CISA Known Exploited Vulnerabilities
KEV additions — September 2026
41 CVEs entered the KEV catalog in September 2026.
Get an alert for each new CVE published for the software you run.
Set up CVE WatchFree account · no credit card
Added September 30, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-76504 | Cisco Catalyst SD-WAN Manager System Account Authorization Bypass Vulnerability | 9.8 | 1.8 % | Oct 3, 2026 |
Added September 29, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-86950 | Apple Multiple Products Out-of-Bounds Write Vulnerability | 8.8 | 1.2 % | Oct 2, 2026 |
Added September 27, 20262
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-88771 | Citrix NetScaler Improper Input Validation Vulnerability | 9.8 | 1.1 % | Sep 30, 2026 |
| CVE-2026-88772 | Citrix NetScaler Improper Restriction of Operations within the Bounds of a Memory Buffer Vulnerability | 8.1 | 1.3 % | Sep 30, 2026 |
Added September 25, 20263
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-65660 | Microsoft SharePoint Code Injection Vulnerability | 6.5 | 2.1 % | Sep 28, 2026 |
| CVE-2026-67279 | Mikrotik RouterOS Improper Enforcement of Behavioral Workflow Vulnerability | — | 1.0 % | Sep 28, 2026 |
| CVE-2026-87902 | WordPress Core Remote File Inclusion Vulnerability | 8.1 | 40.0 % | Sep 28, 2026 |
Added September 24, 20262
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-5430 | WSO2 Multiple Products Path Traversal Vulnerability | 10 | 0.6 % | Sep 27, 2026 |
| CVE-2026-71362 | Adobe Commerce and Magento Incorrect Authorization Vulnerability | 9.1 | 87.5 % | Sep 27, 2026 |
Added September 22, 20264
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-85102 | Check Point Multiple Products Improper Certificate Validation Vulnerability | 9.8 | 50.4 % | Sep 25, 2026 |
| CVE-2026-93616 | Check Point Multiple Products Path Traversal Vulnerability | 9.8 | 75.9 % | Sep 25, 2026 |
| CVE-2026-93952 | Arista VeloCloud Orchestrator Improper Input Validation Vulnerability | 10 | 1.1 % | Sep 25, 2026 |
| CVE-2026-94127 | BIG-IP APM OAuth vulnerability | 9.8 | 2.2 % | Sep 25, 2026 |
Added September 18, 20263
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-39682 | Linux Kernel Improper Check for Unusual or Exceptional Conditions Vulnerability | 9.8 | 2.9 % | Sep 21, 2026 |
| CVE-2025-39964 | Linux Kernel Race Condition Vulnerability | 3.3 | 1.4 % | Sep 21, 2026 |
| CVE-2026-53266 | Linux Kernel Out-of-Bounds Write Vulnerability | 6.8 | 0.8 % | Sep 21, 2026 |
Added September 16, 20263
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-58704 | Google Pixel Improper Authorization Vulnerability | 8.8 | 0.6 % | Sep 19, 2026 |
| CVE-2026-76460 | Cisco Identity Services Engine Incorrect Use of Privileged APIs Vulnerability | 10 | 14.0 % | Sep 19, 2026 |
| CVE-2026-87886 | Acronis Backup Incorrect Default Permissions Vulnerability | 7.8 | 0.2 % | Sep 19, 2026 |
Added September 14, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-76461 | Cisco Secure Email Gateway SQL Injection Vulnerability | 9.8 | 29.5 % | Sep 17, 2026 |
Added September 11, 20264
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-42016 | JFrog Artifactory Incorrect Authorization Vulnerability | 8.1 | 8.6 % | Sep 25, 2026 |
| CVE-2026-42018 | JFrog Artifactory Improper Authentication Vulnerability | 7.5 | 9.8 % | Sep 25, 2026 |
| CVE-2026-84869 | ConnectWise ScreenConnect Improper Privilege Management and Missing Authorization Vulnerability | 9.9 | 0.9 % | Sep 14, 2026 |
| CVE-2026-85706 | GitLab Community Edition and Enterprise Edition Path Traversal Vulnerability | 10 | 93.0 % | Sep 14, 2026 |
Added September 10, 20262
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-67277 | MikroTik RouterOS Missing Authentication for Critical Function Vulnerability | — | 1.6 % | Sep 13, 2026 |
| CVE-2026-86060 | MikroTik RouterOS Improper Neutralization of Argument Delimiters in a Command Vulnerability | — | 6.4 % | Sep 13, 2026 |
Added September 9, 20264
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2025-25249 | Fortinet Multiple Products Heap-based Buffer Overflow Vulnerability | 8.1 | 3.8 % | Sep 12, 2026 |
| CVE-2026-19490 | Citrix NetScaler Authentication Bypass Using an Alternate Path or Channel Vulnerability | — | 23.2 % | Sep 12, 2026 |
| CVE-2026-20079 | Cisco Firewall Management Center Authentication Bypass Using an Alternate Path or Channel Vulnerability | 10 | 88.2 % | Sep 12, 2026 |
| CVE-2026-87491 | Google Chromium V8 Out of Bounds Write Vulnerability | 8.8 | 3.1 % | Sep 23, 2026 |
Added September 8, 20264
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-75650 | Adobe Commerce and Magento Improper Neutralization of Special Elements Used in a Template Engine Vulnerability | 10 | 3.9 % | Sep 11, 2026 |
| CVE-2026-81963 | Microsoft Windows Link Following Vulnerability | 7.8 | 0.4 % | Sep 22, 2026 |
| CVE-2026-85880 | Microsoft Windows Heap-Based Buffer Overflow Vulnerability | 7.8 | 3.6 % | Sep 22, 2026 |
| CVE-2026-86218 | N-able N-central Static Code Injection Vulnerability | — | 13.3 % | Sep 11, 2026 |
Added September 4, 20261
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-85046 | Google Chromium V8 Type Confusion Vulnerability | 8.8 | 48.9 % | Sep 18, 2026 |
Added September 2, 20266
| CVE | Vulnerability | CVSS | EPSS | Due date |
|---|---|---|---|---|
| CVE-2026-48710 | Kludex Starlette HTTP Request/Response Smuggling Vulnerability | 6.5 | 7.1 % | Sep 16, 2026 |
| CVE-2026-59822 | BerriAI LiteLLM Improper Authentication Vulnerability | — | 0.8 % | Sep 16, 2026 |
| CVE-2026-82329 | JFrog Artifactory Improper Authentication Vulnerability | 9.8 | 14.1 % | Sep 5, 2026 |
| CVE-2026-83548 | SonicWall SMA1000 Appliances Server-Side Request Forgery Vulnerability | 10 | 8.0 % | Sep 5, 2026 |
| CVE-2026-83549 | SonicWall SMA1000 Appliances OS Command Injection Vulnerability | 7.8 | 9.9 % | Sep 5, 2026 |
| CVE-2026-9586 | Unauthenticated SQL Injection Leading to Remote Code Execution in Switchvox SMB | — | 19.0 % | Sep 5, 2026 |