September 2026 CVE archive
Records last modified in NIST NVD between Sep 1 and Sep 30, 2026 (UTC). Data imported from the NVD CVE API 2.0 and the CISA KEV catalog; each record shows its own source and verification time. The modified view only includes records that were CRITICAL or CISA-KEV-listed when imported — it is not a complete list of every modification.
Total records
11,186
Critical
1,210
High
4,308
Medium
4,071
Low
456
Severity not reported
1,141
In CISA KEV
59
Most affected vendors (by CPE data where available): microsoft (945), google (605), oracle (274), apple (244), adobe (197), dell (137), ibm (104), arubanetworks (101), mongodb (64), apache (53)
| CVE | Severity | CVSS | KEV | Vendor / product | Published | Modified |
|---|---|---|---|---|---|---|
| CVE-2026-77493 Double free in Microsoft Graphics Component allows an unauthorized attacker to e... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-73025 Weak authentication in Windows iSCSI allows an unauthorized attacker to bypass a... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-73009 Use after free in Windows Secure Socket Tunneling Protocol (SSTP) allows an unau... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-72979 Use after free in Windows DHCP Server allows an unauthorized attacker to execute... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-72982 Stack-based buffer overflow in Windows Netlogon allows an unauthorized attacker... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-72983 Use after free in Windows Internet Connection Sharing (ICS) allows an unauthoriz... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-72950 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-70296 Out-of-bounds write in Windows Imaging Component allows an unauthorized attacker... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69845 Heap-based buffer overflow in Windows DHCP Server allows an unauthorized attacke... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69824 Integer underflow (wrap or wraparound) in Microsoft Standard XPS allows an unaut... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69829 Heap-based buffer overflow in Windows Shell allows an unauthorized attacker to e... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69819 Out-of-bounds write in RPC Runtime allows an unauthorized attacker to execute co... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69768 Heap-based buffer overflow in Windows RNDIS allows an unauthorized attacker to e... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69769 Heap-based buffer overflow in Windows HTTP Print Provider allows an unauthorized... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69730 Use after free in Windows DNS allows an unauthorized attacker to execute code ov... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69715 Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to exe... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69590 Remote Code Execution in Windows Routing and Remote Access Service (RRAS) allows... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69595 Use after free in Windows Services for NFS ONCRPC XDR Driver allows an unauthori... |
critical | 9.8 | — | Microsoft / windows server 2012 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69579 Use after free in Windows Message Queuing allows an unauthorized attacker to exe... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69525 Use after free in Windows Remote Desktop Services allows an unauthorized attacke... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69496 Heap-based buffer overflow in Windows Compressed Folder allows an unauthorized a... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69491 Heap-based buffer overflow in Windows Microsoft DirectMusic allows an unauthoriz... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69463 Heap-based buffer overflow in Windows NTFS allows an unauthorized attacker to ex... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-69408 Integer overflow or wraparound in Microsoft Windows Media Foundation allows an u... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-68839 Heap-based buffer overflow in Windows USB Mass Storage Class Driver allows an un... |
critical | 9.8 | — | Microsoft / windows 10 1607 | 2026-09-08 | 2026-09-24 |
| CVE-2026-78225 A hardcoded cryptographic server key vulnerability exists in the deployer-ng Upd... |
critical | 9.0 | — | — | 2026-09-15 | 2026-09-24 |
| CVE-2026-81855 A hardcoded cryptographic client authentication key vulnerability exists in the... |
critical | 9.1 | — | — | 2026-09-15 | 2026-09-24 |
| CVE-2026-54617 GravitLauncher is an open-source Minecraft launcher based on sashok724's v3. |
critical | 9.8 | — | — | 2026-09-17 | 2026-09-24 |
| CVE-2026-54626 SAIL is a cross-platform library for loading and saving images with support for... |
critical | 9.8 | — | — | 2026-09-17 | 2026-09-24 |
| CVE-2026-54752 NetBox Device Type Library is a collection of community-sourced device type defi... |
critical | 9.6 | — | — | 2026-09-17 | 2026-09-24 |
| CVE-2026-45140 Chamilo LMS is an open-source learning management system. |
critical | 9.8 | — | — | 2026-09-17 | 2026-09-24 |
| CVE-2026-61682 kcp is a Kubernetes-like control plane for form-factors and use-cases beyond Kub... |
critical | 9.9 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-59163 Mnemosyne is a memory layer for artificial intelligence agents. |
critical | 9.1 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-58264 FluidSynth is a software synthesizer based on the SoundFont 2 specifications. |
critical | 9.8 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-85751 Mailu is a mail server distributed as a set of Docker images. |
critical | 9.8 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-79920 Ajenti is a Linux & BSD modular server admin panel. |
critical | 9.9 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-58491 Warpgate is an open source SSH, HTTPS and MySQL bastion host for Linux. |
critical | 9.3 | — | — | 2026-09-21 | 2026-09-24 |
| CVE-2026-61550 Icinga 2 is an open source monitoring system. |
critical | 9.8 | — | — | 2026-09-18 | 2026-09-24 |
| CVE-2026-86124 AutoAgent contains an unauthenticated remote code execution vulnerability in the... |
critical | 9.8 | — | — | 2026-09-05 | 2026-09-24 |
| CVE-2026-91995 pig before 4.1.0 contains an authentication bypass vulnerability in the /registe... |
critical | 9.1 | — | — | 2026-09-15 | 2026-09-24 |
Sources: NIST NVD (CVE API 2.0) and the CISA KEV catalog. Severity is as stated by the source; missing values are shown as “not reported”, never estimated.