September 2026 CVE archive
Records published in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time.
Total records
15,074
Critical
1,387
High
5,790
Medium
4,828
Low
527
Severity not reported
2,542
In CISA KEV
32
Most affected vendors (by CPE data where available): microsoft (995), google (652), oracle (309), apple (245), ibm (229), adobe (213), mozilla (191), dell (185), arubanetworks (100), linux (88)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-91711 Out of bounds write in ServiceWorker in Google Chrome prior to 153.0.8010.47 all... |
high | 8.8 | — | Google / chrome | 2026-09-15 | 2026-09-17 |
| CVE-2026-68070 The affected products are missing authentication for a critical function, which... |
high | 8.8 | — | — | 2026-09-15 | 2026-09-18 |
| CVE-2026-68950 The affected products use hard-coded credentials, which could allow an attacker... |
high | 8.8 | — | — | 2026-09-15 | 2026-09-18 |
| CVE-2026-61554 emp3r0r is a C2 designed by Linux users for Linux environments. |
high | 7.5 | — | — | 2026-09-15 | 2026-09-30 |
| CVE-2026-54544 Fireshare facilitates self-hosted media and link sharing. |
high | 7.2 | — | — | 2026-09-15 | 2026-09-30 |
| CVE-2026-92239 A maliciously constructed IMAP line could cause an out-of-bounds buffer read. |
high | 8.1 | — | Mozilla / thunderbird | 2026-09-15 | 2026-09-24 |
| CVE-2026-88975 Http4s is a Scala interface for HTTP services. |
high | 7.5 | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-87286 Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compil... |
high | 8.1 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-87287 Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compil... |
high | 8.1 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-87288 Vulnerability in the Oracle GraalVM product of Oracle Java SE (component: Compil... |
high | 8.1 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-87289 Vulnerability in the Helidon product of Oracle Fusion Middleware (component: hel... |
high | 7.5 | — | Oracle / helidon | 2026-09-15 | 2026-09-25 |
| CVE-2026-87273 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 8.6 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87276 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.5 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87277 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.5 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87264 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.7 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-87265 Vulnerability in the Oracle Purchasing product of Oracle E-Business Suite (compo... |
high | 8.1 | — | Oracle / purchasing | 2026-09-15 | 2026-09-22 |
| CVE-2026-87266 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
high | 8.2 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-22 |
| CVE-2026-87268 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.8 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87269 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.8 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87270 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.8 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87271 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.8 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87272 Vulnerability in the Oracle VM VirtualBox product of Oracle Virtualization (comp... |
high | 7.8 | — | Oracle / vm virtualbox | 2026-09-15 | 2026-09-23 |
| CVE-2026-87254 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
high | 7.5 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-23 |
| CVE-2026-87256 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
high | 7.7 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-23 |
| CVE-2026-87257 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
high | 7.7 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-23 |
| CVE-2026-87258 Vulnerability in the Oracle Agile PLM product of Oracle Supply Chain (component:... |
high | 7.6 | — | Oracle / agile product lifecycle management | 2026-09-15 | 2026-09-23 |
| CVE-2026-87259 Vulnerability in the Oracle Agile Engineering Data Management product of Oracle... |
high | 8.4 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-87260 Vulnerability in the Oracle Agile Engineering Data Management product of Oracle... |
high | 7.3 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-87261 Vulnerability in the Oracle Agile Engineering Data Management product of Oracle... |
high | 7.3 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-87262 Vulnerability in the Oracle Agile Engineering Data Management product of Oracle... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-17 |
| CVE-2026-87243 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 8.0 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-21 |
| CVE-2026-87244 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 7.2 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-21 |
| CVE-2026-87245 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 8.0 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-21 |
| CVE-2026-87246 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 7.2 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-21 |
| CVE-2026-87247 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 7.5 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-21 |
| CVE-2026-87249 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 7.1 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-21 |
| CVE-2026-87250 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 7.6 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-21 |
| CVE-2026-87235 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 7.4 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-21 |
| CVE-2026-87236 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 7.1 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-21 |
| CVE-2026-87237 Vulnerability in the Oracle Hyperion Financial Management product of Oracle Hype... |
high | 7.5 | — | Oracle / hyperion financial management | 2026-09-15 | 2026-09-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.