CVE Tools
Track your stack

ICS, OT & IoT

12,805 CVEs tracked since 2000. In the last 12 months, 2,458, +47% on the 12 before.

ICS, OT & IoT by subsector, Oct 2026 so far

Oct 2026 so far: 185 CVEs across 6 subsectors. Area is each subsector's share; inside are the products it counted most. Point at one to read it.
  • Not yet sub-classified61The tagger has not placed these yet
  • Industrial networking5630% · 17 vendors
  • Building automation2212% · 3 vendors
  • IP cameras & NVRs1910% · 3 vendors
  • PLC, SCADA & HMI148% · 6 vendors
  • Smart home137% · 4 vendors

Month by month

Every monthly snapshot of ICS, OT & IoT. A column is the CVEs published that month.

Oct 2021 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
ICS, OT & IoT CVEs per month
MonthCVEs
2021-1081
2021-1162
2021-12166
2022-01164
2022-02111
2022-03127
2022-04156
2022-0596
2022-06162
2022-07132
2022-08144
2022-09107
2022-1091
2022-11100
2022-12101
2023-01253
2023-02119
2023-030
2023-04100
2023-05154
2023-06142
2023-07178
2023-08189
2023-09102
2023-10155
2023-11148
2023-12100
2024-01161
2024-0294
2024-03108
2024-04110
2024-05219
2024-0690
2024-07117
2024-0893
2024-09104
2024-1095
2024-11181
2024-12100
2025-0198
2025-02102
2025-03113
2025-04101
2025-05180
2025-06149
2025-07259
2025-08126
2025-09172
2025-10204
2025-11158
2025-12310
2026-01241
2026-02207
2026-03176
2026-04128
2026-05226
2026-06209
2026-07196
2026-08132
2026-09271
2026-10185

Vendors

Who shipped the most ICS, OT & IoT CVEs in Oct 2026 so far, with their rank across all vendors.

  1. Advantech25#60
  2. Johnson Controls14#107
  3. Nasa14#108
  4. Kiloview9#184

Weaknesses

The weakness classes behind ICS, OT & IoT CVEs in Oct 2026 so far.

  1. CWE-125 Out-of-bounds Read12
  2. CWE-639 Auth Bypass via User Key11
  3. CWE-306 Missing Auth for Critical Function9
  4. CWE-89 SQL Injection9
  5. CWE-79 XSS8
  6. CWE-22 Path Traversal8

Latest CVEs

The 15 most recently published vulnerabilities in ICS, OT & IoT.

  1. CVE-2026-115793Resource exhaustion from RPC sessions kept for requests to unknown interface—
  2. CVE-2026-115794Alarm data length not validated against received frame length—
  3. CVE-2026-115795Out-of-bounds read of DCP block header in DCP Set and Identify request parsing—
  4. CVE-2026-111736NULL pointer dereference on implicit read of user specific record index—
  5. CVE-2026-112200Resource exhaustion from unreleased AR and RPC session on RPC requests with incorrect endianness—
  6. CVE-2026-111735Integer underflow leads to out-of-bounds read in pf_cpm_c_data_ind()—
  7. CVE-2026-111734Missing length validation of EtherType, VLAN and FrameID fields in pf_eth_recv()—
  8. CVE-2026-111733NULL pointer dereference on implicit read of AR specific record index—
  9. CVE-2026-111732Out-of-bounds write when parsing AR Vendor Block requests—
  10. CVE-2026-111731Infinite loop when reading PDPortDataCheck record of subslot 0—
  11. CVE-2026-111730Out-of-bounds write in CheckPeers block parser due to unvalidated peer station name length—
  12. CVE-2026-75520Domoticz: Missing authorization and path traversal in the udevices Lua parser handler5.4
  13. CVE-2026-118690Signal K Server before 2.33.0 Missing Authentication via /skServer/ziplogs9.8
  14. CVE-2026-59177ESPHome Device Builder allows unauthenticated dashboard access via the HA add-on ingress site bound to all interfaces8.8
  15. CVE-2026-105457Authenticated Arbitrary Local File Read via Path Traversal in HAVELSAN's Liman MYS6.5

The record

Busiest month
Dec 2025, 310 CVEs
Oct 2026 so far
185 CVEs from 39 vendors
Deployment
On-prem, 85%
Monthly snapshots
234 since 2000
All 15 sectors on one map

Is your business exposed to threats like these?

Discuss a security assessment of your internet-facing systems. Scope, price and timing agreed before testing.

Request an assessment