Month report
January 2025
Rolled up 2026-09-23 05:40 from 376,511 CVE records
4,273 CVEs published, +64.9% on the same month last year. 373 rated critical, 14 listed by CISA as exploited. linux led with 223; the most common weakness class was CWE-79 (1,005). hcl software climbed 82 places, the largest move. 8 vendors ranked for the first time.
Published
4,273
+24.5%on the previous month
Critical / high
373 / 1,472
of the 4,203 scored
Medium / low
2,202 / 156
the rest of the scored bands
Added to CISA KEV
14
listed as exploited this month
Public exploit
144
exploit code indexed publicly
Scanner template
48
1.1% of the month
Publication to KEV
How long before CISA listed them
17 published this month and listed since — not the 14 listed during it.
Median days to listing
12
from publication to CISA's date added
Listed within 7 days
41.2%
of the 17
Listed within 30 days
58.8%
of the 17
Detection gap
Listed as exploited, no public template
CVEs CISA listed this month
Listed this month
14
added to the CISA KEV catalog
With a template
6
42.9% covered
No template
8
nothing in the public index
- 1microsoft3of 3 listed
- 2apple1of 1 listed
- 3beyondtrust1of 1 listed
- 4jquery1of 1 listed
- 5sonicwall1of 1 listed
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
Δ is the move against last month's rank.
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 223 | 14 | linux (223) · simatic s7 1500 tm mfp gnu linux subsystem (17) · simatic s7 1500 cpu 1518 4 pn dp mfp (9) | — | |||
| 2 | microsoft | 165 | 4 | 3 | 5 | windows server 2022 23h2 edition server core installation (126) · windows server 2025 (125) · windows server 2025 server core installation (125) | ↑1 | |
| 3 | ibm | 118 | 3 | 1 | sterling b2b integrator (8) · cloud pak system (6) · concert software (6) | ↑2 | ||
| 4 | apple | 101 | 17 | 1 | 4 | macos (92) · ios and ipados (50) · watchos (30) | — | |
| 5 | 95 | 4 | 2 | android (75) · chrome (17) · gvisor (2) | ↑3 | |||
| 6 | oracle | 83 | 4 | mysql server (30) · jd edwards enterpriseone tools (14) · mysql cluster (4) | · | |||
| 7 | drupal | 74 | 12 | open social (5) · file entity fieldable files (2) · monster menus (2) | ↑33 | |||
| 8 | wavlink | 62 | 61 | wavlink ac3000 (62) | · | |||
| 9 | fortinet | 52 | 2 | 1 | 1 | 1 | fortios (15) · fortimanager (14) · fortianalyzer (8) | ↑23 |
| 10 | code projects | 48 | point of sales and inventory management system (9) · online book shop (7) · job recruitment (6) | ↓4 | ||||
| 11 | siemens | 30 | linux (24) · simatic s7 1500 tm mfp gnu linux subsystem (17) · simatic s7 1500 cpu 1518 4 pn dp mfp (10) | ↑3 | ||||
| 12 | huawei | 28 | harmonyos (28) · emui (12) | ↓5 | ||||
| 13 | labredescefetrj | 26 | 3 | wegia (26) | new | |||
| 14 | redhat | 24 | 1 | 2 | red hat enterprise linux 10 (11) · red hat enterprise linux 8 (11) · red hat enterprise linux 9 (11) | ↑21 | ||
| 15 | ivanti | 22 | 5 | 4 | 2 | 4 | endpoint manager (16) · avalanche (3) · connect secure (2) | ↑4 |
| 16 | qualcomm | 19 | snapdragon (19) | ↑8 | ||||
| 17 | hcl software | 17 | dryice myxalytics (11) · bigfix patch management download plug ins (6) | ↑82 | ||||
| 18 | apache | 16 | 2 | 1 | apache ambari (3) · apache hive (2) · apache ranger (2) | — | ||
| 19 | iocharger | 16 | 5 | iocharger firmware for ac models (15) · iocharger firmware for ac chargers (1) | new | |||
| 20 | silabs com | 16 | sisdk (2) · configuration wizard 2 (1) · cp210 vcp win 2k (1) | · | ||||
| 21 | acronis | 14 | acronis cyber protect 16 (6) · acronis cyber protect cloud agent (6) · acronis true image (2) | · | ||||
| 22 | adobe | 14 | substance3d stager (5) · substance3d designer (4) · illustrator on ipad (2) | ↓20 | ||||
| 23 | sap se | 14 | 2 | sap businessobjects business intelligence platform (2) · sap netweaver application server for abap and abap platform (2) · sap business workflow and sap flexible workflow (1) | ↑7 | |||
| 24 | arista networks | 13 | arista edge threat management (9) · eos (2) · cloudvision appliance (1) | · | ||||
| 25 | campcodes | 13 | school management software (6) · computer laboratory management system (2) · school faculty scheduling system (2) | · | ||||
| 26 | mediatek | 13 | 1 | 1 | mt2735 mt2737 mt6767 mt6768 mt6769 mt6769k mt6769s mt6769t mt6769z mt6779 mt6781 mt6783 mt6785 mt6785t mt6785u mt6789 mt6833p mt6835 mt6835t mt6853 mt6853t mt6855 mt6855t mt6873 mt6875 mt6875t mt6877 mt6877t mt6877tt mt6878 mt6878m mt6879 mt6880 mt6880t mt6880u mt6883 mt6885 mt6886 mt6889 mt6890 mt6891 mt6893 mt6895 mt6895tt mt6896 mt6897 mt6899 mt6980 mt6980d mt6983t mt6985 mt6985t mt6989 mt6989t mt6990 mt6991 mt8666 mt8673 mt8675 mt8676 mt8678 mt8765 mt8766 mt8768 mt8771 mt8781 mt8786 mt8788 mt8788e mt8789 mt8791t mt8795t mt8797 mt8798 mt8863 (2) · mt2735 mt6767 mt6768 mt6769 mt6769k mt6769s mt6769t mt6769z mt6779 mt6781 mt6783 mt6785 mt6785t mt6785u mt6789 mt6833p mt6853 mt6853t mt6855 mt6855t mt6873 mt6875 mt6875t mt6877 mt6877t mt6877tt mt6880 mt6880t mt6880u mt6883 mt6885 mt6889 mt6890 mt6891 mt6893 mt8666 mt8673 mt8675 mt8765 mt8766 mt8768 mt8771 mt8781 mt8786 mt8788 mt8788e mt8789 mt8791t mt8795t mt8797 mt8798 (1) · mt2737 mt2739 mt6789 mt6813 mt6815 mt6835 mt6835t mt6855 mt6878 mt6878t mt6879 mt6886 mt6895 mt6895t mt6896 mt6897 mt6899 mt6980 mt6980d mt6983 mt6985 mt6986 mt6986d mt6988 mt6989 mt6990 mt6991 mt8676 mt8678 mt8798 mt8863 (1) | ↓5 | ||
| 27 | mozilla | 13 | 1 | firefox (11) · thunderbird (8) · firefox for ios (2) | · | |||
| 28 | imagination technologies | 12 | graphics ddk (12) | ↑38 | ||||
| 29 | mattermost | 12 | mattermost (12) | ↑40 | ||||
| 30 | raratheme | 12 | benevolent (1) · chic lite (1) · construction landing page (1) | new | ||||
| 31 | codezips | 11 | gym management system (8) · project management system (2) · blood bank management system (1) | ↓8 | ||||
| 32 | esafenet | 11 | cdg (11) | · | ||||
| 33 | sonicwall | 11 | 4 | 2 | 1 | 1 | sonicos (9) · netextender (1) · sma1000 (1) | ↑42 |
| 34 | stellarwp | 11 | 2 | 2 | the events calendar (3) · givewp (2) · event tickets (1) | · | ||
| 35 | fanli2012 | 10 | native php cms (10) | new | ||||
| 36 | hewlett packard enterprise hpe | 10 | hpe aruba networking fabric composer afc (5) · hpe aruba networking 501 wireless client bridge (2) · hpe aruba networking aos (2) | ↑15 | ||||
| 37 | nvidia | 10 | nvidia gpu display driver vgpu software (4) · nvidia container toolkit (3) · nvidia gpu operator (3) | · | ||||
| 38 | rockwell automation | 10 | 2 | factorytalk assetcentre (3) · factorytalk view machine edition (2) · factorytalk view site edition (2) | ↓9 | |||
| 39 | typo3 | 10 | typo3 (10) | · | ||||
| 40 | coollabsio | 9 | 3 | coolify (9) | new | |||
| 41 | d link | 9 | dir 816 a2 (7) · dir 823x (1) · dir 878 (1) | · | ||||
| 42 | dell | 9 | dell display manager (2) · dell vxrail hci (2) · powerscale onefs (2) | ↓33 | ||||
| 43 | ecovacs | 9 | 1 | unspecified robots (5) · deebot x2 combo (2) · deebot x2 omni (2) | new | |||
| 44 | embedai | 9 | embedai (9) | new | ||||
| 45 | gitlab | 9 | gitlab (9) | ↓19 | ||||
| 46 | joeybling | 9 | bootplus (9) | new | ||||
| 47 | schneider electric | 9 | powerlogic hdpm6000 (2) · bmenor2200h (1) · bmxnoe0100 (1) | · | ||||
| 48 | broadcom | 8 | 1 | symantec privileged access management (8) | · | |||
| 49 | cisco | 8 | 1 | cisco common services platform collector software (3) · cisco broadworks (1) · cisco crosswork network change automation (1) | · | |||
| 50 | elastic | 8 | 1 | kibana (5) · elastic defend (1) · elasticsearch (1) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2025-01 that are on the CISA KEV catalog today. The 14 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-791,0055 critical—
- 2CWE-3523152 critical↑2
- 3CWE-8928738 critical—
- 4CWE-8622867 critical↓2
- 5CWE-741166 critical↑1
- 6CWE-9411419 critical↓1
- 7CWE-1208632 critical↑7
- 8CWE-8637910 critical↑11
- 9CWE-7877515 critical↑1
- 10CWE-200746 critical↑2
- 1CWE-22739 critical—
- 2CWE-4347125 critical↑1
- 3CWE-284681 critical↑2
- 4CWE-476671 critical↓5
- 5CWE-786016 critical↑2
- 6CWE-122593 critical↑2
- 7CWE-775726 critical↑4
- 8CWE-770550 critical↑12
- 9CWE-416543 critical↓11
- 10CWE-5025316 critical↑2
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.