September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-79591 A heap-buffer-overflow and use-after-free vulnerability exists in the xls_getCSS... |
high | 7.8 | — | — | 2026-09-10 | 2026-09-22 |
| CVE-2026-79592 An out-of-bounds read vulnerability exists in the xls_dumpSummary() function of... |
high | 7.5 | — | — | 2026-09-10 | 2026-09-22 |
| CVE-2026-71643 An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e... |
high | 7.5 | — | — | 2026-09-10 | 2026-09-22 |
| CVE-2026-71645 An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: c... |
high | 7.5 | — | — | 2026-09-10 | 2026-09-22 |
| CVE-2026-71647 An issue in EGO-Planner-v2 All versions up to commit 5c99a95880401e2599638d567ab... |
high | 7.5 | — | — | 2026-09-10 | 2026-09-22 |
| CVE-2026-71641 An issue in ZJU-FAST-Lab EGO-Planner-v2 All versions up to commit 5c99a95880401e... |
high | 7.5 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-71646 An issue in Robotics-STAR-Lab (SYSU STAR Group) RACER Tested affected version: c... |
high | 7.5 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-79362 Certain Woltlab products are affected by RCE via Cache Poisoning. |
high | 8.8 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-79393 A heap-based buffer overflow vulnerability in the WS-Addressing Action transform... |
high | 7.5 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-79394 An insecure default configuration in the embedded Happytime RTSP server within t... |
high | 7.5 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-90647 ASE/Kalkitech ASE2000 V2 Communication Test Set 2.35 through 2.37 on Windows con... |
high | 7.4 | — | — | 2026-09-12 | 2026-09-22 |
| CVE-2026-90651 Socket Firewall (socketdev/socket-registry-firewall) in registry mode before 2.0... |
high | 8.1 | — | — | 2026-09-13 | 2026-09-22 |
| CVE-2026-90668 The webserver in UnrealIRCd 6.0.5 through 6.2.6 before 6.2.7 does not limit the... |
high | 7.5 | — | — | 2026-09-13 | 2026-09-22 |
| CVE-2026-36453 Rhymix before 2.1.31 allows insecure direct object reference, aka RVE-2026-1. |
high | 7.4 | — | — | 2026-09-13 | 2026-09-22 |
| CVE-2026-37008 CrewAI before fb2323b offers a Python blocklist approach that operates at the wr... |
high | 8.1 | — | — | 2026-09-13 | 2026-09-22 |
| CVE-2026-31278 An issue in the /api/v2/setting/adserversetting endpoint of Suprema BioStar 2 be... |
high | 7.7 | — | — | 2026-09-14 | 2026-09-22 |
| CVE-2023-46273 Bonjour Gateway in Extreme Networks IQ Engine before 10.6r1a, and through 10.6r4... |
high | 8.8 | — | — | 2026-09-14 | 2026-09-22 |
| CVE-2023-50461 An issue was discovered in the direct_mail (aka Direct Mail) extension through 9... |
high | 8.8 | — | — | 2026-09-14 | 2026-09-22 |
| CVE-2026-79425 An authenticated Server-Side Request Forgery (SSRF) in the /adminapi/file/online... |
high | 8.1 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-79551 Tenda Technology Co., Ltd NVR_4H CH3 v2.1 V27.5.58.6 was discovered to contain a... |
high | 7.5 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-88616 An issue in RuoYi-Vue-Plus 6.0.0 allows a remote attacker to execute arbitrary c... |
high | 8.8 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-88619 1024-lab SmartAdmin v3.30.0 contains a missing authorization vulnerability in th... |
high | 8.1 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-52484 An issue in MitraStar GPT-2742GX4X5v6-SV GL_g2.5_100XNT0b23_3 allows an authenti... |
high | 8.8 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-79410 Improper validation of the quantity parameter in the add-to-cart path of Webkul... |
high | 8.1 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-79411 Incorrect privilege assignment in the admin user-management component of Webkul... |
high | 8.8 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-51134 The C-MOR Video Surveillance web interface (up to version 6.0104) is vulnerable... |
high | 7.5 | — | — | 2026-09-15 | 2026-09-22 |
| CVE-2026-38999 A Null Pointer Dereference in the mk_sched_event_close function (mk_server/mk_sc... |
high | 7.5 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-79298 An issue in Howyar Technologies Inc SysReturn Versions prior to 11.3.034 and fix... |
high | 8.4 | — | — | 2026-09-16 | 2026-09-22 |
| CVE-2026-52483 The ping diagnostics and other similar functions of the MitraStar GPT-2741GNAC-N... |
high | 8.8 | — | — | 2026-09-17 | 2026-09-22 |
| CVE-2026-88622 NUUO Network Video Recorder 2.0.0 is vulnerable to Command Injection in handle_i... |
high | 8.8 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-36467 Unrestricted Upload of File with Dangerous Type in core/modules/media.php in Cut... |
high | 7.2 | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-79316 An improper access control vulnerability exists in x-ui 0.3.2. |
high | 7.6 | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-88406 FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a stack ove... |
high | 7.5 | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-88409 FalkorDB (Redis module) v4.20.1 to v4.20.4 was discovered to contain a buffer ov... |
high | 8.8 | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-88411 Improper error handling in the GRAPH.EFFECT component (/effects/effects_apply.c)... |
high | 7.5 | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-88746 idccms V1.70 is vulnerable to Cross Site Scripting (XSS) in /admin/makeDiy_deal.... |
high | 7.1 | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-79079 An issue in CrossWire Xiphos <= 4.3.2 allows a local attacker to execute arbitra... |
high | 7.8 | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-89407 NumberInput.looksLikeValidNumber() in FasterXML jackson-core pre-validates "stri... |
high | 7.5 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-78807 An issue in wpa_supplicant all versions before v.2.12 allows a local attacker to... |
high | 7.1 | — | — | 2026-09-11 | 2026-09-22 |
| CVE-2026-90616 In Flatpak before 1.18.1, a malicious sandboxed app can obtain arbitrary read an... |
high | 7.4 | — | — | 2026-09-12 | 2026-09-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.