September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-69345 Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to di... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69303 Out-of-bounds read in Push Message Routing Service allows an authorized attacker... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69308 Out-of-bounds read in Microsoft Standard XPS allows an authorized attacker to di... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-69317 Out-of-bounds read in Remote Desktop Client allows an authorized attacker to dis... |
medium | 5.7 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-30 |
| CVE-2026-91204 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
medium | 6.1 | — | — | 2026-09-28 | 2026-09-30 |
| CVE-2026-91206 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
medium | 6.1 | — | — | 2026-09-28 | 2026-09-30 |
| CVE-2026-82546 Improper Neutralization of Input During Web Page Generation ('Cross-site Scripti... |
medium | 6.1 | — | — | 2026-09-28 | 2026-09-30 |
| CVE-2026-100312 A security flaw has been discovered in mathurvishal CloudClassroom-PHP-Project u... |
medium | 6.3 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-63431 Horilla is an HR and CRM software. |
medium | 6.5 | — | — | 2026-09-25 | 2026-09-30 |
| CVE-2026-100577 OpenClaw versions before 2026.8.1 fail to validate video asset URLs returned by... |
medium | 6.3 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-100581 OpenClaw for iOS before 2026.8.11 stores Gateway credentials as cleartext JSON i... |
medium | 5.5 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-100593 OpenClaw (npm package `openclaw`) before 2026.7.1 does not enforce the documente... |
medium | 5.4 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-100556 OpenClaw (npm package openclaw) versions >= 2026.5.2 and < 2026.8.1 contain an i... |
medium | 6.3 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-100564 OpenClaw versions before 2026.8.1 fail to neutralize spreadsheet formula charact... |
medium | 5.4 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-100569 OpenClaw is an npm-distributed application. |
medium | 5.5 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-100536 OpenClaw versions before 2026.8.1 fail to validate all source fields in structur... |
medium | 6.5 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-100548 OpenClaw (npm package 'openclaw') versions >= 2026.3.28 and < 2026.8.1 contain a... |
medium | 5.3 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-100388 RustDesk versions before 1.5.0 fail to properly validate file transfer permissio... |
medium | 5.4 | — | — | 2026-09-25 | 2026-09-30 |
| CVE-2026-100524 Cotonti through 1.0.0 contains a cross-site request forgery vulnerability in the... |
medium | 5.4 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-100528 OpenClaw (npm package 'openclaw') before 2026.8.1 could send third-party provide... |
medium | 5.4 | — | — | 2026-09-26 | 2026-09-30 |
| CVE-2026-100303 TDuck survey form through 6.0 lacks authorization checks on FormThemeController... |
medium | 5.4 | — | — | 2026-09-25 | 2026-09-30 |
| CVE-2026-88884 Renovate is a dependency update automation tool. |
medium | 5.8 | — | — | 2026-09-10 | 2026-09-29 |
| CVE-2026-100295 In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an internal debug interface... |
medium | 6.3 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-100297 In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, an unauthenticated network c... |
medium | 5.3 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-100299 In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the device includes a legacy... |
medium | 6.8 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102830 JupyterLab is an extensible environment for interactive and reproducible computi... |
medium | 6.8 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-19444 A path traversal vulnerability was discovered in the Kubernetes kubectl client's... |
medium | 6.5 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-76720 A vulnerability in HPE OneView can be remotely exploited to cause a URL redirect... |
medium | 4.3 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-8067 An improper authorization vulnerability in the end-of-life versions of RTU500’s... |
medium | 6.5 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102005 Wind River VxWorks 7 24.03 through 26.03, a memory leak occurs under specific, n... |
medium | 5.5 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-100602 ClawHub (openclaw/clawhub application/backend) contains a missing authorization... |
medium | 6.5 | — | — | 2026-09-26 | 2026-09-29 |
| CVE-2026-100603 ClawHub (openclaw/clawhub) application/backend contains a flaw in the skill repo... |
medium | 5.4 | — | — | 2026-09-26 | 2026-09-29 |
| CVE-2026-102806 OpenClaw before 2026.9.5 contains an incorrect authorization vulnerability in th... |
medium | 6.3 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102807 OpenClaw before 2026.9.4 contains an incorrect authorization vulnerability in th... |
medium | 5.3 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-94287 A denial of service via unsigned underflow in libXpm's write path in libXpm befo... |
medium | 5.5 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-102633 libexpat versions 2.7.2 through 2.8.5 contain an integer overflow vulnerability... |
medium | 5.9 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-96279 A malicious OCI registry can hardlink arbitrary host files into the extraction d... |
medium | 6.5 | — | — | 2026-09-27 | 2026-09-29 |
| CVE-2026-97029 Flatpak's process ID namespace separation does not prevent a sandboxed app's kil... |
medium | 5.7 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102474 A flaw was found in dash. |
medium | 4.0 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102623 A flaw was found in KubeVirt. |
medium | 6.5 | — | — | 2026-09-29 | 2026-09-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.