September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-61770 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61771 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61772 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61773 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61774 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61775 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61776 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61777 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61778 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61779 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61750 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61751 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61752 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61753 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61754 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61755 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61756 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61757 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61758 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-61759 NVIDIA Megatron Bridge contains a vulnerability where an attacker could cause a... |
high | 7.8 | — | Nvidia / nemo megatron bridge | 2026-09-01 | 2026-09-02 |
| CVE-2026-84218 A flaw was found in Jolokia's JSR-160 proxy functionality where insufficient val... |
high | 8.1 | — | — | 2026-09-01 | 2026-09-02 |
| CVE-2026-59681 A OS command injection vulnerability in yast2-auth-client allows an attacker who... |
high | 8.8 | — | — | 2026-09-01 | 2026-09-02 |
| CVE-2026-59680 An OS command injection vulnerability was found in yast2-users. |
high | 8.0 | — | — | 2026-09-01 | 2026-09-02 |
| CVE-2026-25706 Improper neutralization of special elements used in an OS command in yast2-samba... |
high | 7.5 | — | — | 2026-09-01 | 2026-09-02 |
| CVE-2026-18630 Improper neutralization of special elements used in an SQL command ('SQL injecti... |
high | 8.8 | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-18771 Missing authentication for critical function vulnerability in TMT Machine Indust... |
high | 7.5 | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-18780 Cross-Site request forgery (CSRF) vulnerability in TMT Machine Industry and Trad... |
high | 7.1 | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-51766 Incorrect access control in the setDevReboot function of TOTOLINK T6 4.1.5cu.748... |
high | 7.5 | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-19573 The Affiliate Super Assistent plugin for WordPress is vulnerable to Stored Cross... |
high | 7.2 | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-19796 The Listdom: AI-powered Business Directory with Classifieds Ads Listings plugin... |
high | 7.2 | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-19952 The Frontend Admin by DynamiApps plugin for WordPress is vulnerable to arbitrary... |
high | 7.5 | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-75921 The Master Addons for Elementor – Elementor Addons, Widgets, Mega Menu Builder,... |
high | 7.2 | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-19914 The Welcart e-Commerce plugin for WordPress is vulnerable to Stored Cross-Site S... |
high | 7.2 | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-84059 A flaw has been found in ICP DAS UA-2200 and UA-5200 up to 20260704. |
high | 7.4 | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-19513 The Gravity Forms plugin for WordPress is vulnerable to Arbitrary File Upload in... |
high | 8.1 | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-84111 A flaw has been found in Chanjet CRM up to 20260707. |
high | 7.3 | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-84115 A vulnerability was found in Cleo Harmony up to 5.8.1.10. |
high | 8.3 | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-10195 The FS-Poster plugin for WordPress is vulnerable to Remote Code Execution in ver... |
high | 8.8 | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-101058 python-utcp (pip package utcp-http) before 1.1.12 does not verify whether tool U... |
medium | 6.9 | — | — | 2026-09-27 | 2026-09-30 |
| CVE-2026-101088 Nezha is a server and website monitoring tool. |
medium | 5.3 | — | — | 2026-09-27 | 2026-09-30 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.