September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs
2026-09-12T07:23:27Z•17d6e882b4c25334ce8b0905de4d60dc5aa5d4a69a45333ab085f7b275ba6499
AI securityCVEPatch TuesdaySality botnetagentic SOCbotnet disruptioncritical vulnerabilitiesendpoint securityenterprise securityexploited vulnerabilitiesidentity securitysoftware supply chainvulnerability managementzero-day
What happened
CrowdStrike’s September 2026 Patch Tuesday analysis reports 972 CVEs, including 113 rated critical and two zero-day vulnerabilities exploited in the wild. The feed also highlights security product announcements, AI-driven SOC and identity security, software supply-chain protection, botnet disruption, and AI security research.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- crowdstrike_blog
- Record identifier
- 17d6e882b4c25334ce8b0905de4d60dc5aa5d4a69a45333ab085f7b275ba6499
- Enrichment time
- 2026-09-12T07:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.