September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-45726 Omni manages Kubernetes on bare metal, virtual machines, or in a cloud. |
high | 7.6 | — | — | 2026-09-17 | 2026-09-24 |
| CVE-2026-90997 A flaw was found in Keycloak. |
high | 7.4 | — | — | 2026-09-17 | 2026-09-22 |
| CVE-2026-92230 Apache Karaf's XmlUtils cached XML parser/transformer factories in static Thread... |
high | 7.5 | — | — | 2026-09-17 | 2026-09-18 |
| CVE-2026-54239 Faust.js is a headless WordPress toolkit. |
high | 8.8 | — | — | 2026-09-17 | 2026-09-24 |
| CVE-2026-54253 TS3 Manager is modern web interface for maintaining Teamspeak3 servers. |
high | 8.2 | — | — | 2026-09-17 | 2026-09-30 |
| CVE-2026-54504 MCP Documentation Server is a local-first document management and semantic searc... |
high | 8.8 | — | — | 2026-09-17 | 2026-09-30 |
| CVE-2026-52727 lxc-ci contains continuous integration and image-build scripts for LXC. |
high | 7.2 | — | — | 2026-09-17 | 2026-09-30 |
| CVE-2026-52851 Traccar is an open source GPS tracking system. |
high | 7.1 | — | — | 2026-09-17 | 2026-09-30 |
| CVE-2026-19477 There
is stack-based buffer overflow vulnerability recently discovered in MCC Un... |
high | 7.8 | — | — | 2026-09-17 | 2026-09-28 |
| CVE-2026-92926 A vulnerability has been found in code-projects Matrimonial System 1.0. |
high | 7.3 | — | — | 2026-09-17 | 2026-09-17 |
| CVE-2026-54446 NetLicensing MCP Server is a natural-language interface that enables agentic app... |
high | 8.1 | — | — | 2026-09-17 | 2026-09-30 |
| CVE-2026-44236 rabbitmq-c is a C-language AMQP client library for RabbitMQ. |
high | 7.1 | — | — | 2026-09-17 | 2026-09-24 |
| CVE-2026-93201 In the Linux kernel, the following vulnerability has been resolved:
dm-pcache:... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93203 In the Linux kernel, the following vulnerability has been resolved:
batman-adv:... |
high | 7.1 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93292 SigNoz versions from 0.88.0 before 0.142.1 contain a SQL injection vulnerability... |
high | 8.5 | — | — | 2026-09-17 | 2026-09-22 |
| CVE-2026-93189 In the Linux kernel, the following vulnerability has been resolved:
HID: core:... |
high | 8.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93190 In the Linux kernel, the following vulnerability has been resolved:
platform/ch... |
high | 8.4 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93192 In the Linux kernel, the following vulnerability has been resolved:
drm/v3d: Cl... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-93196 In the Linux kernel, the following vulnerability has been resolved:
nvdimm: vir... |
high | 8.4 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-93175 In the Linux kernel, the following vulnerability has been resolved:
drm/amd/dis... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-93176 In the Linux kernel, the following vulnerability has been resolved:
drm/amd/dis... |
high | 7.0 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-93177 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/... |
high | 7.3 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93178 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu/... |
high | 7.1 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93165 In the Linux kernel, the following vulnerability has been resolved:
platform/ch... |
high | 7.7 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93170 In the Linux kernel, the following vulnerability has been resolved:
dmaengine:... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93151 In the Linux kernel, the following vulnerability has been resolved:
nvmet-rdma:... |
high | 7.5 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93154 In the Linux kernel, the following vulnerability has been resolved:
RDMA/irdma:... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93144 In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-93147 In the Linux kernel, the following vulnerability has been resolved:
s390/bpf: R... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93148 In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-93137 In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix us... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93138 In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix vm... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93125 In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-93127 In the Linux kernel, the following vulnerability has been resolved:
bpf: Drop s... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93116 In the Linux kernel, the following vulnerability has been resolved:
platform/x8... |
high | 7.0 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-93121 In the Linux kernel, the following vulnerability has been resolved:
usb: gadget... |
high | 7.0 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93122 In the Linux kernel, the following vulnerability has been resolved:
usb: gadget... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-93107 In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: A... |
high | 8.2 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93111 In the Linux kernel, the following vulnerability has been resolved:
bpf: Mark t... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93112 In the Linux kernel, the following vulnerability has been resolved:
bpf: Requir... |
high | 7.1 | — | — | 2026-09-17 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.