September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs
2026-09-11T19:23:27Z•99cd9233857668bb909637744af7e71c489c8e90451fbaaddf543c1c8fb0347e
AI securityCVEPatch TuesdaySality botnetagentic SOCbotnet disruptioncritical vulnerabilitiesexploited vulnerabilitiessoftware supply chain securityvulnerability managementzero-day
What happened
CrowdStrike’s September 2026 Patch Tuesday analysis reports 972 CVEs, including 113 rated critical and two zero-days exploited in the wild. The feed also covers botnet disruption, software supply-chain security, agentic SOC and AI security developments, but provides no specific CVE identifiers in the supplied metadata.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- crowdstrike_blog
- Record identifier
- 99cd9233857668bb909637744af7e71c489c8e90451fbaaddf543c1c8fb0347e
- Enrichment time
- 2026-09-11T19:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.