September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-88889 Renovate before 44.14.7 contains a command injection vulnerability in the Maven... |
high | 7.8 | — | — | 2026-09-10 | 2026-09-29 |
| CVE-2026-88880 Renovate before 44.11.3 fails to validate Link header destinations when followin... |
high | 8.6 | — | — | 2026-09-10 | 2026-09-29 |
| CVE-2026-88881 Renovate, a dependency update tool, follows pagination links supplied by the Git... |
high | 8.6 | — | — | 2026-09-10 | 2026-09-29 |
| CVE-2026-88882 Renovate is a dependency update automation tool. |
high | 8.6 | — | — | 2026-09-10 | 2026-09-29 |
| CVE-2026-88883 Renovate is an automated dependency update tool. |
high | 7.7 | — | — | 2026-09-10 | 2026-09-29 |
| CVE-2026-96274 In Baicells Nova 430H, an unauthenticated device within radio range can send a m... |
high | 7.4 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-94204 The central cloud storage backend for the entire dashcam platform is misconfigur... |
high | 7.5 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-100296 In Anjvision YSSD-RTMP-H5 firmware version 3.3.2.4, an empty-body POST to /setUs... |
high | 8.1 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-100298 In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, two user‑information endpoin... |
high | 8.8 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-100292 In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, a hidden debug interface can... |
high | 8.8 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-100293 In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, both the local and cloud upd... |
high | 8.8 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-100294 In Anjvision YSSD‑RTMP‑H5 firmware version 3.3.2.4, the firmware embeds hardcode... |
high | 7.5 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-12267 ManageEngine DDI Central versions below 6201 are vulnerable to Command injection... |
high | 7.2 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-12268 ManageEngine DDI Central versions below 6201 are vulnerable to PowerShell comman... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-12269 Zohocorp ManageEngine DDI Central 6.2.0 build below 6201 had a Keepalived config... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-12264 Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Arbitra... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-12265 Zohocorp ManageEngine DDI Central versions before 6201 are vulnerable to Insuffi... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-76718 A potential security vulnerability in HPE OneView can be exploited to allow remo... |
high | 8.2 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-76719 A security vulnerability in HPE OneView may be exploited remotely to perform ses... |
high | 8.2 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-94445 A malicious txtar could escape the intended execution context and force arbitrar... |
high | 8.8 | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-102437 OS Command Injection in internal/gitcmd (git diff filter.clean/smudge invocation... |
high | 7.8 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2022-51019 Akaunting before 2.1.31 contains an OS command injection vulnerability in the mo... |
high | 8.8 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-102334 Nginx Proxy Manager through 2.16.0 lacks rate-limiting on authentication endpoin... |
high | 7.4 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-78424 Improper parameter handling in NeuVector allows any authenticated user who holds... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-88805 Incorrect credential cleaning on logout could be used by remote attackers to kee... |
high | 8.1 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-102697 Ollama versions 0.14.0 before 0.31.2 contain an incorrect authorization vulnerab... |
high | 7.8 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-95520 A heap-based buffer overflow flaw was found in rpm. |
high | 7.1 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-4556 Exam4 is affected by a local privilege escalation vulnerability in the com.exteg... |
high | 7.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-82804 The scriptPath parameter is incorporated into a /bin/sh -c command without suffi... |
high | 8.8 | — | — | 2026-09-29 | 2026-09-29 |
| CVE-2026-69360 Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attac... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-78545 The Okta Access Gateway does not sanitize the application label field before inc... |
high | 7.2 | — | Okta / access gateway | 2026-09-08 | 2026-09-29 |
| CVE-2026-97882 A weakness has been identified in mathurvishal CloudClassroom-PHP-Project up to... |
high | 7.3 | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-87741 The ConvertPlus plugin for WordPress is vulnerable to Deserialization of Untrust... |
high | 8.8 | — | — | 2026-09-28 | 2026-09-29 |
| CVE-2026-33639 InvoicePlane is a self-hosted open source application for managing invoices, cli... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-29 |
| CVE-2026-78550 The Okta Access Gateway management console passes user-supplied input to eval()... |
high | 7.2 | — | Okta / access gateway | 2026-09-08 | 2026-09-29 |
| CVE-2026-69359 Heap-based buffer overflow in Active Directory Domain Services allows an authori... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
| CVE-2026-69805 External control of file name or path in .NET allows an unauthorized attacker to... |
high | 8.1 | — | Microsoft / microsoft.diagnostics.runtime | 2026-09-08 | 2026-09-29 |
| CVE-2026-69854 Improper authentication in Spring Cloud Azure allows an unauthorized attacker to... |
high | 8.1 | — | Microsoft / spring cloud | 2026-09-08 | 2026-09-29 |
| CVE-2026-70351 Integer overflow or wraparound in Microsoft WebP Image Extension allows an unaut... |
high | 8.8 | — | Microsoft / webp image extension | 2026-09-08 | 2026-09-29 |
| CVE-2026-77504 Double free in Microsoft Office Word allows an unauthorized attacker to execute... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-29 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.