Month report
October 2024
Rolled up 2026-09-22 22:46 from 376,476 CVE records
3,568 CVEs published, +32.6% on the same month last year. 362 rated critical, 17 listed by CISA as exploited. linux led with 415; the most common weakness class was CWE-79 (717). acronis climbed 58 places, the largest move. 7 vendors ranked for the first time.
Published
3,568
Critical / high
362 / 1,309
Medium / low
1,505 / 133
Added to CISA KEV
17
Public exploit
162
Scanner template
58
Publication to KEV
How long before CISA listed them
Median days to listing
3
Listed within 7 days
58.8%
Listed within 30 days
64.7%
Detection gap
Listed as exploited, no public template
Listed this month
17
With a template
4
No template
13
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 415 | 13 | 1 | linux (415) · simatic s7 1500 tm mfp gnu linux subsystem (50) · ruggedcom rst2428p (47) | — | ||
| 2 | microsoft | 130 | 2 | 3 | 4 | windows server 2022 23h2 edition server core installation (87) · windows server 2019 (80) · windows server 2019 server core installation (80) | ↑1 | |
| 3 | cisco | 94 | 4 | 1 | cisco firepower management center (24) · cisco firepower threat defense software (24) · firepower threat defense software (20) | ↑6 | ||
| 4 | siemens | 90 | 5 | linux (57) · simatic s7 1500 tm mfp gnu linux subsystem (51) · ruggedcom rst2428p (47) | ↑2 | |||
| 5 | oracle | 85 | 2 | 1 | mysql server (25) · mysql cluster (5) · oracle java se (5) | · | ||
| 6 | apple | 84 | 2 | 3 | macos (67) · ios and ipados (41) · visionos (25) | ↓4 | ||
| 7 | 57 | 4 | android (35) · chrome (21) · pixel (15) | ↓2 | ||||
| 8 | adobe | 54 | 1 | adobe commerce (22) · animate (11) · substance3d stager (8) | ↑3 | |||
| 9 | code projects | 42 | 4 | pharmacy management system (14) · blood bank management system (12) · blood bank system (9) | ↑5 | |||
| 10 | d link | 42 | 2 | 1 | dir 605l (21) · dir 605l firmware (19) · dir 619l b1 (18) | ↑14 | ||
| 11 | dlink | 42 | 1 | dir 605l (19) · dir 605l firmware (19) · dir 878 firmware (10) | ↑25 | |||
| 12 | phpgurukul | 39 | 4 | boat booking system (11) · medical card generation system (6) · user registration and login and user management system (5) | ↑18 | |||
| 13 | sourcecodester | 34 | 1 | 7 | online eyewear shop (7) · petrol pump management software (5) · attendance and payroll system (3) | ↓9 | ||
| 14 | juniper networks | 28 | junos os evolved (18) · junos os (17) · junos (9) | · | ||||
| 15 | mozilla | 28 | 8 | 1 | 1 | firefox (27) · thunderbird (23) · firefox esr (21) | ↑13 | |
| 16 | draytek | 25 | 5 | vigor3900 firmware (13) · vigor3910 firmware (10) · vigor2960 firmware (1) | · | |||
| 17 | autodesk | 24 | advance steel (22) · autocad (22) · autocad architecture (22) | ↑37 | ||||
| 18 | esafenet | 23 | cdg (23) | new | ||||
| 19 | redhat | 23 | 1 | 1 | red hat enterprise linux 8 (11) · red hat enterprise linux 9 (11) · red hat enterprise linux 10 (9) | ↓9 | ||
| 20 | codezips | 21 | 1 | pet shop management system (6) · sales management system (6) · online shopping portal (2) | new | |||
| 21 | qualcomm | 20 | 1 | 1 | 1 | snapdragon (20) · wsa8830 firmware (12) · wsa8835 firmware (12) | ↓4 | |
| 22 | jetbrains | 18 | youtrack (11) · teamcity (5) · hub (1) | · | ||||
| 23 | apache | 15 | 1 | 2 | 1 | apache cloudstack (3) · apache solr (2) · apache activemq artemis (1) | ↑3 | |
| 24 | suse | 15 | 2 | 1 | rancher (6) · opensuse tumbleweed (4) · opensuse leap 15 5 (3) | · | ||
| 25 | juniper | 14 | junos os evolved (11) · junos (9) · junos os (9) | · | ||||
| 26 | mediatek | 14 | 3 | android (6) · mt6853 (5) · mt6761 mt6765 mt6768 mt6779 mt6785 mt6853 mt6873 mt6885 mt8385 mt8666 mt8667 mt8766 mt8768 mt8781 mt8788 mt8789 (4) | ↑38 | |||
| 27 | ivanti | 13 | 1 | 2 | 1 | avalanche (5) · csa cloud services appliance (3) · endpoint manager cloud services appliance (3) | ↓12 | |
| 28 | mitel | 13 | 5 | 1 | 2 | 2 | micollab (11) · mivoice business solutions virtual instance (2) · micollab nupoint messanger (1) | new |
| 29 | nvidia | 13 | gpu display driver (6) · gpu vgpu and cloud gaming (6) · cloud gaming guest (5) | · | ||||
| 30 | tenda | 13 | rx9 pro (4) · ac1206 (3) · ac7 firmware (3) | ↑10 | ||||
| 31 | esri | 12 | portal for arcgis (10) · enterprise web app builder (2) · portal for arcgis enterprise experience builder (2) | · | ||||
| 32 | gradio app | 12 | 1 | gradio (12) | · | |||
| 33 | levelone | 12 | 2 | wbr 6012 (12) | · | |||
| 34 | funadmin | 11 | 7 | funadmin (11) | new | |||
| 35 | lenovo | 11 | app store (1) · baiying (1) · dolby vision provisioning software (1) | ↓3 | ||||
| 36 | samsung mobile | 11 | samsung mobile devices (8) · android (1) · samsung internet (1) | ↓23 | ||||
| 37 | splunk | 11 | splunk enterprise (11) · splunk cloud platform (5) · splunk secure gateway (1) | · | ||||
| 38 | acronis | 10 | acronis cyber files (5) · acronis cyber protect 16 (5) · cyber files (4) | ↑58 | ||||
| 39 | gitlab | 10 | 1 | gitlab (10) | ↓21 | |||
| 40 | ibm | 10 | 1 | websphere application server (3) · concert (2) · cics transaction gateway for multiplatforms (1) | ↓24 | |||
| 41 | palo alto networks | 10 | 3 | 2 | 4 | 2 | expedition (5) · cloud ngfw (2) · pan os (2) | ↑25 |
| 42 | progress software | 9 | 2 | telerik reporting (4) · telerik report server (3) · chef habitat builder (1) | · | |||
| 43 | sharp | 9 | 1 | e studio 1058 (9) · e studio 1208 (9) · e studio 908 (9) | · | |||
| 44 | solidigm | 9 | d7 p5520 (7) · d7 p5620 (7) · d5 p5316 (5) | new | ||||
| 45 | toshiba tec | 9 | 1 | e studio 1058 (9) · e studio 1208 (9) · e studio 908 (9) | · | |||
| 46 | cute png | 8 | cute png (8) | new | ||||
| 47 | dell | 8 | secure connect gateway scg 5 0 appliance srs (3) · dell openmanage enterprise (2) · openmanage enterprise (2) | ↓20 | ||||
| 48 | delta electronics | 8 | 2 | cncsoft g2 (5) · diaenergie (2) · infrasuite device master (1) | · | |||
| 49 | hcl software | 8 | sametime (3) · connections (2) · appscan source (1) | · | ||||
| 50 | microchip | 8 | 3 | timeprovider 4100 (7) · timeprovider 4100 firmware (4) · rn4870 (1) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2024-10 that are on the CISA KEV catalog today. The 17 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-797176 critical—
- 2CWE-8926649 critical—
- 3CWE-86210912 critical↑4
- 4CWE-4349453 critical↑16
- 5CWE-352874 critical↑10
- 6CWE-228512 critical—
- 7CWE-8638011 critical↑14
- 8CWE-120789 critical↓5
- 9CWE-125721 critical↓5
- 10CWE-946622 critical—
- 1CWE-200601 critical↓6
- 2CWE-785813 critical↓3
- 3CWE-416563 critical—
- 4CWE-787556 critical↑3
- 5CWE-775111 critical↓3
- 6CWE-20453 critical↓5
- 7CWE-122400 critical↑1
- 8CWE-284401 critical↓10
- 9CWE-400380 critical↑4
- 10CWE-5023818 critical↓1
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.