September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-68928 Acode is a powerful text and code editor for Android. |
high | 8.6 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-63448 Suricata is a network Intrusion Detection System, Intrusion Prevention System an... |
high | 7.5 | — | Oisf / suricata | 2026-09-18 | 2026-09-28 |
| CVE-2026-63452 Suricata is a network Intrusion Detection System, Intrusion Prevention System an... |
high | 7.5 | — | Oisf / suricata | 2026-09-18 | 2026-09-28 |
| CVE-2026-63446 Suricata is a network Intrusion Detection System, Intrusion Prevention System an... |
high | 7.5 | — | Oisf / suricata | 2026-09-18 | 2026-09-28 |
| CVE-2026-63447 Suricata is a network Intrusion Detection System, Intrusion Prevention System an... |
high | 7.5 | — | Oisf / suricata | 2026-09-18 | 2026-09-28 |
| CVE-2026-57227 Suricata is a network Intrusion Detection System, Intrusion Prevention System an... |
high | 7.5 | — | Oisf / suricata | 2026-09-18 | 2026-09-29 |
| CVE-2026-57223 Suricata is a network Intrusion Detection System, Intrusion Prevention System an... |
high | 7.0 | — | Oisf / suricata | 2026-09-18 | 2026-09-29 |
| CVE-2026-93872 Cotonti 1.0.0 passes the base64-decoded cb parameter to unserialize() without al... |
high | 7.5 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-93868 Cotonti through 1.0.0 derives password recovery validation tokens from md5(micro... |
high | 8.1 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-93031 The WP Cloud Plugins Use-your-Drive, Out-of-the-Box, Share-one-Drive, and Lets-B... |
high | 8.8 | — | — | 2026-09-18 | 2026-09-21 |
| CVE-2026-92708 Svelte devalue is a JavaScript library that serializes values into strings when... |
high | 7.5 | — | — | 2026-09-18 | 2026-09-23 |
| CVE-2026-84241 IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass securi... |
high | 8.1 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84084 IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass securi... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84085 IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbit... |
high | 8.1 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84086 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
high | 7.2 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84089 IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated... |
high | 7.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84105 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
high | 7.7 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84106 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
high | 8.9 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84108 IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbit... |
high | 8.1 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84239 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
high | 7.6 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84076 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
high | 7.6 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84077 IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass securi... |
high | 8.1 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84081 IBM Guardium Data Protection 12.2 could allow a remote attacker to bypass securi... |
high | 8.1 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84083 IBM Guardium Data Protection 12.2 is vulnerable to local privilege escalation vi... |
high | 7.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84034 IBM Guardium Data Protection 12.2 is vulnerable to a hardcoded credentials vulne... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84036 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
high | 7.4 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84070 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
high | 8.9 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84071 IBM Guardium Data Protection 12.2 is vulnerable to OS command injection in the U... |
high | 7.2 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-84074 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
high | 8.9 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-82892 IBM Guardium Data Protection 12.2 could allow a remote attacker to execute arbit... |
high | 8.1 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-82893 IBM Guardium Data Protection 12.2 could allow a local attacker to gain elevated... |
high | 7.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-82896 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
high | 7.6 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-81669 IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerabi... |
high | 7.2 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-81933 IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-81937 IBM Guardium Data Protection 12.2 is vulnerable to a command injection vulnerabi... |
high | 7.2 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-82885 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-82887 IBM Guardium Data Protection 12.2 could allow a remote authenticated attacker to... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-80442 IBM Guardium Data Protection 12.2 is vulnerable to an authenticated OS command i... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-81623 IBM Guardium Data Protection 12.2 could allow an authenticated user to execute a... |
high | 8.8 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
| CVE-2026-81626 IBM Guardium Data Protection 12.2 is vulnerable to a SQL injection vulnerability... |
high | 8.6 | — | Ibm / guardium data protection | 2026-09-18 | 2026-10-06 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.