CVE-2026 records published in September 2026

This page lists the 14,718 CVE-2026 records published in September 2026, newest first, 1,000 to a page. The Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities (KEV) catalog lists 32 of them. Each CVE opens on cve-security.com with its sources, detection content and vendor fixes, and the search on the CVE-2026 list filters these records by severity or signal.

Critical

1,54910.5% of these records

Listed in CISA KEV

320.2% of these records

Reported exploited

500.3% of these records

Detection signal

570.4% of these records

Exploit code

2281.5% of these records

Actionable vendor fix

12,29283.5% of these records

Figures as of 2026-10-24 13:48 UTC. Records published in September 2026 have had from less than a month to about two months to collect KEV listings, exploitation reports, detection content and exploit code. Records published more recently have had less time, which can hold their shares down.