Vulnerabilities added to KEV in September 2026
Added43
Ransomware-linked0
Vendors25
By vendor
4
3
3
3
3
3
3
2
2
2
Nearby months
| CVE | Vendor / product | Added | EPSS | Ransomware |
|---|---|---|---|---|
| CVE-2026-76504 | Cisco Catalyst SD-WAN Manager | 2026-09-30 | 1.8% | Unknown |
| CVE-2026-86950 | Apple Multiple Products | 2026-09-29 | 1.2% | Unknown |
| CVE-2026-88772 | Citrix NetScaler | 2026-09-27 | 1.3% | Unknown |
| CVE-2026-88771 | Citrix NetScaler | 2026-09-27 | 1.0% | Unknown |
| CVE-2026-87902 | WordPress Core | 2026-09-25 | 39.9% | Unknown |
| CVE-2026-67279 | MikroTik RouterOS | 2026-09-25 | 1.0% | Unknown |
| CVE-2026-65660 | Microsoft SharePoint | 2026-09-25 | 2.1% | Unknown |
| CVE-2026-71362 | Adobe Commerce and Magento | 2026-09-24 | 87.5% | Unknown |
| CVE-2026-5430 | WSO2 Multiple Products | 2026-09-24 | 0.5% | Unknown |
| CVE-2026-94127 | F5 BIG-IP APM | 2026-09-22 | 2.2% | Unknown |
| CVE-2026-93952 | Arista VeloCloud Orchestrator | 2026-09-22 | 1.0% | Unknown |
| CVE-2026-93616 | Check Point Multiple Products | 2026-09-22 | 19.6% | Unknown |
| CVE-2026-85102 | Check Point Multiple Products | 2026-09-22 | 7.5% | Unknown |
| CVE-2026-7273 | Zyxel GS1900 Series Switches | 2026-09-21 | 2.5% | Unknown |
| CVE-2026-53266 | Linux Kernel | 2026-09-18 | 0.8% | Unknown |
| CVE-2025-39964 | Linux Kernel | 2026-09-18 | 1.2% | Unknown |
| CVE-2025-39682 | Linux Kernel | 2026-09-18 | 2.8% | Unknown |
| CVE-2026-87886 | Acronis Backup | 2026-09-16 | 0.2% | Unknown |
| CVE-2026-76460 | Cisco Identity Services Engine | 2026-09-16 | 14.0% | Unknown |
| CVE-2026-58704 | Google Pixel | 2026-09-16 | 0.5% | Unknown |
| CVE-2026-76461 | Cisco Secure Email Gateway | 2026-09-14 | 28.2% | Unknown |
| CVE-2026-85706 | GitLab Community Edition and Enterprise Edition | 2026-09-11 | 92.9% | Unknown |
| CVE-2026-84869 | ConnectWise ScreenConnect | 2026-09-11 | 0.9% | Unknown |
| CVE-2026-42018 | JFrog Artifactory | 2026-09-11 | 9.8% | Unknown |
| CVE-2026-42016 | JFrog Artifactory | 2026-09-11 | 8.6% | Unknown |
| CVE-2026-86060 | MikroTik RouterOS | 2026-09-10 | 6.3% | Unknown |
| CVE-2026-67277 | MikroTik RouterOS | 2026-09-10 | 1.5% | Unknown |
| CVE-2026-87491 | Google Chromium V8 | 2026-09-09 | 3.1% | Unknown |
| CVE-2026-20079 | Cisco Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management | 2026-09-09 | 88.1% | Unknown |
| CVE-2026-19490 | Citrix NetScaler | 2026-09-09 | 23.1% | Unknown |
| CVE-2025-25249 | Fortinet Multiple Products | 2026-09-09 | 3.8% | Unknown |
| CVE-2026-86218 | N-able N-central | 2026-09-08 | 12.9% | Unknown |
| CVE-2026-85880 | Microsoft Windows | 2026-09-08 | 3.6% | Unknown |
| CVE-2026-81963 | Microsoft Windows | 2026-09-08 | 0.3% | Unknown |
| CVE-2026-75650 | Adobe Commerce and Magento | 2026-09-08 | 3.9% | Unknown |
| CVE-2026-85046 | Google Chromium V8 | 2026-09-04 | 48.8% | Unknown |
| CVE-2026-9586 | Sangoma Switchvox | 2026-09-02 | 18.9% | Unknown |
| CVE-2026-83549 | SonicWall SMA1000 Appliances | 2026-09-02 | 10.7% | Unknown |
| CVE-2026-83548 | SonicWall SMA1000 Appliances | 2026-09-02 | 8.7% | Unknown |
| CVE-2026-82329 | JFrog Artifactory | 2026-09-02 | 14.1% | Unknown |
| CVE-2026-59822 | BerriAI LiteLLM | 2026-09-02 | 0.8% | Unknown |
| CVE-2026-49869 | Kestra Kestra OSS | 2026-09-02 | 2.0% | Unknown |
| CVE-2026-48710 | Kludex Starlette | 2026-09-02 | 7.0% | Unknown |
Data from CISA's Known Exploited Vulnerabilities (KEV) catalog. EPSS is FIRST's estimated probability of exploitation activity in the next 30 days, refreshed weekly. Always follow the vendor's official guidance.