September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-28613 In initAppLinkTypeAndIntent of ChannelImpl.java, there is a possible launch an a... |
high | 7.3 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28612 In resolveActivity of ActivityStarter.java, there is a possible way to perform I... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-90809 A vulnerability was identified in HKUDS nanobot up to 0.2.1. |
high | 7.3 | — | — | 2026-09-14 | 2026-09-15 |
| CVE-2026-90707 A security flaw has been discovered in Open5GS up to 2.7.x. |
high | 8.3 | — | — | 2026-09-14 | 2026-09-15 |
| CVE-2026-28611 In multiple functions of NfcService.java, there is a possible silent payment ses... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28609 In read of MatroskaExtractor.cpp, there is a possible out-of-bounds write due to... |
high | 8.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28662 In p2p_process_prov_disc_bootstrap_req of p2p_pd.c, there is a possible out of b... |
high | 8.0 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28658 In findMetaAuthUid of AccountsDb.java, there is a possible frp bypass due to a l... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28657 In onActivityResult of AppWidgetConfigActivityProxy.java, there is a possible un... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28656 In multiple functions of DeviceAdminAdd.java, there is a possible way to an over... |
high | 7.3 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28655 In multiple functions of RemoteViews.java, there is a possible background activi... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28650 In setHiddenWhileSuspended of WindowState.java, there is a possible overlay bypa... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28644 In startNextMatchingActivity of ActivityTaskManagerService.java, there is a poss... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-85014 undici's experimental WebSocketStream client crashes the whole Node.js process w... |
high | 7.5 | — | Nodejs / undici | 2026-09-04 | 2026-09-15 |
| CVE-2026-28642 In executeRequest of ActivityStarter.java, there is a possible background activi... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28639 In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write d... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28626 In onCreate of SetupPassthroughActivity.java, there is a possible way to launch... |
high | 7.3 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28624 In multiple locations, there is a possible read/write access to files without th... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28653 In multiple functions of rw_t3t.cc, there is a possible out of bounds write due... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28636 In setupLayout of PickActivity.java, there is a possible bypass of the "Install... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28634 In handleUssdRequest of PhoneInterfaceManager.java, there is a possible way to s... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-28631 In buildMiniResolver of IntentForwarderActivity.java, there is a possible consen... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-15 |
| CVE-2026-76191 Animate is affected by an Improper Control of Generation of Code ('Code Injectio... |
high | 8.2 | — | Adobe / animate | 2026-09-08 | 2026-09-15 |
| CVE-2026-81381 Insufficiently protected credentials in GitHub Copilot and Visual Studio Code al... |
high | 7.5 | — | Microsoft / visual studio code | 2026-09-08 | 2026-09-15 |
| CVE-2026-71337 Stack-based buffer overflow in Windows Storage Management Provider allows an aut... |
high | 7.8 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-15 |
| CVE-2026-71340 Use after free in Windows File History Service allows an authorized attacker to... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-15 |
| CVE-2026-69846 Integer overflow or wraparound in Windows Secure Kernel Mode allows an authorize... |
high | 8.2 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-15 |
| CVE-2026-69875 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elev... |
high | 8.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-15 |
| CVE-2026-69906 Heap-based buffer overflow in Windows Secure Kernel Mode allows an authorized at... |
high | 8.2 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-15 |
| CVE-2026-82208 With the wolfSSL backend, when CA caching is enabled and an
`CURLOPT_SSL_CTX_FUN... |
high | 7.5 | — | Haxx / curl | 2026-09-06 | 2026-09-15 |
| CVE-2026-82209 When libpsl support is enabled, libcurl fails to enforce the Public Suffix
List... |
high | 8.2 | — | Haxx / curl | 2026-09-06 | 2026-09-15 |
| CVE-2026-80229 When performing transfers via libcurl’s multi interface, pooled TLS
connections... |
high | 7.5 | — | Haxx / curl | 2026-09-06 | 2026-09-15 |
| CVE-2026-80230 When `CURLOPT_PINNEDPUBLICKEY` is configured alongside options that disable
stan... |
high | 7.5 | — | Haxx / curl | 2026-09-06 | 2026-09-15 |
| CVE-2026-80231 A flaw in libcurl makes it wrongly reuse an existing HTTPS connection setup
for... |
high | 7.5 | — | Haxx / curl | 2026-09-06 | 2026-09-15 |
| CVE-2026-80255 A `Set-Cookie:` header using tab (horizontal tab, ASCII code 9) instead of
space... |
high | 7.5 | — | Haxx / curl | 2026-09-06 | 2026-09-15 |
| CVE-2026-13608 A flaw in the libcurl SASL negotiation for LDAP authentication allows an
incompl... |
high | 7.4 | — | Haxx / curl | 2026-09-06 | 2026-09-15 |
| CVE-2026-63427 An authentication bypass vulnerability was discovered in Lenovo Software Fix tha... |
high | 7.8 | — | — | 2026-09-10 | 2026-09-15 |
| CVE-2026-87608 Improper certificate validation in FedCM in Google Chrome prior to 153.0.8010.36... |
high | 7.5 | — | Google / chrome | 2026-09-09 | 2026-09-14 |
| CVE-2026-77705 The Booking for Appointments and Events Calendar WordPress plugin before 2.4.10... |
high | 7.2 | — | — | 2026-09-12 | 2026-09-14 |
| CVE-2026-77752 The Temporary Login Without Password WordPress plugin before 1.9.9 does not veri... |
high | 7.2 | — | — | 2026-09-12 | 2026-09-14 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.