September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs

2026-09-14T19:23:27Z•aa77c376ebde0c0c0a84c4b6860f6d07bba06bcd2fd776f603f85ba5d26e4b1c
AI securityCVEPatch TuesdaySality botnetagentic SOCbotnet disruptioncloud workload protectioncritical vulnerabilitiesendpoint securityexploited vulnerabilitiessoftware supply chain securityvulnerability managementzero-day

What happened

CrowdStrike’s September 2026 Patch Tuesday analysis reports 972 CVEs, including 113 rated critical and two exploited zero-day vulnerabilities. The feed also covers botnet disruption, software supply-chain security, endpoint protection, cloud workload security and AI-enabled SOC operations.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
crowdstrike_blog
Record identifier
aa77c376ebde0c0c0a84c4b6860f6d07bba06bcd2fd776f603f85ba5d26e4b1c
Enrichment time
2026-09-14T19:23:27Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.