September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,182
Critical
1,210
High
4,307
Medium
4,068
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-67633 Out-of-bounds read in SQL Server allows an authorized attacker to deny service o... |
medium | 6.5 | — | Microsoft / sql server 2017 | 2026-09-08 | 2026-09-16 |
| CVE-2026-67386 Use of uninitialized resource in SQL Server allows an authorized attacker to dis... |
medium | 6.5 | — | Microsoft / sql server 2017 | 2026-09-08 | 2026-09-16 |
| CVE-2026-67383 Generation of error message containing sensitive information in SQL Server allow... |
medium | 6.5 | — | Microsoft / sql server 2025 | 2026-09-08 | 2026-09-16 |
| CVE-2026-67369 Out-of-bounds read in SQL Server allows an authorized attacker to disclose infor... |
medium | 6.5 | — | Microsoft / sql server 2025 | 2026-09-08 | 2026-09-16 |
| CVE-2026-66816 Insufficient logging in SQL Server allows an authorized attacker to bypass a sec... |
medium | 6.5 | — | Microsoft / sql server 2022 | 2026-09-08 | 2026-09-16 |
| CVE-2026-79642 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.6 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-79943 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 4.8 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-80054 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.5 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-79975 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.5 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-80058 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.5 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-80125 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.9 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-80126 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 6.5 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-80167 Dell SCG 5.0 Appliance versions prior to 5.36.00.16 and Dell SCG 5.0 Application... |
medium | 5.5 | — | Dell / secure connect gateway | 2026-09-07 | 2026-09-16 |
| CVE-2026-57822 When the broker is processing message-based management requests, sent by an auth... |
medium | 6.5 | — | Apache / artemis | 2026-09-10 | 2026-09-16 |
| CVE-2026-65401 A race condition was addressed with improved state handling. |
medium | 5.5 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-84489 A buffer overflow was addressed with improved bounds checking. |
medium | 5.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-84491 A permissions issue was addressed with additional restrictions. |
medium | 5.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-84518 This issue was addressed through improved state management. |
medium | 4.3 | — | Apple / safari | 2026-09-14 | 2026-09-16 |
| CVE-2026-84519 An out-of-bounds write issue was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-84521 A use after free issue was addressed with improved memory management. |
medium | 5.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-84560 An authorization issue was addressed with improved state management. |
medium | 6.1 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-84596 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-84597 An out-of-bounds read issue was addressed with improved input validation. |
medium | 6.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-84617 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-86883 A privacy issue was addressed with improved handling of files. |
medium | 5.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-86885 An input validation issue was addressed with improved input validation. |
medium | 6.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-86889 A certificate validation issue was addressed with improved certificate validatio... |
medium | 4.8 | — | Apple / macos | 2026-09-14 | 2026-09-16 |
| CVE-2026-86905 This issue was addressed by removing the vulnerable code. |
medium | 5.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-86903 An out-of-bounds read was addressed with improved input validation. |
medium | 5.5 | — | Apple / ipados | 2026-09-14 | 2026-09-16 |
| CVE-2026-79725 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacke... |
medium | 6.5 | — | Langflow / langflow | 2026-09-10 | 2026-09-16 |
| CVE-2026-79723 IBM Langflow OSS 1.0.0 through 1.11.5 could allow a remote authenticated attacke... |
medium | 5.0 | — | Langflow / langflow | 2026-09-10 | 2026-09-16 |
| CVE-2026-80434 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
medium | 5.0 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-80378 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
medium | 6.5 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-81554 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
medium | 6.5 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-82092 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
medium | 6.5 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-82100 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
medium | 6.5 | — | Ibm / datastage on cloud pak for data | 2026-09-10 | 2026-09-16 |
| CVE-2026-43664 This issue was addressed with improved data protection. |
medium | 5.5 | — | Apple / ipados | 2026-09-14 | 2026-09-15 |
| CVE-2026-90816 A vulnerability was found in FFmpeg 8.0.x. |
medium | 4.3 | — | — | 2026-09-14 | 2026-09-15 |
| CVE-2026-65353 An authorization issue was addressed with improved state management. |
medium | 5.5 | — | Apple / ipados | 2026-09-14 | 2026-09-15 |
| CVE-2026-65365 An out-of-bounds read was addressed with improved bounds checking. |
medium | 6.5 | — | Apple / macos | 2026-09-14 | 2026-09-15 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.