September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-20342 A vulnerability in a specific file download API of Cisco Secure FMC Software cou... |
high | 7.7 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-20343 A vulnerability in a critical API for Cisco Secure FMC Software could allow an u... |
high | 7.5 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-20344 A vulnerability in the web-based management interface of Cisco Secure FMC Softwa... |
high | 8.8 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-20323 A vulnerability in the sftunnel inter-device communication protocol of Cisco Sec... |
high | 8.3 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-20333 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-20334 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.4 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-20295 A vulnerability in the sftunnel inter-device communication protocol of Cisco Sec... |
high | 8.6 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-20300 A vulnerability in Cisco ISE could allow an authenticated, remote attacker to co... |
high | 7.1 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-20247 A vulnerability in Cisco ISE could allow an unauthenticated, remote attacker to... |
high | 7.5 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-20249 A vulnerability in the certification authentication feature of Internet Key Exch... |
high | 8.6 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-20250 A vulnerability in Datagram TLS (DTLS) message handling of Cisco Secure Firewall... |
high | 8.6 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-20135 A vulnerability in the TLS 1.3 implementation in Cisco Secure Firewall Threat De... |
high | 8.6 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-20154 A vulnerability in the system rate-limiting process for syslog message 419002 of... |
high | 8.6 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-20222 A vulnerability in the EIGRP implementation in Cisco Secure Firewall Adaptive Se... |
high | 7.4 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2025-56565 DD-WRT firmware, as deployed on TP-Link TL-WR740N v1 through v4 hardware, stores... |
high | 7.6 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-87976 Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when... |
high | 8.1 | — | Apache / nifi | 2026-09-16 | 2026-09-21 |
| CVE-2026-86865 Tanium addressed a SQL injection vulnerability in Asset. |
high | 7.2 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-87024 Tanium addressed a SQL injection vulnerability in Asset. |
high | 7.2 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-87105 Tanium addressed a SQL injection vulnerability in Threat Response. |
high | 8.8 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-86089 Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Proce... |
high | 7.1 | — | Apache / nifi | 2026-09-16 | 2026-09-21 |
| CVE-2026-86831 Improper validation of pod identifier uniqueness in aws-network-policy-agent in... |
high | 8.7 | — | — | 2026-09-16 | 2026-10-20 |
| CVE-2026-76646 A remote attacker could cause excessive resource consumption by supplying specia... |
high | 7.5 | — | — | 2026-09-16 | 2026-09-17 |
| CVE-2026-70469 Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the appli... |
high | 7.5 | — | Apache / nifi | 2026-09-16 | 2026-09-21 |
| CVE-2026-20361 As part of Cisco's ongoing commitment to proactive security and product quality,... |
high | 8.8 | — | — | 2026-09-16 | 2026-09-18 |
| CVE-2026-92729 SigNoz versions 0.88.0 through 0.141.0 fail to apply authorization wrappers to t... |
high | 8.2 | — | — | 2026-09-16 | 2026-09-21 |
| CVE-2026-86003 CoreDNS is a DNS server written in Go. |
high | 7.5 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-86043 Skipper is an HTTP router and reverse proxy for service composition. |
high | 7.5 | — | — | 2026-09-16 | 2026-09-16 |
| CVE-2026-81875 HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare i... |
high | 7.5 | — | — | 2026-09-16 | 2026-09-30 |
| CVE-2026-81876 HAPI FHIR is a complete implementation of the HL7 FHIR standard for healthcare i... |
high | 7.5 | — | — | 2026-09-16 | 2026-09-30 |
| CVE-2026-82399 CoreDNS is a DNS server written in Go. |
high | 7.5 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-79298 An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fix... |
high | 8.4 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-63126 Wire provides gRPC and protocol buffers for Android, Kotlin, Swift, and Java. |
high | 7.5 | — | — | 2026-09-16 | 2026-09-30 |
| CVE-2026-63325 Redocly CLI makes OpenAPI validation, linting, and documentation workflows easie... |
high | 7.8 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-46352 Suricata is a network Intrusion Detection System, Intrusion Prevention System an... |
high | 7.5 | — | Oisf / suricata | 2026-09-16 | 2026-09-28 |
| CVE-2026-38999 A Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_sc... |
high | 7.5 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-92604 Scirius through 3.8.0 contains an arbitrary file write vulnerability in the PCAP... |
high | 8.1 | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-92718 Nuclei versions before 3.11.1 cache template signature verification based only o... |
high | 7.3 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-92719 Quickwit through 0.9.0 fails to validate the host and scheme of the queue_url pa... |
high | 7.5 | — | — | 2026-09-16 | 2026-09-24 |
| CVE-2026-92406 A vulnerability was detected in SourceCodester Inventory and Monitoring System 1... |
high | 7.3 | — | — | 2026-09-16 | 2026-09-16 |
| CVE-2026-85387 Concrete CMS before 9.5.4 re-authorized OAuth REST API requests from the bearer... |
high | 7.1 | — | Concretecms / concrete cms | 2026-09-16 | 2026-09-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.