Month report
July 2025
Rolled up 2026-09-19 03:21 from 375,542 CVE records
3,774 CVEs published, +21.2% on the same month last year. 390 rated critical, 20 listed by CISA as exploited. linux led with 401; the most common weakness class was CWE-79 (467). jetbrains climbed 52 places, the largest move. 3 vendors ranked for the first time.
Published
3,774
Critical / high
390 / 1,507
Medium / low
1,452 / 187
Added to CISA KEV
20
Public exploit
260
Scanner template
47
Publication to KEV
How long before CISA listed them
Median days to listing
14
Listed within 7 days
35.7%
Listed within 30 days
57.1%
Weakness × vendor
Where the two overlap
| Vendor | CWE-79 | CWE-89 | CWE-74 | CWE-119 | CWE-94 | CWE-121 | CWE-434 | CWE-22 |
|---|---|---|---|---|---|---|---|---|
| linux | ||||||||
| code projects | 4 | 134 | 134 | 4 | 14 | |||
| microsoft | 1 | 2 | ||||||
| irfanview | 63 | |||||||
| apple | 1 | 1 | 8 | 4 | ||||
| oracle | ||||||||
| phpgurukul | 21 | 51 | 51 | 21 | ||||
| adobe | 12 | 3 |
Detection gap
Listed as exploited, no public template
Listed this month
20
With a template
11
No template
9
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 401 | 19 | 1 | 2 | linux (401) · simatic s7 1500 cpu 1518 4 pn dp mfp (35) · simatic s7 1500 cpu 1518f 4 pn dp mfp (35) | — | |
| 2 | code projects | 154 | 6 | exam form submission (20) · church donation system (14) · online appointment booking system (14) | ↑1 | |||
| 3 | microsoft | 142 | 5 | 3 | 15 | 3 | windows server 2025 (97) · windows server 2025 server core installation (97) · windows server 2022 23h2 edition server core installation (94) | ↑3 |
| 4 | irfanview | 91 | irfanview (91) | · | ||||
| 5 | apple | 82 | 25 | 1 | 1 | macos (77) · ios and ipados (25) · tvos (21) | · | |
| 6 | oracle | 77 | 1 | 2 | mysql server (29) · oracle java se (7) · oracle vm virtualbox (7) | · | ||
| 7 | phpgurukul | 73 | 1 | vehicle parking management system (13) · apartment visitors management system (9) · online fire reporting system (9) | ↓3 | |||
| 8 | adobe | 71 | 3 | 1 | adobe framemaker (15) · coldfusion (13) · illustrator (10) | ↓6 | ||
| 9 | campcodes | 65 | 1 | employee management system (10) · payroll management system (9) · courier management system (8) | ↑9 | |||
| 10 | siemens | 64 | 3 | 2 | simatic s7 1500 cpu 1518 4 pn dp mfp (42) · simatic s7 1500 cpu 1518f 4 pn dp mfp (42) · siplus s7 1500 cpu 1518 4 pn dp mfp (42) | ↑3 | ||
| 11 | ibm | 54 | db2 (7) · openpages with watson (6) · analytics content hub (4) | ↓3 | ||||
| 12 | tenda | 51 | 1 | fh451 (15) · o3v2 (10) · fh1201 (7) | ↓1 | |||
| 13 | jenkins project | 31 | 1 | jenkins applitools eyes plugin (3) · jenkins apica loadtest plugin (2) · jenkins dead man s snitch plugin (2) | · | |||
| 14 | labredescefetrj | 31 | 9 | wegia (31) | ↑31 | |||
| 15 | redhat | 30 | 1 | 2 | red hat enterprise linux 8 (22) · red hat enterprise linux 9 (22) · red hat enterprise linux 6 (20) | ↓5 | ||
| 16 | wikimedia foundation | 30 | 3 | mediawiki abusefilter extension (3) · mediawiki checkuser extension (3) · mediawiki securepoll extension (3) | · | |||
| 17 | sap se | 29 | 5 | sapcar (4) · sap netweaver application server abap (2) · sap netweaver application server for abap (2) | ↑8 | |||
| 18 | totolink | 28 | t6 (13) · a702r (6) · x15 (5) | ↓13 | ||||
| 19 | qualcomm | 26 | 1 | snapdragon (26) | ↑5 | |||
| 20 | d link | 25 | 4 | 3 | dir 513 (7) · di 8100 (6) · dcs 6010l (1) | ↓11 | ||
| 21 | samsung electronics | 25 | 12 | magicinfo 9 server (18) · data management server (5) · dms data management server (1) | · | |||
| 22 | apache | 24 | 1 | 3 | apache http server (9) · apache tomcat (3) · apache jena (2) | ↓7 | ||
| 23 | juniper networks | 24 | 1 | junos os (21) · junos os evolved (12) · juniper security director (1) | · | |||
| 24 | huawei | 21 | harmonyos (21) · emui (4) | ↑9 | ||||
| 25 | endress hauser | 19 | endress hauser meac300 fnade4 (19) | · | ||||
| 26 | portabilis | 19 | i educar (16) · i diario (3) | new | ||||
| 27 | marvell | 16 | 4 | 1 | qconvergeconsole (16) | · | ||
| 28 | mediatek | 16 | 5 | mt6890 mt7615 mt7622 mt7663 mt7915 mt7916 mt7981 mt7986 (7) · mt6890 mt7915 mt7916 mt7981 mt7986 (2) · mt7902 mt7920 mt7921 mt7922 mt7925 mt7927 (2) | ↑36 | |||
| 29 | mozilla | 16 | 6 | firefox (16) · thunderbird (15) | ↓6 | |||
| 30 | hp | 15 | poly clariti manager (10) · certain hp designjet products (1) · certain hp laserjet pro printers (1) | · | ||||
| 31 | ivanti | 15 | 2 | connect secure (6) · policy secure (6) · endpoint manager (3) | · | |||
| 32 | samsung mobile | 15 | samsung mobile devices (10) · libsavsvc so (4) · isemtelephony (1) | — | ||||
| 33 | belkin | 14 | f9k1122 (14) | · | ||||
| 34 | dell | 14 | smartfabric os10 software (3) · appsync (2) · client platform bios (1) | ↓12 | ||||
| 35 | phoenix contact | 14 | 1 | charx sec 3000 (9) · charx sec 3050 (9) · charx sec 3100 (9) | · | |||
| 36 | hewlett packard enterprise | 13 | 1 | hpe autopass license server (7) · hpe telco network function virtual orchestrator (3) · insight remote support (3) | · | |||
| 37 | jetbrains | 13 | teamcity (11) · youtrack (2) | ↑52 | ||||
| 38 | autodesk | 12 | shared components (8) · autocad (4) · revit (3) | · | ||||
| 39 | cisco | 11 | 2 | 1 | cisco identity services engine software (4) · cisco unified contact center express (2) · cisco unified intelligence center (2) | ↓18 | ||
| 40 | gitlab | 11 | gitlab (10) · gitlab language server (1) | ↓21 | ||||
| 41 | nokia | 11 | 2 | nokia single ran (7) · wavesuite noc (3) · nokia single ran airscale flexi multiradio is not affected (1) | · | |||
| 42 | quiter | 11 | 7 | quiter gateway java war on apache tomcat (11) | new | |||
| 43 | advantech | 10 | iview (10) | ↑6 | ||||
| 44 | asr | 10 | falcon linux kestrel lapwing linux (10) | · | ||||
| 45 | hcl software | 10 | iem (5) · iautomate (3) · bigfix remote control (1) | · | ||||
| 46 | itsourcecode | 10 | employee management system (4) · insurance management system (4) · agri trading online shopping system (1) | · | ||||
| 47 | broadcom | 9 | 1 | brocade ascg (3) · brocade sannav (3) · symantec it management suite (2) | ↑36 | |||
| 48 | helmholz | 9 | mbnet mini (8) · rex 100 (8) · mbnet hw1 (1) | · | ||||
| 49 | invt | 9 | vt designer (5) · hmitool (4) | new | ||||
| 50 | mb connect line | 9 | mbnet mini (8) · rex 100 (8) · mbnet hw1 (1) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2025-07 that are on the CISA KEV catalog today. The 20 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-7946714 critical—
- 2CWE-8941847 critical—
- 3CWE-743042 critical—
- 4CWE-1191964 critical—
- 5CWE-9413723 critical↑4
- 6CWE-1211168 critical↑6
- 7CWE-43411043 critical↑8
- 8CWE-2210912 critical—
- 9CWE-28410612 critical↑5
- 10CWE-86210411 critical↓4
- 1CWE-789539 critical↑2
- 2CWE-125741 critical↑4
- 3CWE-207117 critical↑5
- 4CWE-122702 critical↑9
- 5CWE-120693 critical↓8
- 6CWE-200618 critical↑8
- 7CWE-352592 critical↓12
- 8CWE-3065730 critical↑10
- 9CWE-400572 critical↑10
- 10CWE-7875511 critical↑5
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.