September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,133
Critical
1,210
High
4,300
Medium
4,026
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-16004 Exposed IOCTL with Insufficient Access Control in Armoury Crate driver allows a... |
not reported | — | — | — | 2026-09-08 | 2026-09-17 |
| CVE-2026-16005 Release of Invalid Pointer or Reference in Armoury Crate driver allows a local u... |
not reported | — | — | — | 2026-09-08 | 2026-09-17 |
| CVE-2026-16006 Exposure of Sensitive System Information to an Unauthorized Control Sphere in Ar... |
not reported | — | — | — | 2026-09-08 | 2026-09-17 |
| CVE-2026-12962 A Permissive Cross-domain Security Policy with Untrusted Domains in Armoury Crat... |
not reported | — | — | — | 2026-09-08 | 2026-09-17 |
| CVE-2026-69204 Http4s is a Scala interface for HTTP services. |
not reported | — | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-88819 In Siglet current and past versions the refresh token handler do not enforce pro... |
not reported | — | — | — | 2026-09-14 | 2026-09-16 |
| CVE-2026-86836 In Eclipse Ankaios versions 0.1.0 through 1.0.2, the agent creates workload file... |
not reported | — | — | — | 2026-09-14 | 2026-09-16 |
| CVE-2026-77179 On macOS, the virtio-fs host server used by Docker Sandboxes improperly follows... |
not reported | — | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-79994 The guest-to-host Unix-domain socket relay in Docker Sandboxes validates that a... |
not reported | — | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-86338 Ash field_policies are documented to protect against filter-based information di... |
not reported | — | — | — | 2026-09-16 | 2026-09-16 |
| CVE-2026-88255 Improper Validation of Unsafe Equivalence in Input in ZenHive mpp allows an unau... |
not reported | — | — | — | 2026-09-16 | 2026-09-16 |
| CVE-2026-89186 Use of Cache Containing Sensitive Information in ZenHive mpp allows a shared HTT... |
not reported | — | — | — | 2026-09-16 | 2026-09-16 |
| CVE-2026-91778 In affected versions of Octopus Server, users with certain scoped permission set... |
not reported | — | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-92355 In affected versions of Octopus Server, a user with permission to modify non bui... |
not reported | — | — | — | 2026-09-16 | 2026-09-16 |
| CVE-2026-89172 Improper protection of physical side channels vulnerability in Microchip AN1044,... |
not reported | — | — | — | 2026-09-12 | 2026-09-16 |
| CVE-2026-85188 Joomla Extension - regularlabs.com - Database data disclosure in Advanced Module... |
not reported | — | — | — | 2026-09-14 | 2026-09-16 |
| CVE-2026-85189 Joomla Extension - regularlabs.com - Privileged stored XSS via executable URL sc... |
not reported | — | — | — | 2026-09-14 | 2026-09-16 |
| CVE-2026-85190 Joomla Extension - regularlabs.com - Privileged stored XSS via class option in Q... |
not reported | — | — | — | 2026-09-14 | 2026-09-16 |
| CVE-2026-85191 Joomla Extension - regularlabs.com - Privileged stored XSS via rtla-alias option... |
not reported | — | — | — | 2026-09-14 | 2026-09-16 |
| CVE-2026-85192 Joomla Extension - regularlabs.com - Authenticated, privileged remote code execu... |
not reported | — | — | — | 2026-09-14 | 2026-09-16 |
| CVE-2026-85195 Joomla Extension - regularlabs.com - Privileged stored XSS via link option in Ar... |
not reported | — | — | — | 2026-09-14 | 2026-09-16 |
| CVE-2026-85196 Joomla Extension - regularlabs.com - Reflected XSS in Articles Anywhere extensio... |
not reported | — | — | — | 2026-09-14 | 2026-09-16 |
| CVE-2026-88852 Joomla Extension - regularlabs.com - Privileged stored XSS via url option in Sni... |
not reported | — | — | — | 2026-09-14 | 2026-09-16 |
| CVE-2026-88853 Joomla Extension - regularlabs.com - Privileged stored XSS via event handler opt... |
not reported | — | — | — | 2026-09-14 | 2026-09-16 |
| CVE-2026-78375 Joomla Extension - joomshaper.com - Authenticated Privileged SQL Injection in th... |
not reported | — | — | — | 2026-09-14 | 2026-09-16 |
| CVE-2026-79700 Joomla Extension - joomshaper.com - Unauthenticated CAPTCHA Bypass via Request-C... |
not reported | — | — | — | 2026-09-14 | 2026-09-16 |
| CVE-2026-81564 Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Renam... |
not reported | — | — | — | 2026-09-14 | 2026-09-16 |
| CVE-2026-81565 Joomla Extension - joomshaper.com - Missing Directory Confinement in Media Uploa... |
not reported | — | — | — | 2026-09-14 | 2026-09-16 |
| CVE-2026-81566 Joomla Extension - joomshaper.com - Missing Access Control in Menu Item Creation... |
not reported | — | — | — | 2026-09-14 | 2026-09-16 |
| CVE-2026-78081 Joomla Extension - j2commerce.com - Missing CSRF protection on cart, checkout an... |
not reported | — | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-81567 Joomla Extension - j2commerce.com - Unauthenticated blind SQL injection in the s... |
not reported | — | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-81568 Joomla Extension - j2commerce.com - Arbitrary file read via `task=download` in J... |
not reported | — | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-82189 Joomla Extension - j2commerce.com - Any order can be marked Failed by anyone in... |
not reported | — | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-82190 Joomla Extension - j2commerce.com - Predictable/forgeable order access token in... |
not reported | — | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-82191 Joomla Extension - j2commerce.com - Unescaped request data reflected into PayPal... |
not reported | — | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-78546 Out-of-bounds read vulnerability in Citirx Workspace app for Windows. |
not reported | — | — | — | 2026-09-11 | 2026-09-16 |
| CVE-2026-78547 Out-of-bounds write vulnerability in Citrix Citrix Workspace app for Windows. |
not reported | — | — | — | 2026-09-11 | 2026-09-16 |
| CVE-2026-18115 Concrete CMS 9.2.0 to 9.5.2 did not enforce per-field edit_user_properties permi... |
not reported | — | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-81899 Concrete CMS 9.0.0 to 9.5.2 stored group folder names without sanitization and p... |
not reported | — | — | — | 2026-09-15 | 2026-09-16 |
| CVE-2026-18421 Concrete CMS 9 through 9.5.2 does not perform an authorization check in three ac... |
not reported | — | — | — | 2026-09-15 | 2026-09-16 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.