September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,141
Critical
1,210
High
4,303
Medium
4,031
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-73173 Nozomi Networks Labs identified a CWE-306: Missing Authentication for Critical F... |
not reported | — | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-73174 Nozomi Networks Labs identified a CWE-319: Cleartext Transmission of Sensitive I... |
not reported | — | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-73175 Nozomi Networks Labs identified a CWE-400: Uncontrolled Resource Consumption vul... |
not reported | — | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-88817 An authenticated, non-guest user of Curiosity Workspace could enroll themselves... |
not reported | — | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-13745 A vulnerability in the Gemini CLI prior to version 0.39.1 allows attackers to ac... |
not reported | — | — | — | 2026-09-10 | 2026-09-23 |
| CVE-2026-73176 Nozomi Networks Labs identified a CWE-78: Improper Neutralization of Special Ele... |
not reported | — | — | — | 2026-09-16 | 2026-09-23 |
| CVE-2026-8849 Use After Free vulnerability in RTI Connext Professional (Security Plugins) allo... |
not reported | — | — | — | 2026-09-22 | 2026-09-23 |
| CVE-2026-7866 Stack-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libr... |
not reported | — | — | — | 2026-09-22 | 2026-09-23 |
| CVE-2026-89169 live-boot ff8867c allows attackers to bypass the dm-verity-enforce-roothash-sign... |
not reported | — | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-93894 In Vinyl Cache before 9.0,2, workspace buffer overflow vulnerability was found i... |
not reported | — | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-71198 In OpenStack Glance before 32.0.1, the location API does not validate destinatio... |
not reported | — | — | — | 2026-09-14 | 2026-09-22 |
| CVE-2026-93852 In OpenStack Blazar before 17.0.1, the V2 lease listing operation (GET /v2/lease... |
not reported | — | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-93854 In OpenStack Blazar before 17.0.1, the V2 lease API does not enforce object-leve... |
not reported | — | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-94571 In OpenStack Octavia before 18.0.1, the Amphora provider driver did not reject c... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-92252 Incorrect default permissions in the installation directory of WatchDog Anti-Vir... |
not reported | — | — | — | 2026-09-20 | 2026-09-22 |
| CVE-2026-92253 Improper link resolution before file access in the quarantine restoration proces... |
not reported | — | — | — | 2026-09-20 | 2026-09-22 |
| CVE-2026-92254 Missing Authorization in the IOCTL handlers of the wsdkd.sys kernel drivers in W... |
not reported | — | — | — | 2026-09-20 | 2026-09-22 |
| CVE-2026-91921 Cross-Site Scripting (XSS) vulnerability due to inadequate input sanitisation in... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-93556 The ‘/password/guardarClau/recover’ endpoint accepts the ‘usuariId’ parameter, w... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-16651 temporalio/sqlparser can panic when Parse, ParseStrictDDL, or ParseNext processe... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-16652 Temporal Server did not bound the work performed while searching for a Schedule'... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-65651 temporalio/sqlparser accepts SQL containing deeply nested unary expressions and... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-65652 github.com/temporalio/tchannel-go did not validate the one-byte checksum-type fi... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-65653 github.com/temporalio/tchannel-go did not reject TChannel call fragments contain... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-65654 github.com/temporalio/ringpop-go enforces configured LabelOptions limits when an... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-87858 Temporal Server decided whether a Workflow completion callback was internal by r... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-89139 Temporal Server compiles a Worker Controller Instance module into its Worker Ser... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-88807 A heap overflow in libXrender before 0.9.13 in RenderQueryPictFormats could be u... |
not reported | — | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-11388 Double Free vulnerability in RTI Connext Professional (Core Libraries) allows Fi... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-11389 Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-18457 Heap-based Buffer Overflow vulnerability in RTI Connext Professional (Core Libra... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-18458 Out-of-bounds Read, Function Call With Incorrect Number of Arguments, Access of... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-18459 Incorrect Calculation vulnerability in RTI Connext Professional (Core Libraries)... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-18460 Off-by-one Error, Out-of-bounds Write vulnerability in RTI Connext Professional... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-18461 Use of Externally-Controlled Format String vulnerability in RTI Connext Professi... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-18462 Integer Overflow or Wraparound, Improper Access Control vulnerability in RTI Con... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-18626 Out-of-bounds Read vulnerability in RTI Connext Professional (Core Libraries) al... |
not reported | — | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-88854 Joomla Extension - OrdaSoft.com - Unauthenticated SQL Injection in OrdaSoft Joom... |
not reported | — | — | — | 2026-09-20 | 2026-09-22 |
| CVE-2026-88855 Joomla Extension - OrdaSoft.com - Authenticated, Privileged SQL Injection in Ord... |
not reported | — | — | — | 2026-09-20 | 2026-09-22 |
| CVE-2026-88856 Joomla Extension - OrdaSoft.com - Authenticated, Privileged Remote Code Executio... |
not reported | — | — | — | 2026-09-20 | 2026-09-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.