September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-80756 In the Linux kernel, the following vulnerability has been resolved:
selinux: do... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-80757 In the Linux kernel, the following vulnerability has been resolved:
selinux: re... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-80746 In the Linux kernel, the following vulnerability has been resolved:
clk: qcom:... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-80740 In the Linux kernel, the following vulnerability has been resolved:
drm/log: Fi... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-80742 In the Linux kernel, the following vulnerability has been resolved:
af_packet:... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-80743 In the Linux kernel, the following vulnerability has been resolved:
ASoC: xilin... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-80744 In the Linux kernel, the following vulnerability has been resolved:
netfilter:... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-80733 In the Linux kernel, the following vulnerability has been resolved:
net: remove... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-80727 In the Linux kernel, the following vulnerability has been resolved:
x86/mce: Se... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-80730 In the Linux kernel, the following vulnerability has been resolved:
ring-buffer... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-15926 Rejected reason: Red Hat Product Security has determined that this CVE ID is not... |
not reported | — | — | — | 2026-09-03 | 2026-09-03 |
| CVE-2026-23584 Rejected reason: Withdrawn by requester. |
not reported | — | — | — | 2026-09-02 | 2026-09-02 |
| CVE-2026-23585 Rejected reason: Withdrawn by requester. |
not reported | — | — | — | 2026-09-02 | 2026-09-02 |
| CVE-2026-23586 Rejected reason: Withdrawn by requester. |
not reported | — | — | — | 2026-09-02 | 2026-09-02 |
| CVE-2026-23587 Rejected reason: Withdrawn by requester. |
not reported | — | — | — | 2026-09-02 | 2026-09-02 |
| CVE-2026-23588 Rejected reason: Withdrawn by requester. |
not reported | — | — | — | 2026-09-02 | 2026-09-02 |
| CVE-2026-23589 Rejected reason: Withdrawn by requester. |
not reported | — | — | — | 2026-09-02 | 2026-09-02 |
| CVE-2026-23590 Rejected reason: Withdrawn by requester. |
not reported | — | — | — | 2026-09-02 | 2026-09-02 |
| CVE-2026-23591 Rejected reason: Withdrawn by requester. |
not reported | — | — | — | 2026-09-02 | 2026-09-02 |
| CVE-2026-23583 Rejected reason: Withdrawn by requester. |
not reported | — | — | — | 2026-09-02 | 2026-09-02 |
| CVE-2026-74837 Allocation of Resources Without Limits or Throttling vulnerability in ash-projec... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-77856 Allocation of Resources Without Limits or Throttling vulnerability in ash-projec... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-77950 Generation of Error Message Containing Sensitive Information vulnerability in as... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-82730 Incorrect Authorization vulnerability in ash-project ash_typescript allows an un... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-82731 URL Redirection to Untrusted Site ('Open Redirect') vulnerability in ash-project... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-82732 Improper Input Validation vulnerability in ash-project ash_typescript allows a r... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-82733 Generation of Error Message Containing Sensitive Information vulnerability in as... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-82734 Improper Validation of Specified Quantity in Input vulnerability in ash-project... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-82735 Uncontrolled Resource Consumption vulnerability in ash-project ash allows an att... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-82736 Incorrect Behavior Order: Validate Before Canonicalize vulnerability in ash-proj... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-82737 Integer Overflow or Wraparound vulnerability in ash-project ash lets an attacker... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-82738 Improper Input Validation vulnerability in ash-project ash allows an attacker to... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-82739 Generation of Error Message Containing Sensitive Information vulnerability in as... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-82740 Improper Input Validation vulnerability in ash-project ash fails to enforce the... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-82741 Improper Validation of Specified Type of Input vulnerability in ash-project ash... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-82742 Uncontrolled Resource Consumption vulnerability in ash-project ash lets an attac... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-82743 Uncontrolled Resource Consumption vulnerability in ash-project ash lets a slow a... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-82744 Not Failing Securely (Failing Open) vulnerability in ash-project ash skips an As... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-82745 Improper Access Control vulnerability in ash-project ash lets a create action ov... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
| CVE-2026-82746 Missing Authorization vulnerability in ash-project ash allows an actor to update... |
not reported | — | — | — | 2026-09-01 | 2026-09-01 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.