CVEs published September 14 to September 20, 2026
4,826 CVEs were published Sep 14 to Sep 20, 2026, 519 of them critical. CISA added 7 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 4,826
- Critical
- 519
- Added to CISA KEV
- 7
- Busiest day
- Tue, Sep 15 (1,426)
- Quietest day
- Sat, Sep 19 (103)
- September 14, 2026779 CVEs · 65 critical
- September 15, 20261,426 CVEs · 201 critical
- September 16, 2026871 CVEs · 97 critical
- September 17, 20261,031 CVEs · 84 critical
- September 18, 2026511 CVEs · 51 critical
- September 19, 2026103 CVEs · 8 critical
- September 20, 2026105 CVEs · 13 critical
Added to CISA KEV 7
- CVE-2026-76461Cisco Secure Email Gateway SQL Injection VulnerabilityCisco Secure Email
- CVE-2026-58704In Cellular Modem, there is a possible permission bypass due to a logic error in the code.Google Android
- CVE-2026-76460Cisco Identity Services Engine Authentication Bypass VulnerabilityCisco Identity Services Engine Software · Cisco ISE Passive…
- CVE-2026-87886Local privilege escalation due to insecure file permissions.Acronis Backup plugin for cPanel & WHM · Acronis Backup… +1
- CVE-2025-39682tls: fix handling of zero-length records on the rx_listLinux · :linux_kernel:
- CVE-2025-39964crypto: af_alg - Disallow concurrent writes in af_alg_sendmsgLinux
- CVE-2026-53266netfilter: bridge: make ebt_snat ARP rewrite writableLinux