September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-91864 A specially crafted WS-Policy document can pack unlimited content inside a polic... |
high | 7.5 | — | Apache / neethi | 2026-09-21 | 2026-09-25 |
| CVE-2026-91865 A small WS-Policy document using repeated policy references can force Neethi to... |
high | 7.5 | — | Apache / neethi | 2026-09-21 | 2026-09-25 |
| CVE-2026-91866 A specially crafted pair of WS-Policy documents can force Neethi's policy-inters... |
high | 7.5 | — | Apache / neethi | 2026-09-21 | 2026-09-25 |
| CVE-2026-84281 The Fancy Product Designer plugin for WordPress is vulnerable to Stored Cross-Si... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-93654 The Premium Packages – Sell Digital Products Securely plugin for WordPress is vu... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-94573 The Repeater Fields for Elementor Forms plugin for WordPress is vulnerable to St... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-96752 The Zero Spam for WordPress plugin for WordPress is vulnerable to Stored Cross-S... |
high | 7.2 | — | — | 2026-09-25 | 2026-09-25 |
| CVE-2026-83963 Substance3D - Modeler is affected by an out-of-bounds write vulnerability that c... |
high | 7.8 | — | Adobe / substance 3d modeler | 2026-09-22 | 2026-09-25 |
| CVE-2026-81998 Substance3D - Modeler is affected by an out-of-bounds write vulnerability that c... |
high | 7.8 | — | Adobe / substance 3d modeler | 2026-09-22 | 2026-09-25 |
| CVE-2026-79906 Substance3D - Modeler is affected by an out-of-bounds write vulnerability that c... |
high | 7.8 | — | Adobe / substance 3d modeler | 2026-09-22 | 2026-09-25 |
| CVE-2026-83962 Substance3D - Modeler is affected by a Stack-based Buffer Overflow vulnerability... |
high | 7.8 | — | Adobe / substance 3d modeler | 2026-09-22 | 2026-09-25 |
| CVE-2026-76680 Vulnerabilities in the API of EdgeConnect SD-WAN Orchestrator could allow a remo... |
high | 8.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76681 A vulnerability in the API of EdgeConnect SD-WAN Orchestrator could allow an aut... |
high | 8.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76684 Vulnerabilities have been identified in the API of HPE Networking EdgeConnect SD... |
high | 8.1 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76687 A vulnerability in the API endpoint of HPE Networking EdgeConnect SD-WAN Orchest... |
high | 7.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-76688 Vulnerabilities have been identified in the web-based management interface of Ed... |
high | 7.5 | — | Arubanetworks / edgeconnect sd-wan orchestrator | 2026-09-15 | 2026-09-25 |
| CVE-2026-69455 Heap-based buffer overflow in Windows Remote Access Connection Manager allows an... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-69456 Heap-based buffer overflow in Microsoft Windows Speech allows an authorized atta... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-69458 Out-of-bounds read in Windows BitLocker allows an authorized attacker to elevate... |
high | 8.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-25 |
| CVE-2026-93494 A flaw was found in Netty's StompSubframeDecoder component. |
high | 7.5 | — | — | 2026-09-18 | 2026-09-25 |
| CVE-2026-93563 A flaw was found in Netty's `SmtpResponseDecoder` component. |
high | 7.5 | — | — | 2026-09-18 | 2026-09-25 |
| CVE-2026-93572 A flaw was found in Netty's `RedisArrayAggregator` component. |
high | 7.5 | — | — | 2026-09-18 | 2026-09-25 |
| CVE-2026-93575 A flaw was found in Netty's MqttDecoder. |
high | 7.5 | — | — | 2026-09-18 | 2026-09-25 |
| CVE-2026-93576 A flaw was found in Netty netty-codec-smtp. |
high | 7.5 | — | — | 2026-09-18 | 2026-09-25 |
| CVE-2026-96750 MongoDB Compass can interpolate a database name without escaping into the initia... |
high | 7.1 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-82157 Dell ThinOS 10, versions prior to SecurityAddon_2605.10.2766_T10, contains an Im... |
high | 8.3 | — | — | 2026-09-24 | 2026-09-25 |
| CVE-2026-94495 jshERP through 3.6 fails to properly validate user privileges in SystemConfigSer... |
high | 7.1 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-94540 DesktopSMS 1.11.0 by MrPear contains an unauthorized access vulnerability that a... |
high | 7.7 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-94411 jshERP 3.6 contains a privilege escalation vulnerability in the updateOneValueBy... |
high | 8.8 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-85880 Microsoft Windows Heap-Based Buffer Overflow Vulnerability |
high | 7.8 | Listed | Microsoft / Windows | 2026-09-08 | 2026-09-24 |
| CVE-2026-84001 Out-of-bounds read in Windows Key Distribution Center allows an unauthorized att... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-85360 Use after free in Windows Kernel allows an authorized attacker to elevate privil... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-83995 Heap-based buffer overflow in Windows NTFS allows an authorized attacker to elev... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-83996 Heap-based buffer overflow in Windows Error Reporting allows an authorized attac... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-84000 Heap-based buffer overflow in Microsoft Graphics Component allows an authorized... |
high | 7.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-83989 Out-of-bounds read in Windows Services for NFS ONCRPC XDR Driver allows an unaut... |
high | 7.5 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-83992 Heap-based buffer overflow in Windows Imaging Component allows an unauthorized a... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-81955 Heap-based buffer overflow in Microsoft Graphics Component allows an unauthorize... |
high | 8.8 | — | — | 2026-09-08 | 2026-09-24 |
| CVE-2026-81469 Dell Inventory Collector Client, versions prior to 15.0.0, contain an Unquoted S... |
high | 7.8 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-80096 Out-of-bounds read in Windows Remote Desktop Services allows an authorized attac... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.