Month report
April 2025
Rolled up 2026-09-23 05:40 from 376,511 CVE records
4,033 CVEs published, +11.9% on the same month last year. 318 rated critical, 15 listed by CISA as exploited. linux led with 280; the most common weakness class was CWE-79 (765). hcl software climbed 50 places, the largest move. 6 vendors ranked for the first time.
Published
4,033
+0.6%on the previous month
Critical / high
318 / 1,602
of the 3,937 scored
Medium / low
1,806 / 211
the rest of the scored bands
Added to CISA KEV
15
listed as exploited this month
Public exploit
121
exploit code indexed publicly
Scanner template
39
1% of the month
Publication to KEV
How long before CISA listed them
16 published this month and listed since — not the 15 listed during it.
Median days to listing
5
from publication to CISA's date added
Listed within 7 days
56.2%
of the 16
Listed within 30 days
81.2%
of the 16
Weakness × vendor
Where the two overlap
CVEs carrying both. Each row is shaded against its own worst class.
| Vendor | CWE-79 | CWE-89 | CWE-352 | CWE-862 | CWE-74 | CWE-284 | CWE-94 | CWE-119 |
|---|---|---|---|---|---|---|---|---|
| linux | ||||||||
| microsoft | 1 | 1 | 7 | |||||
| siemens | 67 | 1 | ||||||
| oracle | 1 | 1 | 30 | |||||
| phpgurukul | 68 | 68 | ||||||
| adobe | 2 | 1 | 4 | |||||
| code projects | 3 | 20 | 20 | 4 | 3 | 11 | ||
| ibm | 8 | 1 |
Detection gap
Listed as exploited, no public template
CVEs CISA listed this month
Listed this month
15
added to the CISA KEV catalog
With a template
4
26.7% covered
No template
11
nothing in the public index
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
Δ is the move against last month's rank.
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 280 | 7 | 1 | linux (280) · simatic s7 1500 cpu 1518 4 pn dp mfp (20) · simatic s7 1500 cpu 1518f 4 pn dp mfp (20) | — | ||
| 2 | microsoft | 134 | 2 | 1 | 6 | windows server 2025 (82) · windows server 2025 server core installation (82) · windows server 2022 (76) | ↑2 | |
| 3 | siemens | 107 | 9 | telecontrol server basic (68) · simatic s7 1500 cpu 1518 4 pn dp mfp (22) · simatic s7 1500 cpu 1518f 4 pn dp mfp (22) | ↑2 | |||
| 4 | oracle | 73 | 1 | 2 | mysql server (27) · mysql cluster (6) · oracle database server (5) | · | ||
| 5 | phpgurukul | 68 | 1 | men salon management system (14) · covid19 testing management system (10) · e diary management system (8) | ↓2 | |||
| 6 | adobe | 52 | 4 | coldfusion (15) · adobe framemaker (10) · after effects (7) | ↑1 | |||
| 7 | code projects | 42 | 1 | patient record management system (12) · blood bank management system (5) · my blog layui (3) | ↑3 | |||
| 8 | ibm | 36 | 1 | aspera console (6) · txseries for multiplatforms (4) · infosphere information server (3) | — | |||
| 9 | sourcecodester | 35 | 1 | 1 | web based pharmacy product management system (15) · apartment visitor management system (5) · online eyewear shop (5) | ↑16 | ||
| 10 | qualcomm | 34 | snapdragon (34) | ↑3 | ||||
| 11 | redhat | 34 | 1 | red hat enterprise linux 8 (28) · red hat enterprise linux 9 (28) · red hat enterprise linux 6 (27) | ↑1 | |||
| 12 | growatt | 30 | 2 | cloud portal (30) | new | |||
| 13 | hcl software | 30 | hcl leap (10) · hcl domino leap (6) · hcl bigfix platform (3) | ↑50 | ||||
| 14 | apple | 26 | 2 | 2 | 5 | macos (22) · ios and ipados (20) · tvos (14) | ↓12 | |
| 15 | dell | 26 | 1 | powerscale onefs (6) · wyse management suite (4) · common event enabler (2) | ↓6 | |||
| 16 | mozilla | 26 | 1 | thunderbird (23) · firefox (22) · focus (1) | ↑5 | |||
| 17 | pcman | 24 | ftp server (24) | new | ||||
| 18 | juniper networks | 21 | junos os (21) · junos os evolved (9) | · | ||||
| 19 | codeprojects | 20 | 1 | online restaurant management system (16) · news publishing site dashboard (2) · patient record management system (1) | · | |||
| 20 | huawei | 20 | harmonyos (20) · emui (6) | ↑30 | ||||
| 21 | sap se | 20 | 4 | 1 | 1 | 1 | sap businessobjects business intelligence platform (1) · sap capital yield tax management (1) · sap commerce cloud (1) | ↑1 |
| 22 | 19 | 1 | chrome (11) · chromeos (7) · angularjs (1) | ↓6 | ||||
| 23 | totolink | 19 | n150rt (10) · a3700r (8) · a6000r (1) | ↑31 | ||||
| 24 | apache | 18 | 4 | 3 | 1 | apache activemq artemis (2) · apache tomcat (2) · apache activemq nms openwire client (1) | ↓6 | |
| 25 | drupal | 18 | access code (1) · baguettebox js (1) · block class (1) | ↓14 | ||||
| 26 | samsung mobile | 17 | samsung mobile devices (15) · galaxy store (1) · samsungnotes (1) | ↓12 | ||||
| 27 | bosch rexroth | 15 | ctrlx os device admin (12) · ctrlx os solutions (3) | new | ||||
| 28 | mattermost | 14 | mattermost (14) | ↑28 | ||||
| 29 | stylemix | 14 | 1 | 1 | motors (3) · motors car dealership classified listings plugin (3) · cost calculator builder (2) | · | ||
| 30 | tenda | 14 | w12 (5) · i24 (4) · fh1202 (2) | ↓4 | ||||
| 31 | the wikimedia foundation | 14 | mediawiki ajax poll extension (1) · mediawiki confirm account extension (1) · mediawiki core feed utils (1) | · | ||||
| 32 | rockwell automation | 13 | arena (11) · thinmanager (2) | · | ||||
| 33 | fortinet | 12 | 2 | 2 | fortios (4) · fortiweb (3) · fortianalyzer (2) | ↓27 | ||
| 34 | netgear | 12 | jwnr2000v2 (7) · ex6120 (2) · ex6200 (2) | · | ||||
| 35 | jenkins project | 11 | 2 | 1 | jenkins (2) · jenkins asakusasatellite plugin (2) · jenkins cadence vmanager plugin (1) | ↑45 | ||
| 36 | joomsky | 11 | 3 | js job manager (6) · js help desk (5) | new | |||
| 37 | mediatek | 11 | 1 | mt9972 (4) · mt2718 mt6781 mt6789 mt6835 mt6855 mt6878 mt6879 mt6886 mt6895 mt6897 mt6983 mt6985 mt6989 mt8196 mt8673 mt8676 mt8678 mt8781 (1) · mt2735 mt2737 mt6739 mt6761 mt6762 mt6762d mt6762m mt6763 mt6765 mt6765t mt6767 mt6768 mt6769 mt6769k mt6769s mt6769t mt6769z mt6771 mt6779 mt6781 mt6783 mt6785 mt6785t mt6785u mt6789 mt6813 mt6833 mt6833p mt6835 mt6835t mt6853 mt6853t mt6855 mt6855t mt6873 mt6875 mt6875t mt6877 mt6877t mt6877tt mt6878 mt6878m mt6879 mt6880 mt6883 mt6885 mt6886 mt6889 mt6890 mt6891 mt6893 mt6895 mt6895tt mt6896 mt6897 mt6899 mt6980 mt6980d mt6983 mt6983t mt6985 mt6985t mt6989 mt6989t mt6990 mt6991 mt8666 mt8667 mt8673 mt8675 mt8676 mt8678 mt8765 mt8766 mt8768 mt8771 mt8781 mt8786 mt8788 mt8788e mt8791t mt8796 mt8797 mt8798 mt8863 (1) | ↑15 | |||
| 38 | palo alto networks | 11 | 1 | cloud ngfw (6) · pan os (6) · prisma access (6) | · | |||
| 39 | projectworlds | 11 | online doctor appointment booking system (9) · online examination system (2) | ↑5 | ||||
| 40 | softcom | 11 | iksoris (11) | new | ||||
| 41 | autodesk | 10 | advance steel (6) · autocad (6) · autocad architecture (6) | ↓1 | ||||
| 42 | hewlett packard enterprise hpe | 10 | 1 | hpe aruba networking aos (4) · aos 10 ap (2) · hpe cray data virtualization service dvs (1) | · | |||
| 43 | jetbrains | 10 | toolbox app (4) · teamcity (3) · intellij idea (1) | ↑38 | ||||
| 44 | pickplugins | 10 | question answer (3) · wishlist (3) · job board manager (2) | · | ||||
| 45 | suse | 10 | 2 | rancher (9) · opensuse tumbleweed (1) | · | |||
| 46 | xwiki | 10 | 3 | 3 | xwiki platform (10) | · | ||
| 47 | h3c | 9 | magic nx15 (8) · magic nx400 (8) · magic r3010 (8) | ↑14 | ||||
| 48 | gitlab | 8 | gitlab (8) | ↓25 | ||||
| 49 | hitachi vantara | 8 | 1 | pentaho business analytics server (5) · pentaho data integration analytics (3) | · | |||
| 50 | inaba denki sangyo co | 8 | 1 | ac pd wps 11ac (8) · ac pd wps 11ac p (8) · ac wps 11ac (8) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2025-04 that are on the CISA KEV catalog today. The 15 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-797653 critical—
- 2CWE-8939156 critical—
- 3CWE-3522447 critical—
- 4CWE-8622375 critical—
- 5CWE-742010 critical—
- 6CWE-28413617 critical↑1
- 7CWE-9411922 critical↓1
- 8CWE-119972 critical↑3
- 9CWE-120847 critical↑11
- 10CWE-416762 critical↑2
- 1CWE-22759 critical↓2
- 2CWE-125660 critical↑1
- 3CWE-476650 critical↑1
- 4CWE-98643 critical↑15
- 5CWE-4346324 critical↑4
- 6CWE-5026223 critical—
- 7CWE-20572 critical↑6
- 8CWE-200551 critical↓10
- 9CWE-266557 critical↑3
- 10CWE-121547 critical↑7
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.