September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-79315 A reflected cross-site scripting vulnerability exists in x-ui 0.3.2. |
medium | 4.7 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-79312 webpy web.py 0.76 is vulnerable to Session Fixation. |
medium | 6.8 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2020-15875 An issue was discovered in LibreNMS 1.65. |
medium | 5.0 | — | — | 2026-09-13 | 2026-09-22 |
| CVE-2022-42917 In FRRouting FRR before 8.5, the service user (usually frr) can escalate its pri... |
medium | 6.7 | — | — | 2026-09-14 | 2026-09-22 |
| CVE-2026-23787 An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 13... |
medium | 4.2 | — | — | 2026-09-14 | 2026-09-22 |
| CVE-2026-23788 An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, an... |
medium | 4.2 | — | — | 2026-09-14 | 2026-09-22 |
| CVE-2026-23790 An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 13... |
medium | 4.2 | — | — | 2026-09-14 | 2026-09-22 |
| CVE-2026-23791 An issue was discovered in DPU in Samsung Mobile Processor Exynos 1280, 2200, 13... |
medium | 4.2 | — | — | 2026-09-14 | 2026-09-22 |
| CVE-2026-23792 An issue was discovered in NR RRC in Samsung Mobile Processor and Modem Exynos 1... |
medium | 4.0 | — | — | 2026-09-14 | 2026-09-22 |
| CVE-2026-33957 An issue was discovered in CustOS Driver in Samsung Mobile Processor Exynos 1580... |
medium | 4.2 | — | — | 2026-09-14 | 2026-09-22 |
| CVE-2026-33964 An issue was discovered in camera in Samsung Mobile Processor Exynos 1580 and 25... |
medium | 6.4 | — | — | 2026-09-14 | 2026-09-22 |
| CVE-2023-29377 An issue was discovered in Softing OPC UA C++ SDK through 6.20 and Softing Secur... |
medium | 6.6 | — | — | 2026-09-14 | 2026-09-22 |
| CVE-2026-25826 An issue was discovered in Keyfactor SignServer before 7.6.0. |
medium | 4.9 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-94185 nvm resolves a requested version or alias by treating it as a filename under $NV... |
medium | 5.5 | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-69771 Improper link resolution before file access ('link following') in Windows Contai... |
medium | 4.7 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-22 |
| CVE-2026-73965 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
medium | 6.8 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-22 |
| CVE-2026-69792 Concurrent execution using shared resource with improper synchronization ('race... |
medium | 4.7 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69794 Buffer over-read in Windows Encrypting File System (EFS) allows an authorized at... |
medium | 5.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-22 |
| CVE-2026-86552 SmartLife app dynamically generates brand‑new SmartLife application authenticati... |
medium | 5.4 | — | — | 2026-09-20 | 2026-09-22 |
| CVE-2026-86554 SmartLife app dynamically generates brand‑new SmartLife application authenticati... |
medium | 4.3 | — | — | 2026-09-20 | 2026-09-22 |
| CVE-2026-86555 The ZTE SmartLife application has a hardcoded key. |
medium | 6.2 | — | — | 2026-09-20 | 2026-09-22 |
| CVE-2026-92400 The Payment Gateway for PayPal on WooCommerce WordPress plugin before 9.2.1 does... |
medium | 5.3 | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-88788 The Text Styler WordPress plugin through 1.1.1 does not sanitise and escape user... |
medium | 6.8 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-17054 The Espressif ESP-hosted Wi-Fi driver (drivers/wifi/esp_hosted/) parses frames r... |
medium | 5.3 | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-91203 A flaw was found in cockpit-files. |
medium | 6.0 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-93999 A flaw was found in the OIDC protocol implementation of Keycloak, an open-source... |
medium | 4.2 | — | — | 2026-09-19 | 2026-09-22 |
| CVE-2026-94000 A flaw was found in the Admin REST API of Keycloak, an open-source identity and... |
medium | 6.6 | — | — | 2026-09-19 | 2026-09-22 |
| CVE-2026-94001 A flaw was found in the Admin REST API of Keycloak, an open-source identity and... |
medium | 6.5 | — | — | 2026-09-19 | 2026-09-22 |
| CVE-2026-94213 A flaw was found in the Authorization Services component of Keycloak, an open-so... |
medium | 4.9 | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-94215 A flaw was found in the Admin REST API of Keycloak, an open-source identity and... |
medium | 5.5 | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-92382 An out-of-bounds write flaw was found in usbredir. |
medium | 4.1 | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-76974 SAP Fiori Launchpad does not sufficiently validate certain user-controlled input... |
medium | 5.3 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-95503 A flaw was found in the Kerberos federation provider of Keycloak, an open-source... |
medium | 6.8 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-95623 The Tauri HTTP plugin validates requested URLs against the application's configu... |
medium | 5.6 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-11539 IBM WebSphere Application Server 9.0 and 8.5 is affected by an authentication by... |
medium | 5.3 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-11540 IBM WebSphere Application Server 9.0 and 8.5 could allow a remote attacker to ob... |
medium | 5.3 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-11710 IBM WebSphere Application Server 8.5 is affected by an HTTP request smuggling vu... |
medium | 6.5 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-11711 IBM WebSphere Application Server 9.0 and 8.5 is affected by a deserialization vu... |
medium | 6.5 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-18869 IBM i 7.6, 7.5, 7.4, and 7.3 could allow a remote authenticated attacker to bypa... |
medium | 6.4 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-95501 A vulnerability was found in mtrano APENCMS up to 6546096d354153309693efabb9a0d8... |
medium | 4.3 | — | — | 2026-09-22 | 2026-09-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.