September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-55610 InvoiceShelf is an open-source web & mobile app that helps track expenses, payme... |
high | 8.7 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-69528 Missing authentication for critical function in Windows Shell allows an authoriz... |
high | 7.8 | — | Microsoft / windows 11 23h2 | 2026-09-08 | 2026-09-23 |
| CVE-2026-69517 Use after free in Windows Wireless Networking allows an authorized attacker to e... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-23 |
| CVE-2026-69512 Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacke... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-23 |
| CVE-2026-69508 Stack-based buffer overflow in Windows MIDI Service Module allows an authorized... |
high | 7.8 | — | Microsoft / windows 11 24h2 | 2026-09-08 | 2026-09-23 |
| CVE-2026-80225 In NLnetLabs Unbound up to and including 1.26.0, a degradation of service vulner... |
high | 7.5 | — | Nlnetlabs / unbound | 2026-09-16 | 2026-09-23 |
| CVE-2026-81349 Improper neutralization of special elements used in an os command ('os command i... |
high | 7.2 | — | Microsoft / azure hdinsight | 2026-09-08 | 2026-09-23 |
| CVE-2026-81634 In NLnet Labs Unbound up to and including 1.26.0, a 255 length query name with a... |
high | 7.5 | — | Nlnetlabs / unbound | 2026-09-16 | 2026-09-23 |
| CVE-2026-83998 Heap-based buffer overflow in Remote Desktop Client allows an unauthorized attac... |
high | 8.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-23 |
| CVE-2026-54646 CubeCart is an ecommerce software solution. |
high | 7.2 | — | — | 2026-09-17 | 2026-09-23 |
| CVE-2026-28663 In buildIntentSenderForUser of LauncherAppsService.java, there is a possible way... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-91018 lwIP (Lightweight IP) has a double free vulnerability, which could crash the sys... |
high | 8.8 | — | — | 2026-09-22 | 2026-09-23 |
| CVE-2026-95626 Tauri's Content Security Policy hardening, which injects a random nonce to restr... |
high | 8.3 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-95627 When a Tauri application uses the dialog plugin's file or folder picker, an atta... |
high | 7.7 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-96454 Pake turns a website into a desktop application built on Tauri. |
high | 8.2 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-96455 The Reachy Mini daemon exposes an HTTP API for managing the robot. |
high | 8.8 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-28664 In WriteImageToDisk of runtime_image.cc, there is a possible file tampering due... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-19888 Missing validation of a mandatory attribute in the SCRAM client-final-message pa... |
high | 7.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-6668 Integer overflow in the packet buffer growth logic in PgBouncer through 1.25.2 a... |
high | 7.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-93527 Contributor SQL Injection in Live Copy Paste for Elementor <= 1.5.10 versions. |
high | 8.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-93622 Unauthenticated Cross Site Scripting (XSS) in WPS Limit Login <= 1.5.9.3 version... |
high | 7.1 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-93773 Contributor SQL Injection in Mollie Forms <= 2.11.0 versions. |
high | 8.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-94124 Contributor SQL Injection in WP EasyCart <= 5.9.4 versions. |
high | 8.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-94174 Administrator SQL Injection in Email Log <= 2.63 versions. |
high | 7.6 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-94176 Unauthenticated Cross Site Scripting (XSS) in Mang Board WP <= 2.4.1 versions. |
high | 7.1 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-94487 Unauthenticated Cross Site Request Forgery (CSRF) in PublishPress Capabilities <... |
high | 8.1 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-95515 Unauthenticated Cross Site Scripting (XSS) in Ninja Forms <= 3.15.3 versions. |
high | 7.1 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-95529 Unauthenticated Cross Site Scripting (XSS) in Calculated Fields Form <= 5.5.1.1... |
high | 7.1 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-95590 Subscriber SQL Injection in Tainacan <= 1.2.0 versions. |
high | 7.1 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-95593 Editor SQL Injection in Ultimeter <= 3.0.8 versions. |
high | 7.6 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-95604 Unauthenticated Broken Access Control in Loops & Logic <= 4.2.4 versions. |
high | 7.5 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-28666 In multiple functions of LocalImageResolver.java, there is a possible Remote Per... |
high | 8.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-28668 In LimitRealloc of malloc_limit.cpp, there is a possible use after free due to a... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-45531 In read_boot_region of fsck.c, there is a possible out of bounds read due to a h... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-49879 In multiple functions of rw_t3t.cc, there is a possible out of bounds write due... |
high | 8.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-49881 In serviceClassExists of InCallController.java, there is a possible arbitrary co... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-49882 In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible memory safety issue d... |
high | 8.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-49884 In rw_mfc_handle_read_op of rw_mfc.cc, there is a possible out of bounds write d... |
high | 7.8 | — | Google / android | 2026-09-08 | 2026-09-23 |
| CVE-2026-96513 A security flaw has been discovered in Neethuharii CafeManagement. |
high | 7.3 | — | — | 2026-09-23 | 2026-09-23 |
| CVE-2026-93970 A security flaw has been discovered in aiyiyi121 SxDevOps 1.0/1.1. |
high | 7.3 | — | — | 2026-09-20 | 2026-09-23 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.