September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-57227 Suricata is a network Intrusion Detection System, Intrusion Prevention System an... |
high | 7.5 | — | Oisf / suricata | 2026-09-18 | 2026-09-29 |
| CVE-2026-94622 vLLM versions through 0.29.0 contain a denial of service vulnerability in the NI... |
high | 7.5 | — | Vllm / vllm | 2026-09-21 | 2026-09-29 |
| CVE-2026-94623 vLLM through 0.29.0 contains a denial of service vulnerability in the NIXL conne... |
high | 7.5 | — | Vllm / vllm | 2026-09-21 | 2026-09-29 |
| CVE-2026-94624 vLLM through 0.29.0 contains a denial of service vulnerability in P2P KV offload... |
high | 7.5 | — | Vllm / vllm | 2026-09-21 | 2026-09-29 |
| CVE-2026-94626 vLLM through 0.29.0 fails to validate the tp_size parameter in kv_transfer_param... |
high | 7.5 | — | Vllm / vllm | 2026-09-21 | 2026-09-29 |
| CVE-2026-94627 vLLM Mooncake connector through 0.29.0 fails to properly manage GPU KV cache blo... |
high | 7.5 | — | Vllm / vllm | 2026-09-21 | 2026-09-29 |
| CVE-2026-81473 Dell Rugged Control Center (RCC), versions prior to 5.2.206, contain an Improper... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-29 |
| CVE-2026-72668 Unintended Proxy or Intermediary ('Confused Deputy') (CWE-441) in Kibana Agent B... |
high | 7.3 | — | — | 2026-09-26 | 2026-09-29 |
| CVE-2026-96602 A flaw has been found in Abdurrab5 online-makeup-store. |
high | 7.3 | — | — | 2026-09-23 | 2026-09-29 |
| CVE-2026-97231 A vulnerability was found in volotat Anagnorisis up to 0.3.1/0.4.0. |
high | 7.3 | — | — | 2026-09-24 | 2026-09-29 |
| CVE-2026-94613 authentik is an open-source identity provider. |
high | 7.5 | — | — | 2026-09-24 | 2026-09-29 |
| CVE-2026-86065 Klever-Go is the Go implementation of the Klever blockchain protocol. |
high | 7.5 | — | — | 2026-09-23 | 2026-09-29 |
| CVE-2026-56737 phpMyFAQ is an open source FAQ web application. |
high | 8.1 | — | — | 2026-09-24 | 2026-09-29 |
| CVE-2026-95844 Moquette is a lightweight Java MQTT broker. |
high | 7.5 | — | Moquette / moquette | 2026-09-23 | 2026-09-29 |
| CVE-2026-86261 A weakness has been identified in sfturing hosp_order up to 627f426331da8086ce8f... |
high | 7.3 | — | — | 2026-09-07 | 2026-09-28 |
| CVE-2026-86262 A security vulnerability has been detected in sfturing hosp_order up to 627f4263... |
high | 7.3 | — | — | 2026-09-07 | 2026-09-28 |
| CVE-2026-86263 A vulnerability was detected in sfturing hosp_order up to 627f426331da8086ce8fff... |
high | 7.3 | — | — | 2026-09-07 | 2026-09-28 |
| CVE-2026-86313 Out-of-bounds write vulnerability in Samsung Opensource Walrus allows Overflow B... |
high | 7.8 | — | — | 2026-09-07 | 2026-09-28 |
| CVE-2026-86268 A vulnerability was detected in itsourcecode School Management System 1.0. |
high | 7.3 | — | — | 2026-09-07 | 2026-09-28 |
| CVE-2026-76562 The Sidebar Manager Light plugin for WordPress is vulnerable to Stored Cross-Sit... |
high | 7.2 | — | — | 2026-09-10 | 2026-09-28 |
| CVE-2026-84375 js-yaml is a JavaScript YAML parser and dumper. |
high | 7.5 | — | — | 2026-09-01 | 2026-09-28 |
| CVE-2026-100848 AzuraCast (Composer package azuracast/azuracast) before 0.23.8 validates a stati... |
high | 7.1 | — | — | 2026-09-27 | 2026-09-28 |
| CVE-2026-100849 AzuraCast is a self-hosted web radio management suite. |
high | 7.1 | — | — | 2026-09-27 | 2026-09-28 |
| CVE-2026-100852 AzuraCast before 0.23.8 contains a command injection vulnerability in the Liquid... |
high | 8.8 | — | — | 2026-09-27 | 2026-09-28 |
| CVE-2026-101064 Obot before v0.23.0 contains a server-side request forgery vulnerability in remo... |
high | 7.6 | — | — | 2026-09-27 | 2026-09-28 |
| CVE-2026-100614 Capgo before 12.244.1 contains a cross-tenant integrity vulnerability in the met... |
high | 8.8 | — | — | 2026-09-26 | 2026-09-28 |
| CVE-2026-100615 Cap-go capgo.app before 12.267.1 fails to validate target API key privilege duri... |
high | 8.8 | — | — | 2026-09-26 | 2026-09-28 |
| CVE-2026-100622 capgo.app through 12.129.0 fails to verify deletion status when serving cached b... |
high | 7.5 | — | — | 2026-09-26 | 2026-09-28 |
| CVE-2026-100864 heym before 0.0.91 contains a sandbox escape vulnerability in the expression eng... |
high | 8.8 | — | — | 2026-09-27 | 2026-09-28 |
| CVE-2026-100865 Heym before 0.0.53 evaluates workflow condition expressions using Python's eval(... |
high | 8.8 | — | — | 2026-09-27 | 2026-09-28 |
| CVE-2026-100872 Sylius versions before 2.1.16 and 2.2.9 fail to validate payment amounts during... |
high | 7.5 | — | — | 2026-09-27 | 2026-09-28 |
| CVE-2026-6794 IBM Concert 1.0.0 through 3.0.0 has a double free vulnerability that exists due... |
high | 7.8 | — | Ibm / concert | 2026-09-23 | 2026-09-28 |
| CVE-2026-6730 IBM Concert 1.0.0 through 3.0.0 is vulnerable to a buffer overflow, caused by im... |
high | 7.8 | — | Ibm / concert | 2026-09-23 | 2026-09-28 |
| CVE-2026-70583 Heap-based buffer overflow in Windows Core Messaging allows an authorized attack... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-28 |
| CVE-2026-85740 LightRAG provides simple and fast retrieval-augmented generation. |
high | 7.1 | — | — | 2026-09-22 | 2026-09-28 |
| CVE-2026-56681 9Router is an AI router & token saver. |
high | 7.3 | — | — | 2026-09-22 | 2026-09-28 |
| CVE-2026-75608 Frigate is an open source network video recorder. |
high | 7.7 | — | — | 2026-09-22 | 2026-09-28 |
| CVE-2026-100578 OpenClaw (npm package `openclaw`) before 2026.7.1 fails to restrict owner-only i... |
high | 7.6 | — | — | 2026-09-26 | 2026-09-28 |
| CVE-2026-100586 OpenClaw Codex before 2026.7.1 fails to properly enforce owner authorization whe... |
high | 8.8 | — | — | 2026-09-26 | 2026-09-28 |
| CVE-2026-100598 OpenClaw (npm package openclaw) before 2026.7.1 incorrectly binds Signal approva... |
high | 7.1 | — | — | 2026-09-26 | 2026-09-28 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.