September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-76901 CordysCRM is an open source AI-powered customer relationship management system t... |
medium | 5.8 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-77528 Autobahn Python is a WebSocket and WAMP implementation for Python that supports... |
medium | 5.3 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-61670 microsandbox is an easy, fast, local-first microVM runtime and library. |
medium | 6.5 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-85271 Open edX Platform enables the authoring and delivery of online learning at any s... |
medium | 6.1 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-61630 nginx ignition is a user interface for the nginx web server. |
medium | 4.2 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-59168 Dasel is a command-line tool and library for querying, modifying, and transformi... |
medium | 6.2 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-62866 Dasel is a command-line tool and library for querying, modifying, and transformi... |
medium | 6.2 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-62987 Fabio is an HTTP(S) and TCP router for deploying applications managed by consul. |
medium | 5.8 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-61612 CKAN MCP Server is a tool for querying CKAN open data portals. |
medium | 5.7 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-63329 Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. |
medium | 4.9 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-91164 Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. |
medium | 4.3 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-62247 Supabase Realtime provides Broadcast, Presence, and Postgres Changes via WebSock... |
medium | 6.5 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-58270 Sync-in Server is an open-source platform for file storage, sharing, collaborati... |
medium | 6.5 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-61743 Chartbrew is an open-source web application that can connect directly to databas... |
medium | 6.3 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-75517 Novu provides an API for sending notifications through multiple channels. |
medium | 6.5 | — | — | 2026-09-22 | 2026-09-24 |
| CVE-2026-77606 Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users... |
medium | 6.1 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-77608 Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users... |
medium | 6.1 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-77609 Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users... |
medium | 6.1 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-77610 Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users... |
medium | 6.1 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-77616 Semantic MediaWiki is a free, open-source extension to MediaWiki that lets users... |
medium | 6.1 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-54495 The OpenFeature Operator allows users to expose feature flags to applications. |
medium | 4.3 | — | — | 2026-09-17 | 2026-09-24 |
| CVE-2026-85272 Open edX Platform enables the authoring and delivery of online learning at any s... |
medium | 4.3 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-76802 Nuclei is a vulnerability scanner built on a simple YAML-based DSL. |
medium | 4.7 | — | — | 2026-09-22 | 2026-09-24 |
| CVE-2026-94588 In Proxmox pmg-api, an argument injection vulnerability exists in the package ch... |
medium | 4.4 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-88756 Pagekit CMS <= 1.0.18 allows an unauthenticated attacker to perform SQL injectio... |
medium | 5.3 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-88412 An integer overflow in the _BulkInsert_ReadProperty component (/bulk_insert.c) o... |
medium | 5.3 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-84448 libheif is a HEIF and AVIF file format decoder and encoder. |
medium | 4.0 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-84451 libheif is a HEIF and AVIF file format decoder and encoder. |
medium | 6.5 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-81182 SysReptor is a fully customizable pentest reporting platform. |
medium | 4.2 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-79304 CyberPanel 1.9.1 contains a path traversal vulnerability in the readFileContents... |
medium | 6.5 | — | — | 2026-09-23 | 2026-09-24 |
| CVE-2026-76899 CordysCRM is an open source AI-powered customer relationship management system t... |
medium | 5.7 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-71537 Paymenter is a free and open-source webshop solution for management of hosting s... |
medium | 6.5 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-69190 Graylog is a free and open log management platform. |
medium | 6.3 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-61822 pg_partman is a PostgreSQL extension that manages partitioned tables by time or... |
medium | 6.5 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-85720 The AsyncHttpClient (AHC) library allows Java applications to easily execute HTT... |
medium | 5.9 | — | — | 2026-09-17 | 2026-09-24 |
| CVE-2026-77281 Caddy is an extensible server platform that uses TLS by default. |
medium | 6.5 | — | — | 2026-09-17 | 2026-09-24 |
| CVE-2026-89027 miniOrange JWT Authentication for WP REST APIs plugin for WordPress before 4.8.0... |
medium | 6.5 | — | — | 2026-09-15 | 2026-09-24 |
| CVE-2026-92255 Netcore NR255-V version 1.5.130703 contains an out-of-bounds read vulnerability... |
medium | 5.4 | — | — | 2026-09-15 | 2026-09-24 |
| CVE-2026-92257 Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulner... |
medium | 5.4 | — | — | 2026-09-15 | 2026-09-24 |
| CVE-2026-92462 yshop-crm through 2.1.3 fails to enforce authorization checks on the CrmFlowCont... |
medium | 6.5 | — | — | 2026-09-16 | 2026-09-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.