | 7.1 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97428 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu:... |
high | 7.7 | — | — | 2026-09-24 | 2026-10-21 |
| CVE-2026-97429 In the Linux kernel, the following vulnerability has been resolved:
drm/amdkfd:... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97415 In the Linux kernel, the following vulnerability has been resolved:
btrfs: tree... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97417 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
high | 7.5 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97421 In the Linux kernel, the following vulnerability has been resolved:
RDMA/umem:... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-97231 A vulnerability was found in volotat Anagnorisis up to 0.3.1/0.4.0. |
high | 7.3 | — | — | 2026-09-24 | 2026-09-29 |
| CVE-2026-97409 In the Linux kernel, the following vulnerability has been resolved:
nvme-fc: Do... |
high | 8.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-94606 authentik is an open-source identity provider. |
high | 8.9 | — | — | 2026-09-24 | 2026-10-05 |
| CVE-2026-94609 authentik is an open-source identity provider. |
high | 8.8 | — | — | 2026-09-24 | 2026-09-28 |
| CVE-2026-94611 authentik is an open-source identity provider. |
high | 8.1 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-94612 authentik is an open-source identity provider. |
high | 7.4 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-94613 authentik is an open-source identity provider. |
high | 7.5 | — | — | 2026-09-24 | 2026-09-29 |
| CVE-2026-93826 In the Linux kernel, the following vulnerability has been resolved:
HID: hidpp:... |
high | 7.5 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93827 In the Linux kernel, the following vulnerability has been resolved:
virtio-fs:... |
high | 8.4 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-93830 In the Linux kernel, the following vulnerability has been resolved:
net: stmmac... |
high | 7.5 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93816 In the Linux kernel, the following vulnerability has been resolved:
f2fs: valid... |
high | 7.1 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93817 In the Linux kernel, the following vulnerability has been resolved:
perf: Fix a... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-21 |
| CVE-2026-93810 In the Linux kernel, the following vulnerability has been resolved:
cachefiles:... |
high | 7.0 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93813 In the Linux kernel, the following vulnerability has been resolved:
btrfs: tree... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93801 In the Linux kernel, the following vulnerability has been resolved:
smb/client:... |
high | 7.0 | — | — | 2026-09-24 | 2026-10-21 |
| CVE-2026-93806 In the Linux kernel, the following vulnerability has been resolved:
wifi: cfg80... |
high | 8.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93793 In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwi... |
high | 8.8 | — | — | 2026-09-24 | 2026-10-21 |
| CVE-2026-93796 In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwi... |
high | 7.0 | — | — | 2026-09-24 | 2026-10-21 |
| CVE-2026-93798 In the Linux kernel, the following vulnerability has been resolved:
btrfs: fix... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93799 In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwi... |
high | 8.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93786 In the Linux kernel, the following vulnerability has been resolved:
ksmbd: pres... |
high | 8.1 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93787 In the Linux kernel, the following vulnerability has been resolved:
smb: client... |
high | 8.1 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93790 In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwi... |
high | 8.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93288 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-93543 An out-of-bounds read in libXi's XI2 class parser in libXi before 1.8.4 could be... |
high | 7.4 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-93782 In the Linux kernel, the following vulnerability has been resolved:
vhost-scsi:... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-91160 OpenWA is a free, open source, self-hosted WhatsApp API gateway. |
high | 8.2 | — | — | 2026-09-24 | 2026-10-05 |
| CVE-2026-93284 In the Linux kernel, the following vulnerability has been resolved:
drm/pagemap... |
high | 8.8 | — | — | 2026-09-24 | 2026-10-19 |
| CVE-2026-93287 In the Linux kernel, the following vulnerability has been resolved:
i2c: smbus:... |
high | 7.8 | — | — | 2026-09-24 | 2026-10-03 |
| CVE-2026-88390 An out-of-bounds write vulnerability in jslGetTokenValueAsString() in Espruino 2... |
high | 7.7 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-91122 Discourse is an open-source discussion platform. |
high | 8.7 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-91123 Discourse is an open-source discussion platform. |
high | 7.2 | — | — | 2026-09-24 | 2026-09-24 |
| CVE-2026-88372 libsndfile 1.2.2 contains an integer overflow vulnerability in mat4_read_header(... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.