Month report
May 2025
Rolled up 2026-09-22 22:46 from 376,476 CVE records
3,980 CVEs published, -20.3% on the same month last year. 347 rated critical, 24 listed by CISA as exploited. linux led with 549; the most common weakness class was CWE-79 (450). itsourcecode climbed 74 places, the largest move. 8 vendors ranked for the first time.
Published
3,980
Critical / high
347 / 1,402
Medium / low
1,688 / 197
Added to CISA KEV
24
Public exploit
125
Scanner template
56
Publication to KEV
How long before CISA listed them
Median days to listing
6
Listed within 7 days
52.6%
Listed within 30 days
68.4%
Detection gap
Listed as exploited, no public template
Listed this month
24
With a template
9
No template
15
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 549 | 10 | 3 | linux (549) · simatic s7 1500 cpu 1518 4 pn dp mfp (8) · simatic s7 1500 cpu 1518f 4 pn dp mfp (8) | — | ||
| 2 | phpgurukul | 113 | park ticketing management system (7) · company visitor management system (6) · employee record management system (6) | ↑3 | ||||
| 3 | microsoft | 80 | 5 | 5 | 7 | windows server 2022 23h2 edition server core installation (40) · windows server 2019 (38) · windows server 2019 server core installation (38) | ↓1 | |
| 4 | apple | 77 | 4 | 2 | macos (66) · ios and ipados (43) · visionos (32) | ↑10 | ||
| 5 | campcodes | 58 | 1 | sales and inventory system (22) · online hospital management system (11) · online shopping portal (11) | · | |||
| 6 | siemens | 58 | 6 | 1 | simatic s7 1500 cpu 1518 4 pn dp mfp (14) · simatic s7 1500 cpu 1518f 4 pn dp mfp (14) · siplus s7 1500 cpu 1518 4 pn dp mfp (14) | ↓3 | ||
| 7 | cisco | 48 | 1 | 1 | cisco ios xe software (20) · cisco catalyst sd wan manager (6) · cisco webex meetings (4) | ↑49 | ||
| 8 | ibm | 45 | 1 | db2 for linux unix and windows (8) · concert software (4) · security guardium (4) | — | |||
| 9 | sourcecodester | 45 | 1 | stock management system (8) · online student clearance system (7) · client database management system (6) | — | |||
| 10 | d link | 43 | di 7003gv2 (11) · dir 600l (9) · dir 619l (7) | · | ||||
| 11 | adobe | 40 | 7 | 1 | coldfusion (8) · substance3d stager (6) · animate (5) | ↓5 | ||
| 12 | itsourcecode | 36 | gym management system (15) · restaurant management system (9) · placement management system (6) | ↑74 | ||||
| 13 | qualcomm | 35 | snapdragon (35) | ↓3 | ||||
| 14 | freefloat | 33 | ftp server (33) | new | ||||
| 15 | abb | 31 | 4 | 1 | aspect enterprise (31) · matrix series (31) · nexus series (31) | ↑64 | ||
| 16 | samsung mobile | 30 | samsung mobile devices (13) · samsung gallery (4) · libsavscmn (2) | ↑10 | ||||
| 17 | totolink | 29 | a3002r (18) · a3002ru (17) · a702r (12) | ↑6 | ||||
| 18 | pcman | 25 | 2 | ftp server (25) | ↓1 | |||
| 19 | freescout help desk | 24 | freescout (24) | new | ||||
| 20 | redhat | 24 | 1 | 2 | red hat enterprise linux 8 (19) · red hat enterprise linux 9 (18) · red hat enterprise linux 10 (14) | ↓9 | ||
| 21 | code projects | 22 | employee record system (3) · patient record management system (3) · online bus reservation system (2) | ↓14 | ||||
| 22 | 20 | 1 | 1 | chrome (14) · android (3) · chromeos (1) | — | |||
| 23 | sap se | 20 | 2 | 1 | sap supplier relationship management live auction cockpit (5) · sap service parts management spm (2) · sap business objects business intelligence platform pmw (1) | ↓2 | ||
| 24 | schweitzer engineering laboratories | 19 | 1 | sel blueframe os (11) · sel 5056 software defined network flow controller (4) · sel 3350 1 (1) | · | |||
| 25 | mozilla | 17 | 1 | thunderbird (16) · firefox (12) · firefox for ios (1) | ↓9 | |||
| 26 | drupal | 16 | enterprise mfa tfa for drupal (5) · one time password (3) · cookies consent management (1) | ↓1 | ||||
| 27 | mojoomla | 16 | 8 | 1 | wpams (7) · hospital management system (6) · school management (2) | new | ||
| 28 | apache | 15 | 3 | 3 | apache inlong (3) · apache iotdb (2) · apache superset (2) | ↓4 | ||
| 29 | gitlab | 14 | gitlab (14) | ↑19 | ||||
| 30 | typo3 | 14 | 1 | typo3 (6) · ns backup extension (3) · sr feuser register extension (2) | · | |||
| 31 | dell | 13 | dell storage center dell storage manager (5) · powerscale onefs (3) · powerscale insightiq (2) | ↓16 | ||||
| 32 | tenda | 13 | dap 1520 (3) · a15 (2) · ac1206 (2) | ↓2 | ||||
| 33 | dassault syst mes | 12 | product manager (3) · city referential manager (2) · collaborative industry innovator (2) | · | ||||
| 34 | f5 | 12 | 1 | big ip (9) · big ip next cnf (4) · big ip next spk (4) | · | |||
| 35 | fuji electric co | 12 | v sft (11) · s sft (1) | · | ||||
| 36 | projectworlds | 12 | online lawyer management system (3) · online time table generator (3) · hospital database management system (1) | ↑3 | ||||
| 37 | h3c | 11 | seccenter smp e1114p02 (6) · gr 5400ax (2) · gr 1800ax (1) | ↑10 | ||||
| 38 | huawei | 11 | harmonyos (11) | ↓18 | ||||
| 39 | lambertgroup | 11 | chameleon html5 audio player with without playlist (1) · countdown pro wp plugin (1) · magic responsive slider and carousel wordpress (1) | new | ||||
| 40 | rvc project | 11 | retrieval based voice conversion webui (11) | new | ||||
| 41 | wpfactory | 11 | additional custom emails recipients for woocommerce (1) · back button widget (1) · change add to cart button text for woocommerce (1) | ↑36 | ||||
| 42 | echarge hardy barth | 10 | cph2 cpp2 charging stations (7) · cph2 (3) | new | ||||
| 43 | fortinet | 10 | 2 | 1 | 1 | fortios (3) · forticlientmac (2) · forticamera (1) | ↓10 | |
| 44 | open asset import library | 10 | assimp (10) | ↑28 | ||||
| 45 | rt labs | 10 | p net (10) | new | ||||
| 46 | tcman | 10 | 7 | gim (10) | · | |||
| 47 | themeton | 10 | 4 | acerola (2) · hotstar multi purpose business theme (2) · the business (2) | new | |||
| 48 | tridium | 10 | niagara enterprise security (10) · niagara framework (10) | · | ||||
| 49 | arista networks | 9 | 3 | eos (5) · cloudvision portal (3) · cloudvision (1) | · | |||
| 50 | mattermost | 9 | mattermost (9) | ↓22 |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2025-05 that are on the CISA KEV catalog today. The 24 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-794504 critical—
- 2CWE-8940149 critical—
- 3CWE-743100 critical↑2
- 4CWE-1191594 critical↑4
- 5CWE-8621354 critical↓1
- 6CWE-1201324 critical↑3
- 7CWE-28410811 critical↓1
- 8CWE-3521071 critical↓5
- 9CWE-77959 critical↑16
- 10CWE-949312 critical↓3
- 1CWE-1218626 critical↑9
- 2CWE-22758 critical↓1
- 3CWE-5027436 critical↑3
- 4CWE-4346925 critical↑1
- 5CWE-20666 critical↑2
- 6CWE-200661 critical↑2
- 7CWE-125612 critical↓5
- 8CWE-787553 critical↑9
- 9CWE-863486 critical↑10
- 10CWE-416470 critical↓10
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.