September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-90009 In the Linux kernel, the following vulnerability has been resolved:
scsi: bsg:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-90010 In the Linux kernel, the following vulnerability has been resolved:
scsi: bsg:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-90013 In the Linux kernel, the following vulnerability has been resolved:
tracing: Ta... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-21 |
| CVE-2026-90002 In the Linux kernel, the following vulnerability has been resolved:
ftrace: Tak... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-21 |
| CVE-2026-90003 In the Linux kernel, the following vulnerability has been resolved:
futex: Prev... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89998 In the Linux kernel, the following vulnerability has been resolved:
dm: fix rac... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89999 In the Linux kernel, the following vulnerability has been resolved:
HID: wacom:... |
high | 8.1 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-90000 In the Linux kernel, the following vulnerability has been resolved:
HID: rmi: f... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-90001 In the Linux kernel, the following vulnerability has been resolved:
HID: bpf: s... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89992 In the Linux kernel, the following vulnerability has been resolved:
cpuidle: dt... |
high | 8.4 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89994 In the Linux kernel, the following vulnerability has been resolved:
dmaengine:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89995 In the Linux kernel, the following vulnerability has been resolved:
dma-direct:... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-21 |
| CVE-2026-89997 In the Linux kernel, the following vulnerability has been resolved:
dm: fix res... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89985 In the Linux kernel, the following vulnerability has been resolved:
memcg: keep... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89986 In the Linux kernel, the following vulnerability has been resolved:
mm/mempolic... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89988 In the Linux kernel, the following vulnerability has been resolved:
kprobes: Pr... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89973 In the Linux kernel, the following vulnerability has been resolved:
nvme-tcp: c... |
high | 8.2 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89974 In the Linux kernel, the following vulnerability has been resolved:
nvme-fc: fi... |
high | 7.5 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89979 In the Linux kernel, the following vulnerability has been resolved:
ALSA: pcm:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89980 In the Linux kernel, the following vulnerability has been resolved:
ALSA: harmo... |
high | 8.4 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89965 In the Linux kernel, the following vulnerability has been resolved:
nvdimm/btt:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89967 In the Linux kernel, the following vulnerability has been resolved:
mm/migrate_... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89968 In the Linux kernel, the following vulnerability has been resolved:
nvmet-tcp:... |
high | 7.5 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89971 In the Linux kernel, the following vulnerability has been resolved:
nvme: skip... |
high | 7.5 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89957 In the Linux kernel, the following vulnerability has been resolved:
s390/vfio-a... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89959 In the Linux kernel, the following vulnerability has been resolved:
s390/vfio-a... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89960 In the Linux kernel, the following vulnerability has been resolved:
s390/vfio-a... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89961 In the Linux kernel, the following vulnerability has been resolved:
powerpc/mm:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89951 In the Linux kernel, the following vulnerability has been resolved:
batman-adv:... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89954 In the Linux kernel, the following vulnerability has been resolved:
mtd: afs: v... |
high | 8.0 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89947 In the Linux kernel, the following vulnerability has been resolved:
clk: meson:... |
high | 8.0 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89938 In the Linux kernel, the following vulnerability has been resolved:
iio: chemic... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89940 In the Linux kernel, the following vulnerability has been resolved:
iio: buffer... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89941 In the Linux kernel, the following vulnerability has been resolved:
iio: buffer... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89942 In the Linux kernel, the following vulnerability has been resolved:
iio: buffer... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89943 In the Linux kernel, the following vulnerability has been resolved:
ASoC: loong... |
high | 8.4 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89928 In the Linux kernel, the following vulnerability has been resolved:
KVM: x86/mm... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89929 In the Linux kernel, the following vulnerability has been resolved:
KVM: nVM: E... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-21 |
| CVE-2026-89932 In the Linux kernel, the following vulnerability has been resolved:
KVM: nVMX:... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89920 In the Linux kernel, the following vulnerability has been resolved:
KVM: s390:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.