September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-75665 Bridge is affected by a Heap-based Buffer Overflow vulnerability that could resu... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-75676 Bridge is affected by a Stack-based Buffer Overflow vulnerability that could res... |
high | 7.8 | — | Adobe / bridge | 2026-09-22 | 2026-09-25 |
| CVE-2026-16468 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-22 | 2026-09-25 |
| CVE-2026-16469 IBM DataStage on Cloud Pak for Data 5.4.0.0 px-runtime could allow a remote auth... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-22 | 2026-09-25 |
| CVE-2026-16672 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-22 | 2026-09-25 |
| CVE-2026-17102 IBM DataStage on Cloud Pak for Data 5.4.0.0 could allow a remote authenticated a... |
high | 8.8 | — | Ibm / datastage on cloud pak for data | 2026-09-22 | 2026-09-25 |
| CVE-2026-97326 A weakness has been identified in songxinjianqwe Chat up to ac63d25297079eed5e4b... |
high | 7.3 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-88361 SumatraPDF 3.6.1 contains an integer overflow vulnerability in EngineMupdf::Buil... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-88369 zserge jsmn commit 25647e6 is vulnerable to Buffer Overflow in example/jsondump.... |
high | 7.3 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-88373 libde265 commit 4d45a6b contains a NULL pointer dereference vulnerability in the... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-77261 MCP Atlassian is a Model Context Protocol (MCP) server for Atlassian products (C... |
high | 8.5 | — | Mcp-atlassian / mcp atlassian | 2026-09-22 | 2026-09-25 |
| CVE-2026-88362 MuJS e892c9fdb contains an incorrect numeric conversion vulnerability in jsR_isi... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-85496 The Botslab G980H dash camera firmware generates session identifiers using a sma... |
high | 8.8 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-85491 Catalyst::Seal versions before 0.03 for Perl allow one request to disable a path... |
high | 8.8 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-81630 The Botslab G980H dash camera firmware does not adequately verify the authentici... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-77967 The Botslab G980H dash camera firmware accepts a reusable authentication value w... |
high | 8.1 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-61714 FluidSynth is a software synthesizer based on the SoundFont 2 specifications. |
high | 7.8 | — | — | 2026-09-18 | 2026-09-25 |
| CVE-2026-51997 An issue in geelen mcp-remote 0.1.16 through 0.1.38 allows a remote attacker to... |
high | 8.8 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-42324 Piwigo is a full featured open source photo gallery application for the web. |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-44642 Piwigo is a full featured open source photo gallery application for the web. |
high | 8.1 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-34689 Adobe Connect is affected by an Improper Limitation of a Pathname to a Restricte... |
high | 8.6 | — | Adobe / connect | 2026-09-22 | 2026-09-25 |
| CVE-2026-24239 NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious da... |
high | 7.8 | — | Nvidia / nemo speech | 2026-09-22 | 2026-09-25 |
| CVE-2026-24267 NVIDIA NeMo Speech for all platforms contains a vulnerability in the speech data... |
high | 7.8 | — | Nvidia / nemo speech | 2026-09-22 | 2026-09-25 |
| CVE-2026-65111 NVIDIA NeMo Speech for all platforms contains a vulnerability where malicious in... |
high | 7.8 | — | Nvidia / nemo speech | 2026-09-22 | 2026-09-25 |
| CVE-2026-97646 A weakness has been identified in ningzichun student-management-system up to 987... |
high | 7.3 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-88388 Espruino 2v29 (commit bffc6d0) contains a stack-based buffer overflow vulnerabil... |
high | 7.5 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-69389 Heap-based buffer overflow in Windows Storage Management Provider allows an auth... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-69391 Stack-based buffer overflow in Windows Broker Infrastructure Service allows an a... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-69392 Use after free in Windows Shell allows an authorized attacker to elevate privile... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-25 |
| CVE-2026-69394 Heap-based buffer overflow in Windows Audio Service allows an authorized attacke... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-69396 Use after free in Windows NDIS allows an authorized attacker to elevate privileg... |
high | 7.1 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-85750 Piwigo before v16.4.0 is vulnerable to arbitrary file read and remote code execu... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-69433 Heap-based buffer overflow in Windows Error Reporting allows an authorized attac... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-69434 Heap-based buffer overflow in Windows URL Moniker allows an unauthorized attacke... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-69440 Time-of-check time-of-use (toctou) race condition in Windows MIDI Service Module... |
high | 7.0 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-25 |
| CVE-2026-67276 RouterOS does not compare the complete RSA public key when matching an SSH authe... |
high | 8.1 | — | Mikrotik / routeros | 2026-09-05 | 2026-09-25 |
| CVE-2026-47701 The OpenTelemetry Operator is a Kubernetes Operator for the OpenTelemetry Collec... |
high | 7.7 | — | — | 2026-09-14 | 2026-09-25 |
| CVE-2026-67281 RouterOS WebFig contains an unauthenticated file-read vulnerability in the /jspr... |
high | 7.5 | — | Mikrotik / routeros | 2026-09-05 | 2026-09-25 |
| CVE-2026-96039 The BA Book Everything plugin for WordPress is vulnerable to Stored Cross-Site S... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-95864 The Themify Builder plugin for WordPress is vulnerable to Stored Cross-Site Scri... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.