Month report
March 2025
Rolled up 2026-09-19 03:21 from 375,542 CVE records
4,010 CVEs published, +21.6% on the same month last year. 396 rated critical, 32 listed by CISA as exploited. linux led with 207; the most common weakness class was CWE-79 (784). esri climbed 78 places, the largest move. 9 vendors ranked for the first time.
Published
4,010
Critical / high
396 / 1,513
Medium / low
1,805 / 234
Added to CISA KEV
32
Public exploit
134
Scanner template
50
Publication to KEV
How long before CISA listed them
Median days to listing
4
Listed within 7 days
53.8%
Listed within 30 days
65.4%
Detection gap
Listed as exploited, no public template
Listed this month
32
With a template
10
No template
22
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 207 | 4 | 1 | linux (207) · simatic s7 1500 cpu 1518 4 pn dp mfp (16) · simatic s7 1500 cpu 1518f 4 pn dp mfp (16) | — | ||
| 2 | apple | 159 | 46 | 1 | 5 | macos (149) · ios and ipados (72) · watchos (50) | ↑66 | |
| 3 | phpgurukul | 79 | 1 | bank locker management system (12) · art gallery management system (11) · human metapneumovirus testing management system (7) | ↑48 | |||
| 4 | microsoft | 65 | 1 | 7 | 7 | windows server 2022 23h2 edition server core installation (35) · windows server 2025 (35) · windows server 2025 server core installation (35) | — | |
| 5 | siemens | 51 | 2 | 1 | linux (26) · simatic s7 1500 cpu 1518 4 pn dp mfp (16) · simatic s7 1500 cpu 1518f 4 pn dp mfp (16) | ↓2 | ||
| 6 | fortinet | 44 | 2 | 1 | fortios (7) · fortisandbox (7) · fortiweb (6) | ↑17 | ||
| 7 | adobe | 43 | acrobat reader (9) · indesign desktop (9) · substance3d sampler (7) | ↓2 | ||||
| 8 | ibm | 39 | 3 | infosphere information server (5) · 4769 developers toolkit (3) · common cryptographic architecture (3) | ↓6 | |||
| 9 | dell | 32 | 2 | unity (15) · smartfabric os10 software (11) · secure connect gateway scg 5 0 appliance srs (2) | ↑13 | |||
| 10 | code projects | 31 | blood bank management system (10) · payroll management system (7) · blood bank system (3) | ↑2 | ||||
| 11 | drupal | 30 | 3 | ai artificial intelligence (4) · drupal core (4) · google tag (2) | · | |||
| 12 | redhat | 28 | 1 | red hat enterprise linux 7 (17) · red hat enterprise linux 8 (17) · red hat enterprise linux 10 (13) | ↓4 | |||
| 13 | qualcomm | 27 | 1 | snapdragon (27) | ↓2 | |||
| 14 | samsung mobile | 27 | samsung notes (19) · samsung mobile devices (6) · galaxy wearable (1) | ↓4 | ||||
| 15 | openharmony | 26 | openharmony (26) | · | ||||
| 16 | 25 | 1 | 3 | chrome (15) · android (7) · chromeos (1) | ↑12 | |||
| 17 | esri | 24 | 1 | arcgis server (23) · portal for arcgis (1) | ↑78 | |||
| 18 | apache | 23 | 3 | 1 | 3 | 2 | apache traffic server (4) · apache camel (2) · apache commons vfs (2) | ↑7 |
| 19 | lunary ai | 22 | 2 | lunary ai lunary (22) | · | |||
| 20 | binary husky | 21 | 1 | binary husky gpt academic (20) · gpt academic (1) | new | |||
| 21 | mozilla | 20 | 3 | firefox (15) · thunderbird (13) · firefox for ios (3) | ↑3 | |||
| 22 | sap se | 20 | sap s 4hana manage bank statements (2) · s 4hana manage purchasing info records (1) · sap business objects business intelligence platform (1) | ↓2 | ||||
| 23 | gitlab | 19 | gitlab (19) | ↓8 | ||||
| 24 | d link | 18 | 4 | 1 | dir 605l (8) · dir 618 (8) · dap 1620 (4) | ↑29 | ||
| 25 | sourcecodester | 18 | kortex lite advocate office management system (5) · online eyewear shop (3) · ac repair and services system (2) | ↓11 | ||||
| 26 | tenda | 17 | 1 | fh1202 (8) · tx3 (5) · ac6 (1) | · | |||
| 27 | open webui | 15 | 1 | 1 | open webui open webui (15) | new | ||
| 28 | qnap systems | 15 | qts (9) · quts hero (9) · qurouter (2) | · | ||||
| 29 | cisco | 14 | 1 | cisco ios xr software (10) · cisco ironport security management appliance (1) · cisco meraki mx firmware (1) | ↓22 | |||
| 30 | iahispano | 14 | applio (14) | new | ||||
| 31 | open asset import library | 14 | assimp (14) | new | ||||
| 32 | parisneo | 14 | 1 | parisneo lollms webui (10) · parisneo lollms (4) | · | |||
| 33 | zj1983 | 14 | zz (14) | new | ||||
| 34 | aimhubio | 13 | 2 | aimhubio aim (13) | · | |||
| 35 | b r industrial automation | 13 | 1 | aprol (9) · b r aprol (4) | · | |||
| 36 | dassault syst mes | 13 | enovia collaborative industry innovator (9) · 3dswymer (2) · enovia change manager (1) | · | ||||
| 37 | labredescefetrj | 13 | 5 | wegia (13) | ↓24 | |||
| 38 | ashlar vellum | 12 | cobalt (12) | · | ||||
| 39 | webtoffee | 12 | 1 | export and import users and customers (4) · order export order import for woocommerce (4) · product import export for woocommerce import export product csv suite (4) | · | |||
| 40 | autodesk | 11 | advance steel (11) · autocad (11) · autocad architecture (11) | · | ||||
| 41 | danny avila | 11 | 1 | danny avila librechat (11) | new | |||
| 42 | enalean | 11 | tuleap (11) | · | ||||
| 43 | langgenius | 11 | 1 | langgenius dify (11) | new | |||
| 44 | projectworlds | 11 | life insurance management system (6) · online hotel booking (4) · apartment visitors management system (1) | · | ||||
| 45 | danswer ai | 10 | 1 | 1 | danswer ai danswer (10) | new | ||
| 46 | devolutions | 10 | remote desktop manager (6) · server (4) | ↑47 | ||||
| 47 | eosphoros ai | 10 | 6 | 1 | eosphoros ai db gpt (10) | new | ||
| 48 | gaizhenbiao | 10 | gaizhenbiao chuanhuchatgpt (10) | · | ||||
| 49 | h2oai | 10 | 1 | h2oai h2o 3 (10) | · | |||
| 50 | huawei | 10 | harmonyos (9) · emui (2) · yutufz 5651s1 (1) | ↓21 |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2025-03 that are on the CISA KEV catalog today. The 32 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-797842 critical—
- 2CWE-8930947 critical—
- 3CWE-3522253 critical↑1
- 4CWE-86218619 critical↑2
- 5CWE-741830 critical↑6
- 6CWE-9414025 critical↑1
- 7CWE-28413215 critical↑2
- 8CWE-2009610 critical↑7
- 9CWE-229611 critical↓1
- 10CWE-918778 critical↑19
- 1CWE-119756 critical↑13
- 2CWE-416722 critical↓9
- 3CWE-125665 critical↑3
- 4CWE-476660 critical↓9
- 5CWE-78619 critical↑3
- 6CWE-5025925 critical↑9
- 7CWE-7875711 critical↓4
- 8CWE-77566 critical↑1
- 9CWE-434539 critical↑1
- 10CWE-1205215 critical↓3
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.