September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-71380 Missing Release of Resource after Effective Lifetime vulnerability in Erlang/OTP... |
not reported | — | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-71562 Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP i... |
not reported | — | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-73270 Improper Handling of Case Sensitivity vulnerability in Erlang/OTP inets httpd al... |
not reported | — | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-73276 Gracefulness code ignored cases that should be rejected, resulting in possible H... |
not reported | — | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-66835 Path Equivalence vulnerability in Erlang/OTP inets httpd allows a remote unauthe... |
not reported | — | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-70399 Allocation of Resources Without Limits or Throttling vulnerability in Erlang/OTP... |
not reported | — | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-70405 Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP s... |
not reported | — | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-59696 Improper Validation of Specified Quantity in Input vulnerability in Erlang/OTP s... |
not reported | — | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-66357 httpd has never implemented obs-fold (RFC 2616 §2.2 / RFC 7230 §3.2.4 header con... |
not reported | — | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-55951 The Erlang/OTP httpc HTTP client does not enforce a limit on the total size of r... |
not reported | — | — | — | 2026-09-01 | 2026-09-08 |
| CVE-2026-80899 In the Linux kernel, the following vulnerability has been resolved:
erofs: remo... |
not reported | — | — | — | 2026-09-04 | 2026-09-07 |
| CVE-2026-80908 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu:... |
not reported | — | — | — | 2026-09-04 | 2026-09-07 |
| CVE-2026-80909 In the Linux kernel, the following vulnerability has been resolved:
drm/amdgpu:... |
not reported | — | — | — | 2026-09-04 | 2026-09-07 |
| CVE-2026-80785 In the Linux kernel, the following vulnerability has been resolved:
fbdev: seri... |
not reported | — | — | — | 2026-09-04 | 2026-09-07 |
| CVE-2026-80913 In the Linux kernel, the following vulnerability has been resolved:
selinux: re... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80906 In the Linux kernel, the following vulnerability has been resolved:
net: packet... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80910 In the Linux kernel, the following vulnerability has been resolved:
ASoC: codec... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80911 In the Linux kernel, the following vulnerability has been resolved:
ASoC: SOF:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80902 In the Linux kernel, the following vulnerability has been resolved:
dmaengine:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80903 In the Linux kernel, the following vulnerability has been resolved:
drm/xe/oa:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80904 In the Linux kernel, the following vulnerability has been resolved:
net/tls: Fa... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80898 In the Linux kernel, the following vulnerability has been resolved:
netfs: clea... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80900 In the Linux kernel, the following vulnerability has been resolved:
ASoC: SDCA:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80901 In the Linux kernel, the following vulnerability has been resolved:
ipvs: fix t... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80890 In the Linux kernel, the following vulnerability has been resolved:
sctp: rejec... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80891 In the Linux kernel, the following vulnerability has been resolved:
KVM: s390:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80892 In the Linux kernel, the following vulnerability has been resolved:
erofs: cap... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80893 In the Linux kernel, the following vulnerability has been resolved:
mm/hugetlb:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80894 In the Linux kernel, the following vulnerability has been resolved:
iommufd: Fi... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80895 In the Linux kernel, the following vulnerability has been resolved:
mshv: Order... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80896 In the Linux kernel, the following vulnerability has been resolved:
mshv: Fix r... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80887 In the Linux kernel, the following vulnerability has been resolved:
drm/vmwgfx:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80889 In the Linux kernel, the following vulnerability has been resolved:
can: isotp:... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-84832 SEPPmail Secure Email Gateway before 15.0.6 deserializes attacker-controlled dat... |
not reported | — | — | — | 2026-09-03 | 2026-09-04 |
| CVE-2026-80885 In the Linux kernel, the following vulnerability has been resolved:
afs: Fix un... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80886 In the Linux kernel, the following vulnerability has been resolved:
serial: msm... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80879 In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80880 In the Linux kernel, the following vulnerability has been resolved:
IB/mlx5: Pr... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80881 In the Linux kernel, the following vulnerability has been resolved:
ocfs2: fix... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
| CVE-2026-80882 In the Linux kernel, the following vulnerability has been resolved:
crypto: teg... |
not reported | — | — | — | 2026-09-04 | 2026-09-04 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.