Month report
February 2024
Rolled up 2026-08-09 20:45 from 370,700 CVE records
2,784 CVEs published, +28.7% on the same month last year. 334 rated critical, 9 listed by CISA as exploited. linux led with 288; the most common weakness class was CWE-79 (409). dell climbed 74 places, the largest move. 3 vendors ranked for the first time.
Published
2,784
Critical / high
334 / 887
Medium / low
1,270 / 125
Added to CISA KEV
9
Public exploit
132
Scanner template
0
Publication to KEV
How long before CISA listed them
Median days to listing
20
Listed within 7 days
45.5%
Listed within 30 days
54.5%
Detection gap
Listed as exploited, no public template
Listed this month
9
With a template
1
No template
8
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 288 | 15 | 3 | linux (279) · linux kernel (17) · simatic s7 1500 tm mfp gnu linux subsystem (6) | ↑43 | ||
| 2 | ibm | 86 | 2 | 1 | powersc (13) · security verify access appliance (12) · security verify access docker (12) | ↑12 | ||
| 3 | microsoft | 79 | 7 | 5 | 7 | windows server 2022 23h2 edition server core installation (42) · windows 11 version 22h2 (41) · windows 11 version 22h3 (41) | — | |
| 4 | 51 | 4 | 5 | android (39) · chrome (12) · fedora (1) | ↑9 | |||
| 5 | dell | 47 | 5 | unity (16) · dell bsafe ssl j (2) · dell display manager (2) | ↑74 | |||
| 6 | oracle | 43 | 1 | 1 | mysql server (12) · java se jdk and jre (5) · installed base (4) | — | ||
| 7 | siemens | 39 | 1 | tecnomatix plant simulation v2201 (10) · tecnomatix plant simulation v2302 (10) · simatic s7 1500 tm mfp gnu linux subsystem (8) | ↑3 | |||
| 8 | apache | 38 | 7 | 9 | apache superset (6) · apache dolphinscheduler (5) · apache solr (4) | ↑20 | ||
| 9 | liferay | 34 | 13 | dxp (34) · portal (33) · digital experience platform (6) | · | |||
| 10 | qnap systems | 32 | 1 | 2 | qts (29) · quts hero (29) · qutscloud (28) | ↑19 | ||
| 11 | adobe | 31 | 3 | acrobat reader (14) · acrobat reader dc (12) · acrobat (10) | ↑24 | |||
| 12 | intel | 28 | intel r vroc software (4) · advisor (2) · extreme tuning utility (2) | · | ||||
| 13 | redhat | 27 | red hat enterprise linux 7 (19) · red hat enterprise linux 8 (19) · red hat enterprise linux 9 (19) | ↓9 | ||||
| 14 | apple | 26 | 1 | 1 | macos (22) · ios and ipados (16) · watchos (8) | ↓13 | ||
| 15 | huawei | 26 | 4 | harmonyos (26) · emui (25) | ↑5 | |||
| 16 | qualcomm | 26 | 1 | snapdragon (26) · aqt1000 firmware (5) · fastconnect 6200 firmware (5) | ↓1 | |||
| 17 | sourcecodester | 23 | 1 | 2 | employee management system (6) · online job portal (3) · complete file management system (2) | ↓1 | ||
| 18 | f5 | 20 | big ip (15) · big ip next spk (2) · f5os appliance (2) | · | ||||
| 19 | autodesk | 19 | advance steel (19) · autocad (19) · autocad advance steel (19) | · | ||||
| 20 | mozilla | 18 | 1 | firefox (13) · firefox esr (8) · thunderbird (8) | ↑5 | |||
| 21 | samsung mobile | 18 | samsung mobile devices (11) · galaxy store (4) · gallery (1) | ↑24 | ||||
| 22 | codeastro | 15 | 1 | membership management system (7) · house rental management system (2) · restaurant pos system (2) | ↑4 | |||
| 23 | hcl software | 15 | bigfix platform (6) · hcl sametime (5) · hcl connections (1) | ↑4 | ||||
| 24 | mattermost | 13 | mattermost (13) | · | ||||
| 25 | mediatek | 13 | 1 | mt6781 (3) · mt6833 (3) · mt6853 (3) | ↓3 | |||
| 26 | sap se | 13 | 1 | sap crm webclient ui (2) · sap aba (1) · sap aba application basis (1) | ↑25 | |||
| 27 | code projects | 12 | 1 | library system (5) · crime reporting system (2) · simple school management system (2) | ↓15 | |||
| 28 | fedoraproject | 12 | 7 | fedora (12) · libbiosig (7) · chrome (1) | · | |||
| 29 | fortinet | 12 | 4 | 2 | 4 | fortios (6) · fortiproxy (5) · fortianalyzer (2) | ↑35 | |
| 30 | freebsd | 12 | 3 | 1 | freebsd (12) | · | ||
| 31 | github | 12 | 6 | enterprise server (11) · codeql cli binaries (1) | · | |||
| 32 | gitlab | 12 | gitlab (12) | ↑4 | ||||
| 33 | cisco | 10 | 2 | cisco nx os software (4) · cisco telepresence video communication server vcs expressway (3) · cisco unified computing system managed (2) | ↓2 | |||
| 34 | imagerecycle | 10 | imagerecycle pdf image compression (10) | new | ||||
| 35 | mintplex labs | 10 | 3 | mintplex labs anything llm (10) · anythingllm (8) | · | |||
| 36 | wpdevteam | 10 | 1 | 1 | essential addons for elementor popular elementor templates widgets (7) · embedpress pdf embedder embed youtube videos 3d flipbook social feeds docs more (2) · notificationx (1) | · | ||
| 37 | flusity | 9 | 1 | flusity (8) · cms (1) | · | |||
| 38 | frenify | 9 | categorify wordpress media library category file manager (9) | new | ||||
| 39 | hewlett packard enterprise hpe | 9 | aruba clearpass policy manager (9) · clearpass policy manager (5) | · | ||||
| 40 | jetbrains | 9 | 1 | teamcity (5) · intellij idea (2) · rider (1) | · | |||
| 41 | silabs com | 9 | 1 | gsdk (4) · ember znet sdk (3) · emberznet sdk (2) | · | |||
| 42 | dlink | 8 | dir 823 firmware (7) · dir 823g firmware (1) | ↑52 | ||||
| 43 | mintplexlabs | 8 | 2 | anythingllm (8) · mintplex labs anything llm (8) | · | |||
| 44 | openharmony | 8 | openharmony (8) | ↑24 | ||||
| 45 | tenda | 8 | 1 | ac9v3 0 firmware (3) · ac9 firmware (2) · ac21 firmware (1) | ↓37 | |||
| 46 | the biosig project | 8 | 8 | libbiosig (8) · fedora (7) | new | |||
| 47 | tp link | 8 | 1 | er7206 omada gigabit vpn router (8) · er7206 firmware (2) | ↑41 | |||
| 48 | westermo | 8 | lynx (8) · l206 f2g1 firmware (1) | · | ||||
| 49 | wproyal | 8 | royal addons for elementor addons and templates kit for elementor (7) · royal elementor kit (1) | · | ||||
| 50 | b r industrial automation | 7 | 1 | automation studio (5) · automation runtime (2) · net pvi (2) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2024-02 that are on the CISA KEV catalog today. The 9 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-7940919 critical—
- 2CWE-8916875 critical—
- 3CWE-3521193 critical↑1
- 4CWE-28411813 critical↑3
- 5CWE-862750 critical↑10
- 6CWE-7876516 critical↓3
- 7CWE-4346421 critical↑6
- 8CWE-200613 critical↓2
- 9CWE-225810 critical↑3
- 10CWE-785810 critical↓1
- 1CWE-205712 critical↓3
- 2CWE-400541 critical↑8
- 3CWE-416516 critical↓2
- 4CWE-945020 critical↑3
- 5CWE-125482 critical↑1
- 6CWE-122454 critical↑10
- 7CWE-476400 critical↑8
- 8CWE-773610 critical↑1
- 9CWE-120323 critical↓1
- 10CWE-5023211 critical↑2
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.