CVE Tools
Track your stack

Monthly CVE trends

September 2026 was the busiest month on record: 15,180 CVEs, 3.3× September 2025. CISA added 43 to KEV, against a 12-month median of 26.

Every month on record

September 1999 to now: 396,796 CVEs across 307 monthly snapshots. Point at a month to read it; open it for the full report.
CVEs published per month, with CISA KEV additions, by year
YearJanFebMarAprMayJunJulAugSepOctNovDecYear total
2026January 2026: 5,244 CVEs17 added to CISA KEVFebruary 2026: 4,931 CVEs28 added to CISA KEVMarch 2026: 6,821 CVEs26 added to CISA KEVApril 2026: 6,440 CVEs31 added to CISA KEVMay 2026: 7,365 CVEs21 added to CISA KEVJune 2026: 8,314 CVEs23 added to CISA KEVJuly 2026: 10,240 CVEs26 added to CISA KEVAugust 2026: 12,909 CVEs31 added to CISA KEVSeptember 2026: 15,180 CVEs43 added to CISA KEVOctober 2026 so far: 14,075 CVEs26 added to CISA KEV91,519+105%so far
2025January 2025: 4,463 CVEs14 added to CISA KEVFebruary 2025: 3,940 CVEs27 added to CISA KEVMarch 2025: 4,251 CVEs32 added to CISA KEVApril 2025: 4,282 CVEs15 added to CISA KEVMay 2025: 4,361 CVEs24 added to CISA KEVJune 2025: 3,875 CVEs20 added to CISA KEVJuly 2025: 4,086 CVEs20 added to CISA KEVAugust 2025: 3,871 CVEs15 added to CISA KEVSeptember 2025: 4,664 CVEs16 added to CISA KEVOctober 2025: 4,544 CVEs31 added to CISA KEVNovember 2025: 3,194 CVEs11 added to CISA KEVDecember 2025: 5,771 CVEs20 added to CISA KEV51,302+23%
2024January 2024: 2,698 CVEs21 added to CISA KEVFebruary 2024: 2,983 CVEs9 added to CISA KEVMarch 2024: 3,374 CVEs10 added to CISA KEVApril 2024: 3,769 CVEs10 added to CISA KEVMay 2024: 5,418 CVEs14 added to CISA KEVJune 2024: 3,333 CVEs9 added to CISA KEVJuly 2024: 3,248 CVEs14 added to CISA KEVAugust 2024: 3,024 CVEs19 added to CISA KEVSeptember 2024: 2,594 CVEs25 added to CISA KEVOctober 2024: 3,667 CVEs17 added to CISA KEVNovember 2024: 4,154 CVEs22 added to CISA KEVDecember 2024: 3,514 CVEs16 added to CISA KEV41,776+34%
2023January 2023: 2,619 CVEs5 added to CISA KEVFebruary 2023: 2,562 CVEs14 added to CISA KEVMarch 2023: no snapshotApril 2023: 2,356 CVEs17 added to CISA KEVMay 2023: 2,766 CVEs19 added to CISA KEVJune 2023: 2,448 CVEs24 added to CISA KEVJuly 2023: 2,380 CVEs16 added to CISA KEVAugust 2023: 2,549 CVEs8 added to CISA KEVSeptember 2023: 2,863 CVEs19 added to CISA KEVOctober 2023: 2,764 CVEs18 added to CISA KEVNovember 2023: 2,560 CVEs18 added to CISA KEVDecember 2023: 2,769 CVEs11 added to CISA KEV28,63611 of 12 months11/12
2022January 2022: 2,210 CVEs40 added to CISA KEVFebruary 2022: 2,053 CVEs32 added to CISA KEVMarch 2022: 2,136 CVEs226 added to CISA KEVApril 2022: 2,106 CVEs45 added to CISA KEVMay 2022: 2,205 CVEs83 added to CISA KEVJune 2022: 2,302 CVEs48 added to CISA KEVJuly 2022: 2,201 CVEs3 added to CISA KEVAugust 2022: 2,435 CVEs23 added to CISA KEVSeptember 2022: 2,210 CVEs24 added to CISA KEVOctober 2022: 1,936 CVEs12 added to CISA KEVNovember 2022: 2,135 CVEs10 added to CISA KEVDecember 2022: 2,862 CVEs9 added to CISA KEV26,791+18%
2021January 2021: 1,970 CVEsFebruary 2021: 1,557 CVEsMarch 2021: no snapshotApril 2021: 1,970 CVEsMay 2021: 1,580 CVEsJune 2021: 1,985 CVEsJuly 2021: 1,650 CVEsAugust 2021: 2,317 CVEsSeptember 2021: 1,933 CVEsOctober 2021: 1,759 CVEsNovember 2021: 1,694 CVEs291 added to CISA KEVDecember 2021: 2,520 CVEs20 added to CISA KEV20,93511 of 12 months11/12
2020January 2020: 1,984 CVEsFebruary 2020: 1,491 CVEsMarch 2020: 1,810 CVEsApril 2020: no snapshotMay 2020: no snapshotJune 2020: 1,894 CVEsJuly 2020: no snapshotAugust 2020: 1,297 CVEsSeptember 2020: 2,258 CVEsOctober 2020: 1,621 CVEsNovember 2020: 1,485 CVEsDecember 2020: 1,618 CVEs15,4589 of 12 months9/12
2019January 2019: no snapshotFebruary 2019: 908 CVEsMarch 2019: no snapshotApril 2019: no snapshotMay 2019: 1,366 CVEsJune 2019: no snapshotJuly 2019: 1,752 CVEsAugust 2019: 2,064 CVEsSeptember 2019: 1,568 CVEsOctober 2019: 1,799 CVEsNovember 2019: 1,802 CVEsDecember 2019: 1,881 CVEs13,1408 of 12 months8/12
2018January 2018: 1,715 CVEsFebruary 2018: 1,350 CVEsMarch 2018: 2,306 CVEsApril 2018: no snapshotMay 2018: no snapshotJune 2018: 1,804 CVEsJuly 2018: 2,225 CVEsAugust 2018: 1,057 CVEsSeptember 2018: 1,209 CVEsOctober 2018: 1,483 CVEsNovember 2018: no snapshotDecember 2018: 1,212 CVEs14,3619 of 12 months9/12
2017January 2017: no snapshotFebruary 2017: 1,075 CVEsMarch 2017: 1,373 CVEsApril 2017: no snapshotMay 2017: 4,155 CVEsJune 2017: no snapshotJuly 2017: 1,313 CVEsAugust 2017: 1,564 CVEsSeptember 2017: 1,238 CVEsOctober 2017: 1,441 CVEsNovember 2017: no snapshotDecember 2017: 1,120 CVEs13,2798 of 12 months8/12
2016January 2016: 670 CVEsFebruary 2016: 394 CVEsMarch 2016: 333 CVEsApril 2016: 661 CVEsMay 2016: 617 CVEsJune 2016: 515 CVEsJuly 2016: 789 CVEsAugust 2016: no snapshotSeptember 2016: 597 CVEsOctober 2016: 697 CVEsNovember 2016: no snapshotDecember 2016: 527 CVEs5,80010 of 12 months10/12
2015January 2015: 737 CVEsFebruary 2015: 496 CVEsMarch 2015: 457 CVEsApril 2015: 558 CVEsMay 2015: 417 CVEsJune 2015: 499 CVEsJuly 2015: 644 CVEsAugust 2015: 625 CVEsSeptember 2015: 499 CVEsOctober 2015: 739 CVEsNovember 2015: 368 CVEsDecember 2015: 567 CVEs6,606−18%
2014January 2014: 579 CVEsFebruary 2014: 445 CVEsMarch 2014: 545 CVEsApril 2014: 676 CVEsMay 2014: 555 CVEsJune 2014: 448 CVEsJuly 2014: 656 CVEsAugust 2014: 407 CVEsSeptember 2014: 1,156 CVEsOctober 2014: 1,418 CVEsNovember 2014: 505 CVEsDecember 2014: 618 CVEs8,008+50%
2013January 2013: 443 CVEsFebruary 2013: 410 CVEsMarch 2013: 446 CVEsApril 2013: 434 CVEsMay 2013: 358 CVEsJune 2013: 370 CVEsJuly 2013: 500 CVEsAugust 2013: 360 CVEsSeptember 2013: 475 CVEsOctober 2013: 634 CVEsNovember 2013: 399 CVEsDecember 2013: 495 CVEs5,324−1%
2012January 2012: 316 CVEsFebruary 2012: 349 CVEsMarch 2012: 405 CVEsApril 2012: 228 CVEsMay 2012: 434 CVEsJune 2012: 413 CVEsJuly 2012: 536 CVEsAugust 2012: 741 CVEsSeptember 2012: 655 CVEsOctober 2012: 559 CVEsNovember 2012: 445 CVEsDecember 2012: 270 CVEs5,351+28%
2011January 2011: 397 CVEsFebruary 2011: 382 CVEsMarch 2011: 356 CVEsApril 2011: 312 CVEsMay 2011: 296 CVEsJune 2011: 294 CVEsJuly 2011: 308 CVEsAugust 2011: 295 CVEsSeptember 2011: 389 CVEsOctober 2011: 484 CVEsNovember 2011: 312 CVEsDecember 2011: 347 CVEs4,172−11%
2010January 2010: 319 CVEsFebruary 2010: 308 CVEsMarch 2010: 515 CVEsApril 2010: 520 CVEsMay 2010: 408 CVEsJune 2010: 493 CVEsJuly 2010: 344 CVEsAugust 2010: 383 CVEsSeptember 2010: 301 CVEsOctober 2010: 435 CVEsNovember 2010: 280 CVEsDecember 2010: 361 CVEs4,667−18%
2009January 2009: 469 CVEsFebruary 2009: 689 CVEsMarch 2009: 566 CVEsApril 2009: 570 CVEsMay 2009: 367 CVEsJune 2009: 452 CVEsJuly 2009: 449 CVEsAugust 2009: no snapshotSeptember 2009: 576 CVEsOctober 2009: 353 CVEsNovember 2009: 311 CVEsDecember 2009: 445 CVEs5,24711 of 12 months11/12
2008January 2008: 502 CVEsFebruary 2008: 539 CVEsMarch 2008: 522 CVEsApril 2008: 459 CVEsMay 2008: 388 CVEsJune 2008: 438 CVEsJuly 2008: 522 CVEsAugust 2008: 374 CVEsSeptember 2008: 455 CVEsOctober 2008: 543 CVEsNovember 2008: 433 CVEsDecember 2008: 530 CVEs5,705−22%
2007January 2007: 730 CVEsFebruary 2007: 633 CVEsMarch 2007: 640 CVEsApril 2007: 632 CVEsMay 2007: 575 CVEsJune 2007: 583 CVEsJuly 2007: 594 CVEsAugust 2007: 533 CVEsSeptember 2007: 453 CVEsOctober 2007: 984 CVEsNovember 2007: 486 CVEsDecember 2007: 449 CVEs7,292+5%
2006January 2006: 514 CVEsFebruary 2006: 530 CVEsMarch 2006: 590 CVEsApril 2006: 636 CVEsMay 2006: 627 CVEsJune 2006: 651 CVEsJuly 2006: 533 CVEsAugust 2006: 558 CVEsSeptember 2006: 562 CVEsOctober 2006: 554 CVEsNovember 2006: 514 CVEsDecember 2006: 676 CVEs6,945+2%
2005January 2005: 175 CVEsFebruary 2005: 827 CVEsMarch 2005: 506 CVEsApril 2005: 518 CVEsMay 2005: 861 CVEsJune 2005: 661 CVEsJuly 2005: 593 CVEsAugust 2005: 584 CVEsSeptember 2005: 316 CVEsOctober 2005: 353 CVEsNovember 2005: 716 CVEsDecember 2005: 693 CVEs6,803+318%
2004January 2004: 68 CVEsFebruary 2004: 22 CVEsMarch 2004: 177 CVEsApril 2004: 61 CVEsMay 2004: 53 CVEsJune 2004: 120 CVEsJuly 2004: 121 CVEsAugust 2004: 58 CVEsSeptember 2004: 565 CVEsOctober 2004: 81 CVEsNovember 2004: 53 CVEsDecember 2004: 248 CVEs1,627+31%
2003January 2003: 23 CVEsFebruary 2003: 18 CVEsMarch 2003: 138 CVEsApril 2003: 397 CVEsMay 2003: 121 CVEsJune 2003: 112 CVEsJuly 2003: 92 CVEsAugust 2003: 72 CVEsSeptember 2003: 105 CVEsOctober 2003: 76 CVEsNovember 2003: 47 CVEsDecember 2003: 37 CVEs1,238−27%
2002January 2002: 3 CVEsFebruary 2002: 117 CVEsMarch 2002: 571 CVEsApril 2002: 10 CVEsMay 2002: 223 CVEsJune 2002: 361 CVEsJuly 2002: 79 CVEsAugust 2002: 205 CVEsSeptember 2002: 21 CVEsOctober 2002: 45 CVEsNovember 2002: 33 CVEsDecember 2002: 31 CVEs1,699+28%
2001January 2001: 232 CVEsFebruary 2001: 61 CVEsMarch 2001: 39 CVEsApril 2001: 45 CVEsMay 2001: 292 CVEsJune 2001: 0 CVEsJuly 2001: 61 CVEsAugust 2001: 25 CVEsSeptember 2001: 490 CVEsOctober 2001: 45 CVEsNovember 2001: 36 CVEsDecember 2001: 0 CVEs1,326−10%
2000January 2000: 182 CVEsFebruary 2000: 407 CVEsMarch 2000: 70 CVEsApril 2000: 112 CVEsMay 2000: 12 CVEsJune 2000: 74 CVEsJuly 2000: 155 CVEsAugust 2000: 15 CVEsSeptember 2000: 48 CVEsOctober 2000: 284 CVEsNovember 2000: 53 CVEsDecember 2000: 56 CVEs1,468+37%
1999September 1999: 321 CVEsOctober 1999: 0 CVEsNovember 1999: 0 CVEsDecember 1999: 0 CVEs321

KEV pips start in November 2021, when CISA published the catalog, and count entries of any CVE year. 19 months have no snapshot because their runs failed. A year's total covers its months on record, and its change compares the same months of the year before.

More CVEs, not more exploitation

In the last 12 full months, 90,953 CVEs were published and CISA added 308 entries to KEV: one for every 295. On the 12 months before, volume grew 85% and KEV additions grew 29%.

Since January 2023, each lane on its own scale. Point at a month to read both.
CVEs published and CISA KEV additions per month since January 2023
MonthCVEs publishedAdded to CISA KEV
2023-0126195
2023-02256214
2023-03
2023-04235617
2023-05276619
2023-06244824
2023-07238016
2023-0825498
2023-09286319
2023-10276418
2023-11256018
2023-12276911
2024-01269821
2024-0229839
2024-03337410
2024-04376910
2024-05541814
2024-0633339
2024-07324814
2024-08302419
2024-09259425
2024-10366717
2024-11415422
2024-12351416
2025-01446314
2025-02394027
2025-03425132
2025-04428215
2025-05436124
2025-06387520
2025-07408620
2025-08387115
2025-09466416
2025-10454431
2025-11319411
2025-12577120
2026-01524417
2026-02493128
2026-03682126
2026-04644031
2026-05736521
2026-06831423
2026-071024026
2026-081290931
2026-091518043
2026-101407526

September 2026, the last full month

2,311 vendors and 4,966 products. These carried most of it.

Open the September 2026 report

New in the top 100

Not in the top 100 in any of the 24 months before.

  1. Rabbitmq65#22
  2. Kiteworks61#23
  3. Netcore44#35
  4. OISF35#41
  5. Contec Co., Ltd.32#42
  6. Pmmp32#43
  7. Zammad32#44
  8. Zohocorp32#45

Vendors

  1. 1LinuxLinux, Linux Kernel2,115111—
  2. 2MicrosoftWindows Server 2025, Windows Server 2025 (Server Core Installation), Windows Server 20221,00359+1
  3. 3GoogleChrome, Android, Common Expression Language66283+1
  4. 4OracleOracle Hyperion Financial Management, Hyperion Financial Management, Oracle Business Intelligence Enterprise Edition63497−2
  5. 5IBMGuardium Data Protection, Financial Transaction Manager (Ftm) For Red Hat Openshift, Datastage On Cloud Pak For Data40445—
  6. 6Red HatRed Hat Enterprise Linux 9, Red Hat Enterprise Linux 8, Red Hat Enterprise Linux 102659—
  7. 7ApplemacOS, iOS and iPadOS, iPhone OS2478+21
  8. 8AdobeAdobe Experience Manager As A Cloud Service, Adobe Experience Manager 6.5, Adobe Experience Manager 6.5 Lts22432+2
  9. 9DellSecure Connect Gateway, Secure Connect Gateway 5.0 - Appliance, Secure Connect Gateway 5.0 - Application20711+4
  10. 10Apache Software FoundationApache Syncope, Apache Roller, Apache Tomcat19552−3

Rising over three months

Vendors whose CVEs grew most from August 2026 to October 2026, against the three months before.

  1. Linux4,6832,379+97%
  2. Microsoft2,9481,2072.4×
  3. Oracle2,6021,383+88%
  4. IBM1,0482294.6×
  5. Red Hat690391+76%
  6. Apache Software Foundation677389+74%
  7. HPE266328.3×
  8. Dell3351023.3×

Most CVEs over time

Vendors by CVEs across the monthly snapshots in the window, with how many of those CVEs are now in CISA KEV.

  1. 1Linux9,2441538#1
  2. 2Microsoft4,87831285#1
  3. 3Google4,34913428#1
  4. 4Oracle4,1531656#1
  5. 5npm1,8333114#1
  6. 6Red Hat1,695161#3
  7. 7IBM1,561none179#5
  8. 8Сообщество Свободного Программного Обеспечения1,380782#1
  9. 9Apache Software Foundation1,2601238#5
  10. 10Adobe1,1822115#5
  11. 11Apple1,032872#4
  12. 12Go781161#3
  13. 13PyPI775144#4
  14. 14Apache7571156#8
  15. 15Mozilla719none222#9
  16. 16Openclaw678none30#2
  17. 17Dell577135#9
  18. 18Packagist541none29#5
  19. 19Sourcecodester466none0#16
  20. 20code-projects462none0#8

Monthly snapshots of the unified CVE record (CVEList V5, NVD, GHSA, CSAF, FSTEC BDU) with CISA KEV and EPSS. Last computed Oct 5, 2026, 05:00 UTC.Methodology

Nuclei coverage and the detection gap are held back while the template mirror is repaired.