September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-88904 The PuppyFW WordPress plugin through 0.4.4 does not have proper authorisation on... |
high | 8.8 | — | — | 2026-09-17 | 2026-09-18 |
| CVE-2026-91014 The Realtyna Organic IDX plugin + WPL Real Estate WordPress plugin before 5.4.2... |
high | 7.1 | — | — | 2026-09-17 | 2026-09-18 |
| CVE-2026-87786 The Dewa Kirim WordPress plugin through 1.0.0 does not escape delivery coordinat... |
high | 8.8 | — | — | 2026-09-17 | 2026-09-18 |
| CVE-2026-88792 The Dictionary WordPress plugin through 1.0 does not have authorisation, sanitis... |
high | 8.8 | — | — | 2026-09-17 | 2026-09-18 |
| CVE-2025-15697 The Dictionary WordPress plugin through 1.0 does not escape user input before re... |
high | 7.1 | — | — | 2026-09-17 | 2026-10-14 |
| CVE-2026-85128 The Choose User Role at Registration WordPress plugin before 1.3.3 does not vali... |
high | 7.5 | — | — | 2026-09-17 | 2026-09-18 |
| CVE-2026-85130 The WPLP Cookie Consent WordPress plugin before 4.4.4 does not escape a value su... |
high | 8.8 | — | — | 2026-09-17 | 2026-09-18 |
| CVE-2026-87935 The Paid Downloads plugin for WordPress is vulnerable to Arbitrary File Upload i... |
high | 8.1 | — | — | 2026-09-17 | 2026-09-19 |
| CVE-2026-25281 Transient DOS when processing large or numerous request buffers without sufficie... |
high | 7.4 | — | Qualcomm / cologne firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-25282 Transient DOS when processing unverified data from a neighboring system causes o... |
high | 7.9 | — | Qualcomm / cologne firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-25283 Memory Corruption when copying unverified data from an external source exceeds t... |
high | 8.8 | — | Qualcomm / cologne firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-25284 Information Disclosure when a pointer is reused after being deallocated. |
high | 7.3 | — | Qualcomm / cologne firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-25290 Memory Corruption when validating large data buffers from external sources using... |
high | 7.8 | — | Qualcomm / cologne firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-25294 Transient DOS while parsing frame during channel usage. |
high | 7.4 | — | Qualcomm / cologne firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-24075 Memory Corruption when multiple threads issue concurrent IOCTL requests to the d... |
high | 7.0 | — | Qualcomm / wsa8845h firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-24081 Transient DOS when processing a channel map with insufficient used channels and... |
high | 7.4 | — | Qualcomm / ar8035 firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-25261 Memory corruption while processing rear sensor IOCTL calls. |
high | 7.8 | — | Qualcomm / cologne firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-25275 Transient DOS when processing authentication frames with invalid FILS informatio... |
high | 7.5 | — | Qualcomm / q-7790 firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-25278 Memory Corruption when processing I2C transfer requests due to a race condition... |
high | 7.0 | — | Qualcomm / lemans au lgit firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-25280 Memory corruption when processing escape handling flow with insufficient user bu... |
high | 7.8 | — | Qualcomm / wsa8845h firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-24073 Memory corruption when processing decode statistics due to insufficient validati... |
high | 7.8 | — | Qualcomm / cologne firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-24074 Memory Corruption when processing data with large offset and length values excee... |
high | 7.8 | — | Qualcomm / iqx5121 firmware | 2026-09-17 | 2026-09-22 |
| CVE-2025-59607 Memory Corruption when copying large input data exceeds normal allocation limits... |
high | 7.8 | — | Qualcomm / cologne firmware | 2026-09-17 | 2026-10-14 |
| CVE-2026-92838 A DLL hijacking
vulnerability exists in the GeoVision GV-Remote E-Map desktop
ap... |
high | 7.8 | — | — | 2026-09-17 | 2026-09-18 |
| CVE-2026-81546 The Affinity by Canva application before 3.3.0 (September 2026 release) did not... |
high | 7.7 | — | — | 2026-09-17 | 2026-09-18 |
| CVE-2026-65388 A remote attacker who controls a container registry may be able to direct a clie... |
high | 7.5 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-61596 djust provides Phoenix LiveView-style reactive server-side rendering for Django... |
high | 7.1 | — | — | 2026-09-16 | 2026-09-30 |
| CVE-2026-92592 Craft CMS 4.8.0 through 4.18.5 and 5.0.0 through 5.10.12 sign an authenticated u... |
high | 8.8 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92593 Craft CMS versions 5.10.0 through 5.10.12 contain an incomplete fix for CVE-2026... |
high | 8.8 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92594 Craft CMS 5.0.0-RC1 through versions before 5.11.0 incorrectly authorize the Gra... |
high | 7.5 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92596 Nodemailer before 9.1.0 contains a quadratic time complexity vulnerability in th... |
high | 7.5 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92599 joi (npm package `joi`, hapi.js) versions >=17.2.0 <17.13.7 and >=18.0.0 <18.2.6... |
high | 7.5 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92578 WWBN AVideo through 29.0 contains an authentication bypass vulnerability where t... |
high | 8.1 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92580 In AVideo through 29.0, the CloneSite plugin is vulnerable to stored OS command... |
high | 8.8 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92582 AVideo (WWBN/AVideo) through 29.0 (commit e01e41ecc) is vulnerable to cross-site... |
high | 7.1 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-85469 A flaw was found in quay-builder-qemu. |
high | 8.0 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-92576 HKUDS nanobot before 0.3.0 contains a server-side request forgery vulnerability... |
high | 8.6 | — | — | 2026-09-16 | 2026-09-17 |
| CVE-2026-92577 In AVideo through 29.0, the API get_api_video endpoint contains a broken access... |
high | 7.5 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-61591 djust provides Phoenix LiveView-style reactive server-side rendering for Django... |
high | 8.1 | — | — | 2026-09-16 | 2026-09-30 |
| CVE-2026-61592 djust provides Phoenix LiveView-style reactive server-side rendering for Django... |
high | 7.4 | — | — | 2026-09-16 | 2026-09-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.