September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,171
Critical
1,210
High
4,305
Medium
4,059
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-20504 In Modem, there is a possible system crash due to a missing bounds check. |
medium | 5.3 | — | Mediatek / mt2735 firmware | 2026-09-07 | 2026-09-09 |
| CVE-2026-20503 In Modem, there is a possible system crash due to a missing bounds check. |
medium | 5.3 | — | Mediatek / mt2716 firmware | 2026-09-07 | 2026-09-09 |
| CVE-2026-19299 IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacke... |
medium | 6.5 | — | Langflow / langflow | 2026-09-04 | 2026-09-08 |
| CVE-2026-19301 IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacke... |
medium | 6.5 | — | Langflow / langflow | 2026-09-04 | 2026-09-08 |
| CVE-2026-19302 IBM Langflow OSS 1.0.0 through 1.11.2 could allow a remote authenticated attacke... |
medium | 6.5 | — | Langflow / langflow | 2026-09-04 | 2026-09-08 |
| CVE-2026-8447 IBM Langflow OSS 1.0.0 through 1.11.2 suffer from a stored cross-site scripting... |
medium | 6.1 | — | Langflow / langflow | 2026-09-04 | 2026-09-08 |
| CVE-2026-9186 IBM Langflow OSS 1.0.0 through 1.11.2 allows remote authenticated attackers to b... |
medium | 6.5 | — | Langflow / langflow | 2026-09-04 | 2026-09-08 |
| CVE-2026-18567 IBM Db2 Mirror for i 7.4, 7.5, and 7.6 could allow a local attacker to obtain in... |
medium | 4.7 | — | Ibm / db2 mirror for i | 2026-09-04 | 2026-09-08 |
| CVE-2026-18858 IBM i 7.6, and 7.5 could allow a local authenticated attacker to obtain informat... |
medium | 5.5 | — | Ibm / i | 2026-09-04 | 2026-09-08 |
| CVE-2026-18887 IBM i 7.6, 7.5, 7.4, and 7.3 could allow an authenticated attacker to obtain sen... |
medium | 6.5 | — | Ibm / i | 2026-09-04 | 2026-09-08 |
| CVE-2026-53756 Emlog is an open source website building system. |
medium | 4.9 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-55513 nebula-mesh is a self-hosted control plane for Slack Nebula mesh VPN. |
medium | 5.4 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-52763 YesWiki is a wiki system written in PHP. |
medium | 6.5 | — | — | 2026-09-05 | 2026-09-08 |
| CVE-2026-52773 YesWiki is a wiki system written in PHP. |
medium | 6.1 | — | — | 2026-09-05 | 2026-09-08 |
| CVE-2026-52774 YesWiki is a wiki system written in PHP. |
medium | 6.1 | — | — | 2026-09-05 | 2026-09-08 |
| CVE-2026-78522 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to d... |
medium | 6.5 | — | Microsoft / 365 apps | 2026-09-08 | 2026-09-08 |
| CVE-2026-80079 Out-of-bounds read in Microsoft Office Word allows an unauthorized attacker to d... |
medium | 6.5 | — | Microsoft / 365 apps | 2026-09-08 | 2026-09-08 |
| CVE-2026-83949 Buffer over-read in Microsoft Office Word allows an unauthorized attacker to dis... |
medium | 5.5 | — | Microsoft / 365 apps | 2026-09-08 | 2026-09-08 |
| CVE-2026-83951 Buffer over-read in Microsoft Office Word allows an unauthorized attacker to dis... |
medium | 5.5 | — | Microsoft / 365 apps | 2026-09-08 | 2026-09-08 |
| CVE-2026-84191 LibreNMS before 26.5.0 contains stored cross-site scripting vulnerabilities in V... |
medium | 6.1 | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-84204 GROWI contains an access control vulnerability in the GET /_api/v3/attachment/:i... |
medium | 6.5 | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-84205 GROWI contains an access control vulnerability in the GET /_api/v3/revisions/:id... |
medium | 6.5 | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-84207 Heym before 0.0.98 fails to apply SSRF egress guards to WebSocket Send and WebSo... |
medium | 5.4 | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-73524 Cypht before 2.12.2 contains a cross-site scripting vulnerability in the contact... |
medium | 6.1 | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-84477 AVideo Live_schedule::setTitle() and setDescription() store POST input without s... |
medium | 5.4 | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-84483 WWBN AVideo through commit 9c39d8c8 contains an incomplete authentication bypass... |
medium | 5.3 | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-75135 UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerabil... |
medium | 6.1 | — | — | 2026-09-02 | 2026-09-08 |
| CVE-2026-75136 UpSignOn for Windows before 7.19.0 contains an insecure credential storage vulne... |
medium | 6.1 | — | — | 2026-09-02 | 2026-09-08 |
| CVE-2026-75137 UpSignOn for Windows before 7.19.0 contains a sensitive data exposure vulnerabil... |
medium | 6.1 | — | — | 2026-09-02 | 2026-09-08 |
| CVE-2026-85156 WWBN AVideo fails to properly validate access controls on the public channel pag... |
medium | 5.3 | — | — | 2026-09-03 | 2026-09-08 |
| CVE-2026-85157 WWBN AVideo contains a broken access control vulnerability in the unauthenticate... |
medium | 5.3 | — | — | 2026-09-03 | 2026-09-08 |
| CVE-2026-85158 AVideo through commit c91b5975d contains a reflected cross-site scripting vulner... |
medium | 5.4 | — | — | 2026-09-03 | 2026-09-08 |
| CVE-2026-85159 AVideo through commit c91b5975d contains a reflected cross-site scripting vulner... |
medium | 5.4 | — | — | 2026-09-03 | 2026-09-08 |
| CVE-2026-85161 AVideo through commit c91b5975d contains a cross-site request forgery vulnerabil... |
medium | 4.3 | — | — | 2026-09-03 | 2026-09-08 |
| CVE-2026-85162 AVideo through commit c91b5975d contains a cross-site request forgery vulnerabil... |
medium | 6.5 | — | — | 2026-09-03 | 2026-09-08 |
| CVE-2026-85163 AVideo through commit c91b5975d contains a server-side request forgery vulnerabi... |
medium | 6.5 | — | — | 2026-09-03 | 2026-09-08 |
| CVE-2026-82023 LearnPress WordPress Plugin before 4.4.6 contains a broken object-level authoriz... |
medium | 4.3 | — | — | 2026-09-03 | 2026-09-08 |
| CVE-2026-82024 LearnPress WordPress Plugin before 4.4.6 contains a stored cross-site scripting... |
medium | 5.4 | — | — | 2026-09-03 | 2026-09-08 |
| CVE-2026-85611 OpenPanel before 2.3.0 contains a cross-tenant broken object level authorization... |
medium | 6.4 | — | — | 2026-09-04 | 2026-09-08 |
| CVE-2026-74235 GFI Exinda AI and ClearView before 7.6.5 contains a path traversal vulnerability... |
medium | 4.9 | — | — | 2026-09-04 | 2026-09-08 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.