Latest month report · in progress
July 2026
in numbers
Where the vulnerability world moved this month. Headline volume, criticals, KEV velocity and a 12-month sparkline.
Open full report →Projected total
6,891
+68.6% YoY · proj
Critical
437
8.2% of total · so far
KEV added
17
CISA known exploited
vs last month
-17.1%
projected MoM
Last 12 months · volume
projected — month still in progress
Data as of Jul 6, 2026, 05:00 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
from Aug 23avg ≈ 18.6 / mo
Cover story · KEV velocity
Active exploitation,
month by month.
CISA-confirmed 668 CVEs moved into active exploitation across the visible window.
The peak month was Mar 25 with 32 additions.
Last 3 months are -28% vs the prior 3.
Previous report
What June 2026 is remembered for
Highlights from the last completed month. Click any tile to open the full report.
Top vendor
google
1,095 CVEs
chrome (965) · android (119) · google chrome (43)
×17.1KEV 2
Biggest breakout
google
×17.1 vs 12-mo median
1,095 CVEs this period
Top weakness
XSS
663 CVEs · CWE-79
KEV velocity
23 new
2 ransomware-linked
Detection speed
5.8 days
median to Nuclei template
60% within 7 days
First in top-100
capgo
#13 · 61 CVEs
never in top-100 in prior 24 months
First-time on leaderboard
New names in June 2026
Never seen in top-100 for the prior 24 months. Often soft targets — security maturity hasn't caught up to attention.
Detection gap
KEV pressure, no Nuclei coverage
June 2026 · vendors with active exploitation listed by CISA but no public detection template.
- KEV 2google1,095 CVE
Hot quarter
Biggest growth in 3 months
May 26 → Jul 26 vs prior 3
linux
×2.6
2,014 recentvs 777 prior+1,237
google
×4.4
1,569 recentvs 360 prior+1,209
×4.4
microsoft
×2.9
1,188 recentvs 408 prior+780
oracle
×2.7
275 recentvs 102 prior+173
apache software foundation
×2.2
286 recentvs 131 prior+155
apache
×2.1
257 recentvs 124 prior+133
adobe
×1.6
290 recentvs 183 prior+107
open-webui
×95.0
95 recentvs 0 prior+95
×95.0
openwebui
×94.0
94 recentvs 0 prior+94
×94.0
сообщество свободного программного обеспечения
×1.4
321 recentvs 230 prior+91
redhat
×1.4
292 recentvs 208 prior+84
ооо «русбитех-астра»
×84.0
84 recentvs 0 prior+84
×84.0
Vendor leaderboard
Most CVEs · last 12 months
- 5,770 CVE119 crit1 KEVpeak #1KEV 1PoC 13
- 2,737 CVE107 crit7 KEV34 Nucleipeak #1KEV 7Nuclei 34PoC 105
- 2,438 CVE182 crit14 KEVpeak #1KEV 14PoC 15
- 2,327 CVE133 crit30 KEV1 Nucleipeak #1KEV 30Nuclei 1PoC 22
- 5npm1,803 CVE139 crit3 KEV28 Nucleipeak #1KEV 3Nuclei 28PoC 145
- 1,589 CVE30 crit1 KEV4 Nucleipeak #3KEV 1Nuclei 4PoC 42
- 1,060 CVE32 crit5 KEV3 Nucleipeak #2KEV 5Nuclei 3PoC 71
- 8go861 CVE82 crit1 KEV12 Nucleipeak #3KEV 1Nuclei 12PoC 74
- 9pypi850 CVE67 crit1 KEV12 Nucleipeak #4KEV 1Nuclei 12PoC 77
- 813 CVE39 crit5 KEV6 Nucleipeak #2KEV 5Nuclei 6PoC 95
- 11adobe803 CVE45 crit3 KEV3 Nucleipeak #4KEV 3Nuclei 3PoC 1
- 801 CVE20 crit1 KEVpeak #4KEV 1PoC 19
- 13ао «ивк»662 CVE38 crit1 KEV1 Nucleipeak #5KEV 1Nuclei 1PoC 44
- 14apple625 CVE14 crit7 KEVpeak #4KEV 7PoC 3
- 609 CVE35 crit1 KEV9 Nucleipeak #5KEV 1Nuclei 9PoC 122
- 16openclaw588 CVE30 critpeak #2PoC 2
- 567 CVE1 critpeak #8PoC 336
- 18ibm563 CVE44 critpeak #8
- 19tenda541 CVE49 critpeak #9PoC 238
- 533 CVE96 crit1 KEV5 Nucleipeak #5KEV 1Nuclei 5PoC 8
| # | Vendor | CVEs | Crit | KEV | Nuclei | Peak | Signals | |
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 5,770 | 119 | 1 | · | #1 | KEV 1PoC 13 | |
| 2 | сообщество свободного программного обеспечения | 2,737 | 107 | 7 | 34 | #1 | KEV 7Nuclei 34PoC 105 | |
| 3 | 2,438 | 182 | 14 | · | #1 | KEV 14PoC 15 | ||
| 4 | microsoft | 2,327 | 133 | 30 | 1 | #1 | KEV 30Nuclei 1PoC 22 | |
| 5 | npm | 1,803 | 139 | 3 | 28 | #1 | KEV 3Nuclei 28PoC 145 | |
| 6 | redhat | 1,589 | 30 | 1 | 4 | #3 | KEV 1Nuclei 4PoC 42 | |
| 7 | ооо «русбитех-астра» | 1,060 | 32 | 5 | 3 | #2 | KEV 5Nuclei 3PoC 71 | |
| 8 | go | 861 | 82 | 1 | 12 | #3 | KEV 1Nuclei 12PoC 74 | |
| 9 | pypi | 850 | 67 | 1 | 12 | #4 | KEV 1Nuclei 12PoC 77 | |
| 10 | ооо «ред софт» | 813 | 39 | 5 | 6 | #2 | KEV 5Nuclei 6PoC 95 | |
| 11 | adobe | 803 | 45 | 3 | 3 | #4 | KEV 3Nuclei 3PoC 1 | |
| 12 | canonical | 801 | 20 | 1 | · | #4 | KEV 1PoC 19 | |
| 13 | ао «ивк» | 662 | 38 | 1 | 1 | #5 | KEV 1Nuclei 1PoC 44 | |
| 14 | apple | 625 | 14 | 7 | · | #4 | KEV 7PoC 3 | |
| 15 | packagist | 609 | 35 | 1 | 9 | #5 | KEV 1Nuclei 9PoC 122 | |
| 16 | openclaw | 588 | 30 | · | · | #2 | PoC 2 | |
| 17 | code-projects | 567 | 1 | · | · | #8 | PoC 336 | |
| 18 | ibm | 563 | 44 | · | · | #8 | ||
| 19 | tenda | 541 | 49 | · | · | #9 | PoC 238 | |
| 20 | apache software foundation | 533 | 96 | 1 | 5 | #5 | KEV 1Nuclei 5PoC 8 |
Earlier reports
May 2026
7,365
+68.9% YoY
642 critical21 KEV
April 2026
6,440
— YoY
607 critical31 KEV
March 2026
6,821
— YoY
685 critical26 KEV
February 2026
4,931
— YoY
495 critical28 KEV
January 2026
5,244
— YoY
437 critical17 KEV
December 2025
5,771
— YoY
396 critical20 KEV
November 2025
3,194
— YoY
269 critical11 KEV
October 2025
4,544
— YoY
288 critical31 KEV
September 2025
4,664
— YoY
278 critical16 KEV
August 2025
3,871
+28.0% YoY
343 critical15 KEV
July 2025
4,086
+25.8% YoY
368 critical20 KEV
June 2025
3,875
+16.3% YoY
293 critical20 KEV
May 2025
4,361
-19.5% YoY
376 critical24 KEV
April 2025
4,282
+13.6% YoY
330 critical15 KEV
March 2025
4,251
+26.0% YoY
420 critical32 KEV
February 2025
3,940
+32.1% YoY
253 critical27 KEV
January 2025
4,463
+65.4% YoY
358 critical14 KEV
December 2024
3,514
+26.9% YoY
316 critical16 KEV
November 2024
4,154
+62.3% YoY
348 critical22 KEV
October 2024
3,667
+32.7% YoY
364 critical17 KEV
September 2024
2,594
-9.4% YoY
241 critical25 KEV
August 2024
3,024
— YoY
331 critical19 KEV