September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs
2026-09-09T07:23:27Z•347a1590fb8adbbf2df76bcdbfa2b18f6bb996a6ed079a3a07ee762aa7e89392
agentic-socai-securitybotnet-disruptioncritical-vulnerabilitiescveexploited-vulnerabilityidentity-securitymicrosoft-security-updatespatch-tuesdaysalitysoftware-supply-chain-securityzero-day
What happened
CrowdStrike’s September 8, 2026 Patch Tuesday analysis reports 972 CVEs, including 113 rated critical and two exploited zero-day vulnerabilities. The broader feed also covers agentic SOC and AI security developments, software supply-chain attack prevention, identity security, and Sality botnet disruption.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- crowdstrike_blog
- Record identifier
- 347a1590fb8adbbf2df76bcdbfa2b18f6bb996a6ed079a3a07ee762aa7e89392
- Enrichment time
- 2026-09-09T07:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.