Independent & educational platform Not a government body. No link or affiliation with any government organisation. Made for learning only. Test only systems you own or are authorised to test. Become a Partner or Sponsor → Full disclaimer

September 2026 CVE archive

Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.

Published in September 2026Materially updated (Critical / KEV)
Total records
15,074
Critical
1,387
High
5,790
Medium
4,833
Low
527
Severity not reported
2,537
In CISA KEV
32

Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)

CVESeverityCVSSKEVVendor / productPublishedModified
CVE-2026-90234
In the Linux kernel, the following vulnerability has been resolved: NFS: Return...
high 7.5 —— 2026-09-172026-10-30
CVE-2026-90237
In the Linux kernel, the following vulnerability has been resolved: netfilter:...
high 7.8 —— 2026-09-172026-10-19
CVE-2026-90240
In the Linux kernel, the following vulnerability has been resolved: iommu/vt-d:...
high 8.8 —— 2026-09-172026-10-21
CVE-2026-90225
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp:...
high 7.8 —— 2026-09-172026-10-19
CVE-2026-90227
In the Linux kernel, the following vulnerability has been resolved: nvme/ioctl:...
high 7.8 —— 2026-09-172026-10-19
CVE-2026-90228
In the Linux kernel, the following vulnerability has been resolved: nvmet: fix...
high 7.5 —— 2026-09-172026-10-19
CVE-2026-90229
In the Linux kernel, the following vulnerability has been resolved: nvme-apple:...
high 7.4 —— 2026-09-172026-10-30
CVE-2026-90231
In the Linux kernel, the following vulnerability has been resolved: apparmor: f...
high 8.4 —— 2026-09-172026-10-21
CVE-2026-90217
In the Linux kernel, the following vulnerability has been resolved: bpf: Compar...
high 7.8 —— 2026-09-172026-10-21
CVE-2026-90223
In the Linux kernel, the following vulnerability has been resolved: nfc: llcp:...
high 7.1 —— 2026-09-172026-10-19
CVE-2026-90224
In the Linux kernel, the following vulnerability has been resolved: nfc: nci: f...
high 7.5 —— 2026-09-172026-10-19
CVE-2026-90210
In the Linux kernel, the following vulnerability has been resolved: bpf: Fix UA...
high 7.8 —— 2026-09-172026-10-19
CVE-2026-90203
In the Linux kernel, the following vulnerability has been resolved: Squashfs: c...
high 7.1 —— 2026-09-172026-10-19
CVE-2026-90204
In the Linux kernel, the following vulnerability has been resolved: ocfs2: vali...
high 7.8 —— 2026-09-172026-10-30
CVE-2026-90205
In the Linux kernel, the following vulnerability has been resolved: ocfs2: vali...
high 7.8 —— 2026-09-172026-10-30
CVE-2026-90207
In the Linux kernel, the following vulnerability has been resolved: ALSA: seq:...
high 7.8 —— 2026-09-172026-10-19
CVE-2026-90199
In the Linux kernel, the following vulnerability has been resolved: fs/ntfs3: r...
high 7.8 —— 2026-09-172026-10-19
CVE-2026-90191
In the Linux kernel, the following vulnerability has been resolved: mailbox: ri...
high 8.4 —— 2026-09-172026-10-19
CVE-2026-90174
In the Linux kernel, the following vulnerability has been resolved: ksmbd: fix...
high 7.1 —— 2026-09-172026-10-30
CVE-2026-90176
In the Linux kernel, the following vulnerability has been resolved: ksmbd: Do n...
high 8.1 —— 2026-09-172026-10-19
CVE-2026-90177
In the Linux kernel, the following vulnerability has been resolved: bpf: Check...
high 7.8 —— 2026-09-172026-10-21
CVE-2026-90172
In the Linux kernel, the following vulnerability has been resolved: smb: smbdir...
high 7.5 —— 2026-09-172026-10-19
CVE-2026-90161
In the Linux kernel, the following vulnerability has been resolved: erofs: fix...
high 7.1 —— 2026-09-172026-10-30
CVE-2026-90162
In the Linux kernel, the following vulnerability has been resolved: ksmbd: defe...
high 8.8 —— 2026-09-172026-10-30
CVE-2026-90153
In the Linux kernel, the following vulnerability has been resolved: ksmbd: boun...
high 8.1 —— 2026-09-172026-10-30
CVE-2026-90143
In the Linux kernel, the following vulnerability has been resolved: net: kcm: H...
high 7.8 —— 2026-09-172026-10-19
CVE-2026-90145
In the Linux kernel, the following vulnerability has been resolved: hinic3: Fix...
high 7.1 —— 2026-09-172026-10-19
CVE-2026-90146
In the Linux kernel, the following vulnerability has been resolved: bpf, xdp: m...
high 7.8 —— 2026-09-172026-10-30
CVE-2026-90149
In the Linux kernel, the following vulnerability has been resolved: NFSv4/flexf...
high 7.5 —— 2026-09-172026-10-30
CVE-2026-90137
In the Linux kernel, the following vulnerability has been resolved: platform/x8...
high 7.7 —— 2026-09-172026-10-19
CVE-2026-90141
In the Linux kernel, the following vulnerability has been resolved: ipvs: fix i...
high 7.3 —— 2026-09-172026-10-19
CVE-2026-90142
In the Linux kernel, the following vulnerability has been resolved: virtio_net:...
high 7.8 —— 2026-09-172026-10-21
CVE-2026-90131
In the Linux kernel, the following vulnerability has been resolved: ntfs: seria...
high 7.1 —— 2026-09-172026-10-19
CVE-2026-90132
In the Linux kernel, the following vulnerability has been resolved: ntfs: rejec...
high 7.1 —— 2026-09-172026-10-19
CVE-2026-90133
In the Linux kernel, the following vulnerability has been resolved: ntfs: Fix i...
high 7.8 —— 2026-09-172026-10-19
CVE-2026-90120
In the Linux kernel, the following vulnerability has been resolved: irqchip/gic...
high 8.4 —— 2026-09-172026-10-19
CVE-2026-90111
In the Linux kernel, the following vulnerability has been resolved: ip6mr: do n...
high 7.8 —— 2026-09-172026-10-30
CVE-2026-90118
In the Linux kernel, the following vulnerability has been resolved: ntfs: fix o...
high 7.8 —— 2026-09-172026-10-19
CVE-2026-90103
In the Linux kernel, the following vulnerability has been resolved: NFSv4.2: fi...
high 7.5 —— 2026-09-172026-10-19
CVE-2026-90102
In the Linux kernel, the following vulnerability has been resolved: NFSv4/pnfs:...
high 7.5 —— 2026-09-172026-10-19

Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.