CVE trendsOctober 2026
Monthly vulnerability volume, critical severity and known-exploitation activity across every published CVE, not just the ones written up here.
Full October 2026 report →Total CVEs
9,000 ±30.1%
Critical
76
High
357
KEV added
3
Public exploit
13
Month over month
-39.8%
Published per month, last 12
Hover or use ←/→ for a month’s figures
KEV additions
Entries added per month
709 CVEs entered the CISA KEV catalog across these 36 months — peak Sep 26 at 43, average 19.7 a month.
month CISA added the entry, not the CVE's publication month
Last complete month
September 2026
Top vendor
linux
Biggest breakout
×12.2
Top weakness
CWE-79
Added to CISA KEV
43
Break down by
Quarter over quarter
Largest increases over three months
#1 momentum
siyuan note
×9.5
Prior quarter
13
Current quarter
124
#2 momentum
splunk
×9.2
Prior quarter
12
Current quarter
110
#3 momentum
hewlett packard enterprise hpe
×4.9
Prior quarter
32
Current quarter
157
#4 momentum
wireshark foundation
×3.9
Prior quarter
12
Current quarter
47
#5 momentum
flowiseai
×3.8
Prior quarter
15
Current quarter
57
#6 momentum
wwbn
×3.6
Prior quarter
34
Current quarter
122
#7 momentum
dokploy
×3.4
Prior quarter
11
Current quarter
37
#8 momentum
ibm
×3.4
Prior quarter
229
Current quarter
785
#9 momentum
eclipse foundation
×3.3
Prior quarter
21
Current quarter
69
#10 momentum
cisco
×3.1
Prior quarter
46
Current quarter
144
| # | Vendor | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| 1 | linux | 8,181 | 560 | 3 | 0.04% | 77 | #1* | 11 | |
| 2 | 3,272 | 339 | 13 | 0.40% | 70 | #1* | 12 | ||
| 3 | microsoft | 3,143 | 212 | 29 | 0.92% | 99 | 2 | #2* | 11 |
| 4 | oracle | 3,073 | 590 | 3 | 0.10% | 28 | 1 | #1* | 7 |
| 5 | redhat | 2,142 | 232 | 6 | 0.28% | 182 | 24 | #1* | 12 |
| 6 | ibm | 1,298 | 148 | 1 | 0.08% | 10 | 2 | #4* | 11 |
| 7 | apache | 1,018 | 185 | 2 | 0.20% | 112 | 9 | #1* | 12 |
| 8 | adobe | 991 | 88 | 4 | 0.40% | 6 | 3 | #2* | 11 |
| 9 | apple | 981 | 73 | 7 | 0.71% | 46 | #1* | 11 | |
| 10 | openclaw | 671 | 27 | 0.00% | 8 | #2* | 7 | ||
| 11 | mozilla | 623 | 198 | 0.00% | 20 | #6* | 11 | ||
| 12 | siemens | 577 | 43 | 7 | 1.21% | 35 | 2 | #4* | 11 |
| 13 | dell | 509 | 25 | 1 | 0.20% | 1 | #9* | 10 | |
| 14 | code projects | 457 | 0.00% | 18 | #4* | 11 | |||
| 15 | sourcecodester | 421 | 0.00% | 7 | #7* | 10 | |||
| 16 | nvidia | 380 | 14 | 0.00% | 4 | 1 | #11* | 10 | |
| 17 | itsourcecode | 338 | 0.00% | #8* | 12 | ||||
| 18 | cisco | 337 | 61 | 16 | 4.75% | 20 | 1 | #12* | 10 |
| 19 | tenda | 326 | 23 | 0.00% | 5 | #10* | 10 | ||
| 20 | wwbn | 271 | 22 | 0.00% | 2 | 1 | #8* | 6 |
One CVE is counted once per vendor it lists, so a CVE naming several is counted by each of them and the column sums to more than the number of CVEs. Only each month's top 100 are stored, so a vendor outside that depth in a given month contributes nothing for it. KEV counts the CVEs published inside this window that are on the CISA KEV catalog today. It is not the number CISA listed during the window — that is the KEV-additions series. A zero count renders as a dot.
Archive
Every month on record
2024
2025
Dec
+60.1%5,495
Nov
-25.5%3,021
Oct
+19.8%4,274
Sep
+71.8%4,319
Aug
+25.3%3,629
Jul
+21.2%3,774
Jun
+19.5%3,682
May
-20.3%3,980
Apr
+11.9%4,033
Mar
+21.6%4,010
Feb
+31.9%3,673
Jan
+64.9%4,273
2026
Oct
-79.6%871
Sep
+246.1%14,946
Aug
+197.2%10,787
Jul
+158.6%9,761
Jun
+116%7,952
May
+74.3%6,937
Apr
+44.2%5,814
Mar
+55.5%6,236
Feb
+25.7%4,616
Jan
+0.7%4,305