Latest month report · in progress
September 2026
in numbers
Where the vulnerability world moved this month. Headline volume, criticals, KEV velocity and a 12-month sparkline.
Open full report →Projected total
7,541
+61.7% YoY · proj
Critical
170
8.5% of total · so far
KEV added
8
CISA known exploited
vs last month
-41.6%
projected MoM
Last 12 months · volume
projected — month still in progress
Data as of Sep 7, 2026, 05:00 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →
from Oct 23avg ≈ 19.1 / mo
Cover story · KEV velocity
Active exploitation,
month by month.
CISA-confirmed 689 CVEs moved into active exploitation across the visible window.
The peak month was Mar 25 with 32 additions.
Last 3 months are -13% vs the prior 3.
Previous report
What August 2026 is remembered for
Highlights from the last completed month. Click any tile to open the full report.
Top vendor
linux
1,645 CVEs
linux (1645)
×3.7
Biggest breakout
splunk
×14.7 vs 12-mo median
110 CVEs this period
Top weakness
CWE-284
1,202 CVEs · CWE-284
KEV velocity
31 new
added to CISA KEV
Detection speed
6.6 days
median to Nuclei template
66% within 7 days
First in top-100
jahlives
#15 · 66 CVEs
never in top-100 in prior 24 months
First-time on leaderboard
New names in August 2026
Never seen in top-100 for the prior 24 months. Often soft targets — security maturity hasn't caught up to attention.
Hot quarter
Biggest growth in 3 months
Jul 26 → Sep 26 vs prior 3
oracle
×5.3
1,998 recentvs 377 prior+1,621
×5.3
linux
×1.4
2,670 recentvs 1,921 prior+749
microsoft
×1.6
1,152 recentvs 728 prior+424
ibm
×3.3
565 recentvs 172 prior+393
×3.3
redhat
×1.4
425 recentvs 300 prior+125
elastic
×7.0
119 recentvs 17 prior+102
×7.0
getgrav
×8.3
116 recentvs 14 prior+102
×8.3
splunk
×9.2
110 recentvs 12 prior+98
×9.2
siyuan-note
×6.3
107 recentvs 17 prior+90
×6.3
gitea
×89.0
89 recentvs 0 prior+89
×89.0
nvidia
×2.7
125 recentvs 47 prior+78
drupal
×6.4
89 recentvs 14 prior+75
×6.4
Vendor leaderboard
Most CVEs · last 12 months
- 7,045 CVE418 crit1 KEVpeak #1KEV 1PoC 3
- 3,043 CVE293 crit11 KEVpeak #1KEV 11PoC 11
- 2,601 CVE171 crit31 KEV1 Nucleipeak #3KEV 31Nuclei 1PoC 11
- 2,519 CVE498 crit4 KEV4 Nucleipeak #1KEV 4Nuclei 4PoC 4
- 1,921 CVE88 crit7 KEV28 Nucleipeak #1KEV 7Nuclei 28PoC 66
- 6npm1,802 CVE118 crit3 KEV18 Nucleipeak #1KEV 3Nuclei 18PoC 100
- 1,603 CVE48 crit1 KEV4 Nucleipeak #3KEV 1Nuclei 4PoC 30
- 8ibm1,013 CVE109 crit1 Nucleipeak #3Nuclei 1
- 817 CVE58 crit1 KEV1 Nucleipeak #5KEV 1Nuclei 1
- 10go798 CVE65 crit1 KEV8 Nucleipeak #3KEV 1Nuclei 8PoC 63
- 11pypi795 CVE54 crit1 KEV10 Nucleipeak #4KEV 1Nuclei 10PoC 58
- 778 CVE153 crit1 KEV5 Nucleipeak #5KEV 1Nuclei 5PoC 6
- 13apple744 CVE64 crit7 KEVpeak #4KEV 7PoC 2
- 14apache674 CVE134 crit1 KEV5 Nucleipeak #8KEV 1Nuclei 5PoC 6
- 604 CVE23 crit3 KEV3 Nucleipeak #2KEV 3Nuclei 3PoC 42
- 596 CVE30 crit4 Nucleipeak #5Nuclei 4PoC 103
- 17openclaw588 CVE30 critpeak #2PoC 2
- 553 CVE29 crit1 KEVpeak #4KEV 1PoC 11
- 524 CVE1 critpeak #8PoC 250
- 20mozilla485 CVE180 critpeak #7
| # | Vendor | CVEs | Crit | KEV | Nuclei | Peak | Signals | |
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 7,045 | 418 | 1 | · | #1 | KEV 1PoC 3 | |
| 2 | 3,043 | 293 | 11 | · | #1 | KEV 11PoC 11 | ||
| 3 | microsoft | 2,601 | 171 | 31 | 1 | #3 | KEV 31Nuclei 1PoC 11 | |
| 4 | oracle | 2,519 | 498 | 4 | 4 | #1 | KEV 4Nuclei 4PoC 4 | |
| 5 | сообщество свободного программного обеспечения | 1,921 | 88 | 7 | 28 | #1 | KEV 7Nuclei 28PoC 66 | |
| 6 | npm | 1,802 | 118 | 3 | 18 | #1 | KEV 3Nuclei 18PoC 100 | |
| 7 | redhat | 1,603 | 48 | 1 | 4 | #3 | KEV 1Nuclei 4PoC 30 | |
| 8 | ibm | 1,013 | 109 | · | 1 | #3 | Nuclei 1 | |
| 9 | adobe | 817 | 58 | 1 | 1 | #5 | KEV 1Nuclei 1 | |
| 10 | go | 798 | 65 | 1 | 8 | #3 | KEV 1Nuclei 8PoC 63 | |
| 11 | pypi | 795 | 54 | 1 | 10 | #4 | KEV 1Nuclei 10PoC 58 | |
| 12 | apache software foundation | 778 | 153 | 1 | 5 | #5 | KEV 1Nuclei 5PoC 6 | |
| 13 | apple | 744 | 64 | 7 | · | #4 | KEV 7PoC 2 | |
| 14 | apache | 674 | 134 | 1 | 5 | #8 | KEV 1Nuclei 5PoC 6 | |
| 15 | ооо «русбитех-астра» | 604 | 23 | 3 | 3 | #2 | KEV 3Nuclei 3PoC 42 | |
| 16 | packagist | 596 | 30 | · | 4 | #5 | Nuclei 4PoC 103 | |
| 17 | openclaw | 588 | 30 | · | · | #2 | PoC 2 | |
| 18 | canonical | 553 | 29 | 1 | · | #4 | KEV 1PoC 11 | |
| 19 | code-projects | 524 | 1 | · | · | #8 | PoC 250 | |
| 20 | mozilla | 485 | 180 | · | · | #7 |
Earlier reports
July 2026
10,240
+150.6% YoY
1,218 critical26 KEV
June 2026
8,314
+114.6% YoY
914 critical23 KEV
May 2026
7,365
+68.9% YoY
642 critical21 KEV
April 2026
6,440
— YoY
607 critical31 KEV
March 2026
6,821
— YoY
685 critical26 KEV
February 2026
4,931
— YoY
495 critical28 KEV
January 2026
5,244
— YoY
437 critical17 KEV
December 2025
5,771
— YoY
396 critical20 KEV
November 2025
3,194
— YoY
269 critical11 KEV
October 2025
4,544
— YoY
288 critical31 KEV
September 2025
4,664
— YoY
278 critical16 KEV
August 2025
3,871
+28.0% YoY
343 critical15 KEV
July 2025
4,086
+25.8% YoY
368 critical20 KEV
June 2025
3,875
+16.3% YoY
293 critical20 KEV
May 2025
4,361
-19.5% YoY
376 critical24 KEV
April 2025
4,282
+13.6% YoY
330 critical15 KEV
March 2025
4,251
+26.0% YoY
420 critical32 KEV
February 2025
3,940
+32.1% YoY
253 critical27 KEV
January 2025
4,463
+65.4% YoY
358 critical14 KEV
December 2024
3,514
+26.9% YoY
316 critical16 KEV
November 2024
4,154
+62.3% YoY
348 critical22 KEV
October 2024
3,667
+32.7% YoY
364 critical17 KEV