September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-89922 In the Linux kernel, the following vulnerability has been resolved:
KVM: s390:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89927 In the Linux kernel, the following vulnerability has been resolved:
KVM: x86: h... |
high | 7.1 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89910 In the Linux kernel, the following vulnerability has been resolved:
LoongArch:... |
high | 7.3 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89911 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
high | 7.9 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89912 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
high | 7.1 | — | — | 2026-09-16 | 2026-10-21 |
| CVE-2026-89913 In the Linux kernel, the following vulnerability has been resolved:
KVM: arm64:... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-21 |
| CVE-2026-89919 In the Linux kernel, the following vulnerability has been resolved:
KVM: s390:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89902 In the Linux kernel, the following vulnerability has been resolved:
LoongArch:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89903 In the Linux kernel, the following vulnerability has been resolved:
LoongArch:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89904 In the Linux kernel, the following vulnerability has been resolved:
LoongArch:... |
high | 8.4 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89906 In the Linux kernel, the following vulnerability has been resolved:
LoongArch:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-21 |
| CVE-2026-89907 In the Linux kernel, the following vulnerability has been resolved:
LoongArch:... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89908 In the Linux kernel, the following vulnerability has been resolved:
LoongArch:... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89893 In the Linux kernel, the following vulnerability has been resolved:
media: cx23... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89894 In the Linux kernel, the following vulnerability has been resolved:
media: cx23... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89897 In the Linux kernel, the following vulnerability has been resolved:
media: cec:... |
high | 7.5 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89898 In the Linux kernel, the following vulnerability has been resolved:
media: cec:... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89899 In the Linux kernel, the following vulnerability has been resolved:
media: cec:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89887 In the Linux kernel, the following vulnerability has been resolved:
media: i2c:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89888 In the Linux kernel, the following vulnerability has been resolved:
media: i2c:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89890 In the Linux kernel, the following vulnerability has been resolved:
media: go70... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89880 In the Linux kernel, the following vulnerability has been resolved:
media: rtl2... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89882 In the Linux kernel, the following vulnerability has been resolved:
media: rkvd... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89883 In the Linux kernel, the following vulnerability has been resolved:
media: rc:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89885 In the Linux kernel, the following vulnerability has been resolved:
media: plat... |
high | 8.4 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89870 In the Linux kernel, the following vulnerability has been resolved:
media: zora... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89873 In the Linux kernel, the following vulnerability has been resolved:
media: v4l2... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89875 In the Linux kernel, the following vulnerability has been resolved:
media: ti:... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89877 In the Linux kernel, the following vulnerability has been resolved:
media: saa7... |
high | 8.4 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89861 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
high | 8.1 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89863 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
high | 7.5 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89854 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89856 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
high | 8.4 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89860 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89848 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
high | 8.1 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89849 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89844 In the Linux kernel, the following vulnerability has been resolved:
scsi: qla2x... |
high | 8.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89836 In the Linux kernel, the following vulnerability has been resolved:
f2fs: fix f... |
high | 7.8 | — | — | 2026-09-16 | 2026-10-19 |
| CVE-2026-89838 In the Linux kernel, the following vulnerability has been resolved:
f2fs: limit... |
high | 7.1 | — | — | 2026-09-16 | 2026-10-21 |
| CVE-2026-89840 In the Linux kernel, the following vulnerability has been resolved:
f2fs: valid... |
high | 7.1 | — | — | 2026-09-16 | 2026-10-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.