September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-24075 Memory Corruption when multiple threads issue concurrent IOCTL requests to the d... |
high | 7.0 | — | Qualcomm / wsa8845h firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-24073 Memory corruption when processing decode statistics due to insufficient validati... |
high | 7.8 | — | Qualcomm / cologne firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-24074 Memory Corruption when processing data with large offset and length values excee... |
high | 7.8 | — | Qualcomm / iqx5121 firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-11716 IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attac... |
high | 7.5 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-11725 IBM MQ could allow an authenticated attacker to cause a denial of service or pot... |
high | 8.8 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-11726 IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 could allow an authenticated attac... |
high | 8.1 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-11727 IBM MQ for HPE NonStop 8.1.0 through 8.1.0.40 IBM MQ C client could allow a remo... |
high | 8.1 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-17619 IBM Platform RTM is vulnerable to SQL injection. |
high | 8.6 | — | — | 2026-09-18 | 2026-09-22 |
| CVE-2026-75791 Zohocorp ManageEngine ADSelfService Plus versions before build 7001 are vulnerab... |
high | 8.6 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-24081 Transient DOS when processing a channel map with insufficient used channels and... |
high | 7.4 | — | Qualcomm / ar8035 firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-25261 Memory corruption while processing rear sensor IOCTL calls. |
high | 7.8 | — | Qualcomm / cologne firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-25278 Memory Corruption when processing I2C transfer requests due to a race condition... |
high | 7.0 | — | Qualcomm / lemans au lgit firmware | 2026-09-17 | 2026-09-22 |
| CVE-2026-87148 Vulnerability in the Oracle Hyperion Data Relationship Management product of Ora... |
high | 7.5 | — | Oracle / hyperion data relationship management | 2026-09-15 | 2026-09-22 |
| CVE-2026-69649 Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized... |
high | 8.8 | — | Microsoft / raw image extension | 2026-09-08 | 2026-09-22 |
| CVE-2026-94491 A weakness has been identified in Yonyou KSOA 9.0. |
high | 7.3 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-94384 Missing authorization in Amazon amazon-connect-salesforce-lambda before 5.26 all... |
high | 8.1 | — | — | 2026-09-22 | 2026-09-22 |
| CVE-2026-90997 A flaw was found in Keycloak. |
high | 7.4 | — | — | 2026-09-17 | 2026-09-22 |
| CVE-2026-81895 In Concrete CMS before 9.5.3, the Document Library block stored the file-set ide... |
high | 7.2 | — | Concretecms / concrete cms | 2026-09-15 | 2026-09-22 |
| CVE-2026-69652 Use after free in Windows Win32K allows an authorized attacker to elevate privil... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69654 Use after free in Windows Accounts Control allows an authorized attacker to elev... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-22 |
| CVE-2026-69708 Use after free in Windows Web Platform Storage allows an authorized attacker to... |
high | 7.0 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-22 |
| CVE-2026-82992 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 7.8 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-22 |
| CVE-2026-83003 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.5 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83005 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.8 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83007 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.5 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-69710 Concurrent execution using shared resource with improper synchronization ('race... |
high | 7.5 | — | Microsoft / windows 10 21h2 | 2026-09-08 | 2026-09-22 |
| CVE-2026-83008 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.8 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83009 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.8 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83010 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.1 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83012 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 7.7 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83013 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 8.8 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83022 Vulnerability in the Oracle WebCenter Enterprise Capture product of Oracle Fusio... |
high | 7.9 | — | Oracle / webcenter enterprise capture | 2026-09-15 | 2026-09-22 |
| CVE-2026-83023 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 8.6 | — | Oracle / identity manager connector | 2026-09-15 | 2026-09-22 |
| CVE-2026-83024 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 7.8 | — | Oracle / identity manager connector | 2026-09-15 | 2026-09-22 |
| CVE-2026-83025 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 8.7 | — | Oracle / identity manager connector | 2026-09-15 | 2026-09-22 |
| CVE-2026-83026 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 8.3 | — | Oracle / identity manager connector | 2026-09-15 | 2026-09-22 |
| CVE-2026-83028 Vulnerability in the Oracle Identity Manager Connector product of Oracle Fusion... |
high | 7.5 | — | Oracle / identity manager connector | 2026-09-15 | 2026-09-22 |
| CVE-2026-49811 Dell Command | Monitor (DCM), versions prior to 10.13.2, contain an Incorrect Pe... |
high | 8.4 | — | — | 2026-09-21 | 2026-09-22 |
| CVE-2026-69711 Use after free in Windows Device Association Service allows an authorized attack... |
high | 7.0 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-22 |
| CVE-2026-83074 Vulnerability in the Siebel CRM Cloud Applications product of Oracle Siebel CRM... |
high | 8.6 | — | Oracle / siebel crm | 2026-09-15 | 2026-09-22 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.