September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-55359 In multiple locations, there is a possible permission bypass due to a logic erro... |
high | 7.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56881 In enable_segment of remap.c, there is a possible permission bypass due to a log... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56882 In Cellular Modem, there is a possible information disclosure due to a logic err... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-94004 A vulnerability was found in DedeCMS up to 5.7.118. |
high | 7.3 | — | — | 2026-09-20 | 2026-09-21 |
| CVE-2026-94036 A security flaw has been discovered in D-Link DIR-X1860 and DIR-X1860Z up to 1.0... |
high | 8.8 | — | — | 2026-09-20 | 2026-09-21 |
| CVE-2026-90504 A vulnerability has been found in vvbbnn00 WARP-Clash-API up to c7bf236007395986... |
high | 7.3 | — | — | 2026-09-13 | 2026-09-21 |
| CVE-2026-83234 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 8.2 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83235 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 7.5 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83236 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 8.2 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83237 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83238 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83240 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83243 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 7.7 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83244 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83248 Vulnerability in the Oracle Commerce Guided Search / Oracle Commerce Experience... |
high | 8.2 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83173 Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83213 Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component... |
high | 7.5 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83215 Vulnerability in the Siebel CRM Deployment product of Oracle Siebel CRM (compone... |
high | 8.2 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83217 Vulnerability in the Siebel CRM End User product of Oracle Siebel CRM (component... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83221 Vulnerability in the Siebel CRM Integration product of Oracle Siebel CRM (compon... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83113 Vulnerability in the Oracle Quality product of Oracle E-Business Suite (componen... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83116 Vulnerability in the Oracle Order Management product of Oracle E-Business Suite... |
high | 7.7 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83126 Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (com... |
high | 7.6 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83167 Vulnerability in the Oracle Application Object Library product of Oracle E-Busin... |
high | 7.5 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83171 Vulnerability in the Oracle One-to-One Fulfillment product of Oracle E-Business... |
high | 7.1 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-83172 Vulnerability in the Oracle Sales Online product of Oracle E-Business Suite (com... |
high | 8.5 | — | — | 2026-09-15 | 2026-09-21 |
| CVE-2026-56920 In s_decode_vui_param of fw_hevc_dec_header.c, there is a possible out-of-bounds... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56967 In Cellular Modem, there is a possible out-of-bounds write due to a heap buffer... |
high | 8.0 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56945 In VPU, there is a possible out-of-bounds write due to a confused deputy. |
high | 7.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56942 In ReadTileInfo of vp9hwd_headers.cc, there is a possible out-of-bounds write du... |
high | 8.8 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56941 In multiple functions of fpc_tee_hal.c, there is a possible use-after-free due t... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2026-56914 In multiple locations, there is a possible use-after-free due to improper lockin... |
high | 8.4 | — | Google / android | 2026-09-15 | 2026-09-21 |
| CVE-2025-31277 Apple Multiple Products Buffer Overflow Vulnerability |
high | 8.8 | Listed | Apple / Multiple Products | 2025-07-30 | 2026-09-21 |
| CVE-2026-92127 Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier automatically a... |
high | 8.0 | — | Jenkins / script security | 2026-09-16 | 2026-09-21 |
| CVE-2026-92128 Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier downloads a JAR... |
high | 7.5 | — | Jenkins / script security | 2026-09-16 | 2026-09-21 |
| CVE-2026-83014 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 8.1 | — | Oracle / peoplesoft enterprise peopletools | 2026-09-15 | 2026-09-21 |
| CVE-2026-92129 Jenkins Script Security Plugin 1415.v9a_f9b_3a_c253d and earlier does not check... |
high | 7.5 | — | Jenkins / script security | 2026-09-16 | 2026-09-21 |
| CVE-2026-69602 Use after free in Windows PrintWorkflowUserSvc allows an authorized attacker to... |
high | 7.5 | — | Microsoft / windows 10 1809 | 2026-09-08 | 2026-09-21 |
| CVE-2026-83015 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.0 | — | Oracle / peoplesoft enterprise peopletools | 2026-09-15 | 2026-09-21 |
| CVE-2026-83016 Vulnerability in the PeopleSoft Enterprise PeopleTools product of Oracle PeopleS... |
high | 7.2 | — | Oracle / peoplesoft enterprise peopletools | 2026-09-15 | 2026-09-21 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.