September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-85608 Douyin_TikTok_Download_API through 4.1.2 contains a server-side request forgery... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85619 AppFlowy-Cloud 0.9.64 fails to verify that requested collab objects belong to th... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85687 surya 0.22.1 screenshot server contains an unauthenticated arbitrary file read v... |
high | 7.5 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-85694 LaVague 0.2.35 contains a remote code execution vulnerability in PythonFromMarkd... |
high | 8.1 | — | — | 2026-09-04 | 2026-09-10 |
| CVE-2026-87816 PasswordPusher before 2.11.1 contains a time-of-check-to-time-of-use race condit... |
high | 7.5 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-77974 After spoofing the device and obtaining one user confirmation, an attacker may b... |
high | 8.0 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-81640 An attacker could derive the camera's Wi-Fi password and connect to its wireless... |
high | 8.8 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-82563 An attacker could impersonate the camera and place themselves in a man-in-the-mi... |
high | 7.6 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-15913 In versions prior to 7.10.2 a path traversal vulnerability in the /attachRemoteF... |
high | 7.7 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-87803 An authorization bypass vulnerability exists in the Countly Server DBViewer due... |
high | 7.1 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-87961 ESP32-audioI2S versions 3.4.4 through 4.0.0 contain a heap-based out-of-bounds r... |
high | 7.1 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-87962 t-digest versions 3.1 through 3.3 contain a denial of service vulnerability in M... |
high | 7.5 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-84696 Phison PS3111-S11 controller firmware versions through SBFQT1.3 expose privilege... |
high | 8.2 | — | — | 2026-09-02 | 2026-09-10 |
| CVE-2026-85180 Ollama fails to validate redirect destinations when pulling tensor-layer models,... |
high | 7.5 | — | — | 2026-09-03 | 2026-09-10 |
| CVE-2026-73786 A vulnerability in the web-based management interface of CPPM could allow an una... |
high | 7.5 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-79908 Acrobat Reader is affected by an out-of-bounds write vulnerability that could re... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-81783 Subscriber Broken Authentication in MailMunch – Grow your Email List <= 3.2.5 ve... |
high | 7.1 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-81795 Unauthenticated Cross Site Scripting (XSS) in Page Visits Counter – Lite <= 1.2.... |
high | 7.1 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-81803 Subscriber Remote Code Execution (RCE) in RepairBuddy <= 4.1224 versions. |
high | 7.5 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-84821 Unauthenticated Broken Access Control in WP Fast Total Search <= 1.82.284 versio... |
high | 7.5 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-84195 Kyverno before 1.16.4 automatically attaches the admission controller's ServiceA... |
high | 7.7 | — | — | 2026-09-01 | 2026-09-10 |
| CVE-2026-84196 Kyverno before 1.18.0 contains a server-side request forgery vulnerability in ap... |
high | 7.7 | — | — | 2026-09-01 | 2026-09-10 |
| CVE-2026-79909 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-78464 Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module... |
high | 7.0 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-10 |
| CVE-2026-88867 WWBN AVideo, in versions up to and including commit c3edcc274c389816d434acadac07... |
high | 8.7 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-88868 AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a stored... |
high | 8.7 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-88872 AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a cross-... |
high | 7.1 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-88873 WWBN AVideo through commit c3edcc274c389816d434acadac07ee78eaf330c1 contains a c... |
high | 7.1 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-88863 capgo.app (npm package `capgo`) through version 12.207.1 does not compare the ca... |
high | 8.1 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-87822 t-digest versions 3.1 through 3.3 fail to validate centroid means during deseria... |
high | 7.5 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-87922 A security flaw has been discovered in Rizwan17 inventory-management-system up t... |
high | 7.3 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-85983 The Auth0 AD/LDAP Connector improperly processes a configuration value during se... |
high | 7.8 | — | — | 2026-09-08 | 2026-09-10 |
| CVE-2026-85545 There is an Vulnerability in some HikCentral Access Control versions. |
high | 7.1 | — | — | 2026-09-10 | 2026-09-10 |
| CVE-2026-83974 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-10 |
| CVE-2026-83979 Use after free in Windows Biometric Service allows an authorized attacker to ele... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-10 |
| CVE-2026-83952 Heap-based buffer overflow in Windows Resilient File System (ReFS) allows an aut... |
high | 7.8 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-10 |
| CVE-2026-83969 Heap-based buffer overflow in Windows Biometric Service allows an authorized att... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-10 |
| CVE-2026-6485 UEFI BIOS embedded Shell could be used to bypass Secure Boot via shell commands... |
high | 8.2 | — | — | 2026-09-09 | 2026-09-10 |
| CVE-2026-81973 Acrobat Reader is affected by a Use After Free vulnerability that could result i... |
high | 7.8 | — | Adobe / acrobat | 2026-09-08 | 2026-09-10 |
| CVE-2026-26212 Rara One Click Demo Import plugin for WordPress before 1.3.5 contains an arbitra... |
high | 7.2 | — | — | 2026-09-09 | 2026-09-10 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.