September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-93105 In the Linux kernel, the following vulnerability has been resolved:
esp: do not... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-93095 In the Linux kernel, the following vulnerability has been resolved:
hfsplus: va... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93074 In the Linux kernel, the following vulnerability has been resolved:
dax/fsdev:... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93079 In the Linux kernel, the following vulnerability has been resolved:
cxl/feature... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93063 In the Linux kernel, the following vulnerability has been resolved:
wifi: iwlwi... |
high | 8.4 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93070 In the Linux kernel, the following vulnerability has been resolved:
media: ipu6... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93054 In the Linux kernel, the following vulnerability has been resolved:
uio: Fix st... |
high | 7.0 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93042 In the Linux kernel, the following vulnerability has been resolved:
dmaengine:... |
high | 8.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93045 In the Linux kernel, the following vulnerability has been resolved:
bpf: Reject... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93046 In the Linux kernel, the following vulnerability has been resolved:
software no... |
high | 7.0 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-92980 HortusFox-Web prior to version 6.1 contains a remote code execution vulnerabilit... |
high | 7.2 | — | — | 2026-09-17 | 2026-09-22 |
| CVE-2026-93037 In the Linux kernel, the following vulnerability has been resolved:
RDMA/hfi1:... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-93039 In the Linux kernel, the following vulnerability has been resolved:
ASoC: meson... |
high | 7.4 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-92522 In the Linux kernel, the following vulnerability has been resolved:
ACPI: proce... |
high | 7.3 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-92525 In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: V... |
high | 7.1 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-92518 In the Linux kernel, the following vulnerability has been resolved:
riscv, bpf:... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-92507 In the Linux kernel, the following vulnerability has been resolved:
RDMA/core:... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-92508 In the Linux kernel, the following vulnerability has been resolved:
RDMA/core:... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-92510 In the Linux kernel, the following vulnerability has been resolved:
RDMA/core:... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-92511 In the Linux kernel, the following vulnerability has been resolved:
RDMA/core:... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-92504 In the Linux kernel, the following vulnerability has been resolved:
thermal: in... |
high | 7.0 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-92485 In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix WA... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-92488 In the Linux kernel, the following vulnerability has been resolved:
RDMA/erdma:... |
high | 7.0 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90435 In the Linux kernel, the following vulnerability has been resolved:
RDMA/mlx5:... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90425 In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra... |
high | 8.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90427 In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra... |
high | 7.4 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90429 In the Linux kernel, the following vulnerability has been resolved:
iommu/tegra... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90419 In the Linux kernel, the following vulnerability has been resolved:
nilfs2: pre... |
high | 7.1 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90423 In the Linux kernel, the following vulnerability has been resolved:
RDMA/rxe: F... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90403 In the Linux kernel, the following vulnerability has been resolved:
wifi: rtlwi... |
high | 7.0 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90407 In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11... |
high | 7.7 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90408 In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12... |
high | 7.7 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90398 In the Linux kernel, the following vulnerability has been resolved:
wifi: ath11... |
high | 8.4 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90399 In the Linux kernel, the following vulnerability has been resolved:
wifi: ath12... |
high | 8.4 | — | — | 2026-09-17 | 2026-10-21 |
| CVE-2026-90401 In the Linux kernel, the following vulnerability has been resolved:
md: remove... |
high | 7.1 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90402 In the Linux kernel, the following vulnerability has been resolved:
bus: mhi: h... |
high | 7.0 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90387 In the Linux kernel, the following vulnerability has been resolved:
swiotlb: Pr... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90388 In the Linux kernel, the following vulnerability has been resolved:
iommu/dma:... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90392 In the Linux kernel, the following vulnerability has been resolved:
bpf: Fix po... |
high | 7.8 | — | — | 2026-09-17 | 2026-10-19 |
| CVE-2026-90379 In the Linux kernel, the following vulnerability has been resolved:
wifi: mt76:... |
high | 8.8 | — | — | 2026-09-17 | 2026-10-19 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.