September 2026 Patch Tuesday: Two Exploited Zero-Days and 113 Critical Vulnerabilities Among 972 CVEs

2026-09-09T19:23:28Zc8c3a57ae436d8ae51a66bb7219284c8b3daebd90fda0fb210b879d9cf0fea4c
critical-vulnerabilitiescveexploited-vulnerabilitiespatch-tuesdayvulnerability-managementzero-day

What happened

CrowdStrike’s September 2026 Patch Tuesday analysis reports 972 CVEs, including 113 rated critical and two exploited zero-day vulnerabilities. The item is a broad vulnerability and active-exploitation update, but the supplied metadata does not identify the affected products, CVE identifiers, or exploitation details.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID
crowdstrike_blog
Record identifier
c8c3a57ae436d8ae51a66bb7219284c8b3daebd90fda0fb210b879d9cf0fea4c
Enrichment time
2026-09-09T19:23:28Z
AI-assisted enrichment
Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.