CVEs published September 28 to October 4, 2026
2,537 CVEs were published Sep 28 to Oct 4, 2026, 320 of them critical. CISA added 6 vulnerabilities to its Known Exploited Vulnerabilities catalog.
- CVEs published
- 2,537
- Critical
- 320
- Added to CISA KEV
- 6
- Busiest day
- Wed, Sep 30 (636)
- Quietest day
- Sun, Oct 4 (64)
- September 28, 2026314 CVEs · 46 critical
- September 29, 2026611 CVEs · 96 critical
- September 30, 2026636 CVEs · 67 critical
- October 1, 2026400 CVEs · 52 critical
- October 2, 2026398 CVEs · 41 critical
- October 3, 2026114 CVEs · 5 critical
- October 4, 202664 CVEs · 13 critical
Added to CISA KEV 6
- CVE-2026-86950An out-of-bounds write issue was addressed with improved bounds checking.Apple iOS and iPadOS · Apple macOS
- CVE-2026-76504Cisco Catalyst SD-WAN Manager System Account Authorization Bypass VulnerabilityCisco Catalyst SD-WAN Manager
- CVE-2026-104286An improper limitation of a pathname to a restricted directory ('path traversal') vulnerability in Fortinet FortiMail 8.0.0 through 8.0.1, FFortinet FortiMail
- CVE-2026-102489Undisclosed RCE in Zammad v6.3 and higherZammad
- CVE-2026-102490Local privilege escalation in Zammad v1.5.0 to v7.2.2 installed via DEB or RPM packageZammad
- CVE-2026-88779Memory overflow vulnerability leading to Denial of ServiceNetScaler ADC · NetScaler Gateway