CVE Tools
Track your stack

Networking & Infrastructure

29,101 CVEs tracked since 1999. In the last 12 months, 5,567, +65% on the 12 before.

Networking & Infrastructure by subsector, Oct 2026 so far

Oct 2026 so far: 808 CVEs across 7 subsectors. Area is each subsector's share; inside are the products it counted most. Point at one to read it.
  • Not yet sub-classified329The tagger has not placed these yet
  • Routers & switches15820% · 21 vendors
  • Load balancers & proxies14117% · 21 vendors
  • Network management12415% · 11 vendors
  • Firewalls385% · 5 vendors

Also: DNS, DHCP & NTP 16, VPN gateways 2.

Month by month

Every monthly snapshot of Networking & Infrastructure. A column is the CVEs published that month.

Oct 2021 to Oct 2026. Point at a month, or focus the strip and use the arrow keys.
Networking & Infrastructure CVEs per month
MonthCVEs
2021-10194
2021-1179
2021-12350
2022-0195
2022-02198
2022-03212
2022-04178
2022-05249
2022-06133
2022-07206
2022-08324
2022-09200
2022-10206
2022-11218
2022-12263
2023-01208
2023-02222
2023-030
2023-04282
2023-05181
2023-06143
2023-07148
2023-08286
2023-09201
2023-10311
2023-11207
2023-12210
2024-01297
2024-02153
2024-03299
2024-04337
2024-05511
2024-06134
2024-07286
2024-08249
2024-09255
2024-10313
2024-11332
2024-12107
2025-01337
2025-02203
2025-03256
2025-04234
2025-05388
2025-06328
2025-07325
2025-08318
2025-09236
2025-10330
2025-11177
2025-12278
2026-01313
2026-02392
2026-03521
2026-04585
2026-05791
2026-06383
2026-07441
2026-08548
2026-09808
2026-10808

Vendors

Who shipped the most Networking & Infrastructure CVEs in Oct 2026 so far, with their rank across all vendors.

  1. Juniper153#9
  2. Cisco71#17
  3. Brocade61#21
  4. Hewlett Packard Enterprise47#27
  5. Totolink37#42
  6. Arista Networks25#61
  7. Progress Software25#62
  8. Netgate21#72

Weaknesses

The weakness classes behind Networking & Infrastructure CVEs in Oct 2026 so far.

  1. CWE-79 XSS34
  2. CWE-306 Missing Auth for Critical Function27
  3. CWE-125 Out-of-bounds Read26
  4. CWE-22 Path Traversal26
  5. CWE-122 Heap Buffer Overflow24
  6. CWE-284 Improper Access Control18

Latest CVEs

The 15 most recently published vulnerabilities in Networking & Infrastructure.

  1. CVE-2026-119251A malicious actor with local access and high privileges could exploit an Improper Access Control vulnerability found in WiFiman Desktop for macOS to escalate privileges on the host device.6.7
  2. CVE-2026-119250A malicious actor with local access and low privileges could exploit an External Control of File Name or Path vulnerability found in WiFiman Desktop for macOS to execute arbitrary commands with roo...7.8
  3. CVE-2026-119249A malicious actor with access to the network could exploit a Binding to an Unrestricted IP Address vulnerability found in WiFiman Desktop for macOS to obtain information about the host device.7.5
  4. CVE-2026-90872Server-Side Script Injection in Manager Web UI in Progress WS_FTP Server6.6
  5. CVE-2026-90871Path Traversal Leading to File Deletion in Ad Hoc Transfer and Web Transfer in Progress WS_FTP Server5.3
  6. CVE-2026-90870Unauthenticated Ad Hoc Transfer Resource Exhaustion in Progress WS_FTP Server5.3
  7. CVE-2026-90869Pre-Authentication SSH Denial of Service via Malformed Public-Key Signature in Progress WS_FTP Server7.5
  8. CVE-2026-90868OS Command Injection in Progress WS_FTP Server9.9
  9. CVE-2026-90867Improper Access Control of Web Admin Console in Progress WS_FTP Server8.1
  10. CVE-2026-90866Virtual Folder Path Confinement Bypass in Progress WS_FTP Server9.1
  11. CVE-2026-90865Command Injection via FTP Notification Variables in Progress WS_FTP Server9.0
  12. CVE-2026-90864Host Administrator Path Containment Bypass in Progress WS_FTP Server9.1
  13. CVE-2026-90863Privilege Escalation via Missing Authorization in WS_FTP Manager9.1
  14. CVE-2026-90862Web Transfer Module Multi-Factor Authentication Bypass in Progress WS_FTP Server4.3
  15. CVE-2026-90861Password Disclosure via Activity Logs Enabling Administrator Privilege Escalation in WS_FTP Server6.6

The record

Busiest month
Oct 2026 so far, 808 CVEs
Oct 2026 so far
808 CVEs from 87 vendors
Deployment
On-prem, 79%
Monthly snapshots
298 since 1999
All 15 sectors on one map

Is your business exposed to threats like these?

Discuss a security assessment of your internet-facing systems. Scope, price and timing agreed before testing.

Request an assessment