CVEs published September 7 to September 13, 2026
3,778 CVEs were published Sep 7 to Sep 13, 2026, 364 of them critical. CISA added 14 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 3,778
- Critical
- 364
- Added to CISA KEV
- 14
- Busiest day
- Tue, Sep 8 (1,563)
- Quietest day
- Sat, Sep 12 (94)
- September 7, 2026252 CVEs · 17 critical
- September 8, 20261,563 CVEs · 96 critical
- September 9, 2026653 CVEs · 60 critical
- September 10, 2026384 CVEs · 63 critical
- September 11, 2026700 CVEs · 109 critical
- September 12, 202694 CVEs · 13 critical
- September 13, 2026132 CVEs · 6 critical
Added to CISA KEV 14
- CVE-2026-75650Adobe Commerce | Improper Neutralization of Special Elements Used in a Template Engine (CWE-1336)Adobe Commerce · Adobe Magento Open Source
- CVE-2026-81963Windows Update Stack Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-85880Windows Advanced Local Procedure Call (ALPC) Elevation of Privilege VulnerabilityMicrosoft Windows
- CVE-2026-86218pre-authentication remote code executionN-able N-central
- CVE-2025-25249A heap-based buffer overflow vulnerability in Fortinet FortiOS 7.6.0 through 7.6.3, FortiOS 7.4.0 through 7.4.8, FortiOS 7.2.0 through 7.2.1Fortinet FortiSwitchManager · Fortinet FortiOS
- CVE-2026-19490NetScaler ADC and NetScaler Gateway Security Bulletin for CVE-2026-19490NetScaler ADC · NetScaler Gateway
- CVE-2026-20079Cisco Secure Firewall Management Center Authentication Bypass Remote Code Execution VulnerabilityCisco Secure Firewall Management Center
- CVE-2026-87491Out of bounds write in V8 in Google Chrome prior to 153.0.8010.36 allowed a remote attacker to execute arbitrary code inside the sandbox viaGoogle Chrome
- CVE-2026-67277Kernel memory disclosure and denial of service in MikroTik RouterOS btest serviceMikrotik RouterOS
- CVE-2026-86060SSH session privilege manipulation via a crafted username in Mikrotik RouterOSMikrotik RouterOS
- CVE-2026-42016Incorrect authorization validation of user token in JFrog Artifactory allows Privilege Escalationjfrog artifactory
- CVE-2026-42018Anonymous user token generation exposure in JFrog Artifactoryjfrog artifactory
- CVE-2026-84869ScreenConnect Client: Guest-to-Host File Execution via File-Transfer ActionsConnectWise ScreenConnect
- CVE-2026-85706Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal') in GitLabGitLab