September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs
2026-09-15T07:23:27Z•b35155867b559b0634a0ca1b45377772775ad1f7274d647f08c94f438b54ae54
AI securityCVEPatch TuesdaySality botnetagentic SOCbotnet disruptioncloud workload protectioncritical vulnerabilitiesendpoint securityexploited vulnerabilitiesidentity securitysoftware supply chain securityvulnerability managementzero-day
What happened
CrowdStrike's September 2026 Patch Tuesday analysis reports 972 CVEs, including 113 rated critical and two exploited zero-days. The feed also covers AI-driven security operations, endpoint protection against software supply-chain attacks, identity security, botnet disruption, and cloud workload protection.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- crowdstrike_blog
- Record identifier
- b35155867b559b0634a0ca1b45377772775ad1f7274d647f08c94f438b54ae54
- Enrichment time
- 2026-09-15T07:23:27Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.