CVEs published in September 2026

CVE-2026-31407High

Linux Kernel Vulnerability in NetApp Products

CVE-2026-23468Medium

Linux Kernel Vulnerability in NetApp Products

CVE-2026-23444Medium

Linux Kernel Vulnerability in NetApp Products

CVE-2026-23442Medium

Linux Kernel Vulnerability in NetApp Products

CVE-2026-23399Medium

Linux Kernel Vulnerability in NetApp Products

CVE-2026-23389Medium

Linux Kernel Vulnerability in NetApp Products

CVE-2026-23310Medium

Linux Kernel Vulnerability in NetApp Products

CVE-2026-93378High

Missing authorization in Storage

CVE-2026-93380High

Race condition in FileSystem

CVE-2026-93377High

Type confusion in V8

CVE-2026-93387High

Cross-origin data disclosure via improper state validation

CVE-2026-93373Critical

Arbitrary code execution outside the sandbox via crafted extension

CVE-2026-92230High

Apache Karaf's XmlUtils cached XML parser/transformer factories in static ThreadLocal fields on long-lived container threads

CVE-2026-87958High

IBM Db2 Vulnerability in NetApp Products

CVE-2026-86093High

IBM Db2 Vulnerability in NetApp Products

CVE-2026-86087Medium

IBM Db2 Vulnerability in NetApp Products

CVE-2026-7884Critical

CVE-2026-53539Critical

CVE-2026-53538Critical

CVE-2026-48817Critical

CVE-2026-48735Critical

CVE-2026-48156Critical

CVE-2026-48155Critical

CVE-2026-4539Critical

CVE-2026-45232Low

Rsync Vulnerability in NetApp Products

CVE-2026-43620Medium

Rsync Vulnerability in NetApp Products

CVE-2026-43619High

Rsync Vulnerability in NetApp Products

CVE-2026-43617Medium

Rsync Vulnerability in NetApp Products

CVE-2026-42577Critical

CVE-2026-41586Critical

IBM Db2 Vulnerability in NetApp Products

CVE-2026-40864Critical

CVE-2026-33230Critical

CVE-2026-27903Critical

CVE-2026-27205Critical

CVE-2026-17463Medium

IBM Db2 Vulnerability in NetApp Products

CVE-2026-16702Medium

IBM Db2 Vulnerability in NetApp Products

CVE-2026-15955High

IBM Db2 Vulnerability in NetApp Products

CVE-2026-1561Critical

CVE-2026-0848Critical

CVE-2025-9096Critical

CVE-2025-9095Critical

CVE-2025-59375Critical

CVE-2025-36076Critical

CVE-2025-33147Critical

CVE-2025-33123Critical

CVE-2025-14923Critical

CVE-2025-14915Critical

CVE-2025-12635Critical

CVE-2024-56344Critical

CVE-2024-47764Critical

CVE-2024-47535Critical

CVE-2022-42969Critical

CVE-2026-70469High

Apache NiFi 2.11.0 disabled support for gzip-encoded HTTP requests for the application REST API and rejected requests that included the standard Content-Encoding header indicating gzip encoding

CVE-2026-81866Low

Apache NiFi 2.9.0 through 2.11.0 provide Connector configuration update and verification REST API methods that do not enforce authorization checking on Assets and Secrets referenced in proposed configuration

CVE-2026-82561Medium

Apache NiFi 1.5.0 through 2.11.0 provide REST API methods that replace the entire contents of a Process Group using a client-supplied flow definition, covering Process Group flow replacement together with versioned flow update and rebase operations

CVE-2026-86089Low

Apache NiFi 2.11.0 supports migrating the contents of a version-controlled Process Group into a Connector using REST API methods that list eligible migration sources and submit migration requests

CVE-2026-87976High

Apache NiFi Registry 0.4.0 through 2.11.0 are subject to path manipulation when storing extension bundle content using group, artifact, and version coordinates from uploaded NAR manifests

CVE-2026-76646High

remote attacker could cause excessive resource consumption by supplying specially crafted request parameters, potentially resulting in a denial of service condition

CVE-2026-68536Critical

Server-Side Request Forgery and Local File Inclusion Vulnerability

CVE-2024-20260High

Cisco Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense Software SSL VPN Denial of Service Vulnerability

CVE-2026-76451Medium

CVE-2026-76450Medium

CVE-2026-76449Medium

CVE-2026-76448Medium

CVE-2026-76447Medium

CVE-2026-76446Medium

CVE-2026-76444Medium

CVE-2026-76439Medium

CVE-2026-76438Medium

Cisco BroadWorks CommPilot Application Software Authorization Bypass Vulnerability

CVE-2026-76434Medium

CVE-2026-76433Medium

CVE-2026-76432Medium

CVE-2026-76431Medium

CVE-2026-76420Critical

CVE-2026-76413Critical

CVE-2026-76412Critical

CVE-2026-76409Critical

CVE-2026-20361Critical

CVE-2026-20360Critical

CVE-2026-20350Medium

Cisco ThousandEyes Virtual Appliance Authenticated Web Interface Command Injection Vulnerability

CVE-2026-20344Critical

CVE-2026-20343Critical

CVE-2026-20342Critical

CVE-2026-20341Critical

CVE-2026-20340Critical

CVE-2026-20336Critical

CVE-2026-20335Critical

CVE-2026-20334Critical

CVE-2026-20333Critical

CVE-2026-20332Critical

CVE-2026-20331Critical

CVE-2026-20330Critical

CVE-2026-20329Critical

CVE-2026-20326Critical

CVE-2026-20325Critical

CVE-2026-20324Critical

Cisco Secure Firewall Management Center Software sftunnel Root Arbitrary Code Execution Vulnerability

CVE-2026-20323High

CVE-2026-20322Critical

CVE-2026-20309Medium

Cisco Identity Services Engine Cross-Site Scripting Vulnerability

CVE-2026-20295High