Month report
October 2025
Rolled up 2026-09-18 21:40 from 375,356 CVE records
4,274 CVEs published, +19.8% on the same month last year. 314 rated critical, 31 listed by CISA as exploited. linux led with 651; the most common weakness class was CWE-79 (683). huawei climbed 60 places, the largest move. 5 vendors ranked for the first time.
Published
4,274
Critical / high
314 / 1,509
Medium / low
1,846 / 194
Added to CISA KEV
31
Public exploit
149
Scanner template
32
Publication to KEV
How long before CISA listed them
Median days to listing
9
Listed within 7 days
40%
Listed within 30 days
70%
Weakness × vendor
Where the two overlap
| Vendor | CWE-79 | CWE-89 | CWE-74 | CWE-862 | CWE-284 | CWE-121 | CWE-200 | CWE-352 |
|---|---|---|---|---|---|---|---|---|
| linux | ||||||||
| microsoft | 1 | 2 | 15 | 1 | 14 | |||
| nagios | 51 | 6 | 3 | 1 | 1 | |||
| oracle | 2 | 21 | 8 | |||||
| code projects | 14 | 51 | 51 | 8 | ||||
| siemens | 2 | 1 | 2 | 1 | ||||
| f5 | 2 | 1 | ||||||
| qnap systems | 3 |
Detection gap
Listed as exploited, no public template
Listed this month
31
With a template
12
No template
19
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 651 | 11 | 1 | 6 | linux (651) · simatic s7 1500 cpu 1518 4 pn dp mfp (13) · simatic s7 1500 cpu 1518f 4 pn dp mfp (13) | — | |
| 2 | microsoft | 180 | 10 | 3 | 10 | 1 | windows server 2025 (126) · windows server 2025 server core installation (126) · windows 11 version 24h2 (120) | ↑2 |
| 3 | nagios | 97 | 13 | 1 | xi (74) · log server (15) · fusion (5) | · | ||
| 4 | oracle | 78 | 5 | 3 | 5 | 3 | mysql server (9) · oracle vm virtualbox (9) · oracle zfs storage appliance kit (9) | · |
| 5 | code projects | 75 | simple food ordering system (11) · e commerce website (10) · client details system (7) | ↑9 | ||||
| 6 | siemens | 48 | 3 | 1 | 4 | simatic s7 1500 cpu 1518 4 pn dp mfp (22) · simatic s7 1500 cpu 1518f 4 pn dp mfp (22) · siplus s7 1500 cpu 1518 4 pn dp mfp (22) | ↓3 | |
| 7 | f5 | 44 | 1 | 1 | 1 | big ip (34) · big ip next cnf (11) · big ip next spk (8) | · | |
| 8 | qnap systems | 44 | qts (26) · quts hero (24) · qsync central (15) | · | ||||
| 9 | tenda | 41 | 2 | ch22 (13) · ac7 (7) · o3 (6) | ↑17 | |||
| 10 | andsoft | 40 | 9 | e tms (40) | new | |||
| 11 | ibm | 40 | 3 | transformation extender advanced (5) · db2 high performance unload (4) · engineering requirements management doors next (4) | ↓1 | |||
| 12 | juniper networks | 40 | 1 | junos space (26) · junos os (8) · junos os evolved (7) | · | |||
| 13 | liferay | 40 | dxp (40) · portal (39) | ↓4 | ||||
| 14 | sourcecodester | 38 | hotel and lodge management system (15) · best salon management system (4) · farm management system (3) | ↓7 | ||||
| 15 | adobe | 36 | 1 | adobe commerce (5) · substance3d stager (5) · animate (4) | ↑6 | |||
| 16 | azure access technology | 34 | 24 | 1 | blu ic2 (34) · blu ic4 (34) | new | ||
| 17 | dell | 34 | 1 | powerprotect data domain with data domain operating system dd os lts2023 (18) · powerprotect data domain with data domain operating system dd os lts2024 (18) · powerprotect data domain with data domain operating system dd os of feature release (18) | ↑11 | |||
| 18 | fortinet | 32 | fortios (16) · fortiproxy (13) · ruggedcom ape1808 (7) | · | ||||
| 19 | the wikimedia foundation | 30 | 1 | mediawiki cargo extension (2) · mediawiki growthexperiments extension (2) · mediawiki advancedsearch extension (1) | · | |||
| 20 | samsung mobile | 26 | samsung mobile devices (12) · samsung notes (6) · smart switch (4) | ↓8 | ||||
| 21 | eclipse foundation | 23 | 1 | netx duo (11) · usbx (4) · threadx (3) | · | |||
| 22 | huawei | 21 | harmonyos (21) | ↑60 | ||||
| 23 | apache | 20 | 3 | 2 | apache airflow (3) · apache kylin (3) · apache tomcat (3) | ↑12 | ||
| 24 | jenkins project | 20 | jenkins publish to bitbucket plugin (3) · jenkins byteguard build actions plugin (2) · jenkins curseforge publisher plugin (2) | ↑44 | ||||
| 25 | sick | 20 | baggage analytics (10) · logistic diagnostic analytics (10) · package analytics (10) | · | ||||
| 26 | hcl software | 19 | unica platform (4) · unica centralized offer management (3) · bigfix mobile (2) | · | ||||
| 27 | qualcomm | 19 | snapdragon (19) | ↓4 | ||||
| 28 | hewlett packard enterprise hpe | 18 | arubaos aos (17) · proliant rl300 gen11 server (1) | ↑10 | ||||
| 29 | ipfire org | 18 | ipfire (18) | new | ||||
| 30 | redhat | 18 | red hat enterprise linux 10 (10) · red hat enterprise linux 8 (10) · red hat enterprise linux 9 (10) | ↓3 | ||||
| 31 | tomofun | 18 | furbo 360 (17) · furbo mini (14) · furbo mobile app (1) | new | ||||
| 32 | campcodes | 17 | 1 | online apartment visitor management system (6) · advanced online voting management system (4) · retro basketball shoes online store (4) | ↓26 | |||
| 33 | drupal | 17 | civictheme design system (2) · facets (2) · access code (1) | · | ||||
| 34 | ivanti | 17 | endpoint manager (13) · endpoint manager mobile (4) | ↓2 | ||||
| 35 | d link | 16 | 1 | nuclias connect (4) · dap 2695 (3) · di 7001 mini (3) | ↓13 | |||
| 36 | mediatek | 16 | mt6890 mt7615 mt7622 mt7663 mt7915 mt7916 mt7981 mt7986 (7) · mt6890 mt7603 mt7615 mt7622 mt7915 mt7916 mt7981 mt7986 (2) · mt6890 mt7915 mt7916 mt7981 mt7986 (2) | ↑35 | ||||
| 37 | mozilla | 15 | 7 | firefox (15) · thunderbird (11) | ↓7 | |||
| 38 | nvidia | 15 | geforce (8) · nvidia rtx quadro nvs (8) · tesla (8) | ↓25 | ||||
| 39 | labredescefetrj | 14 | 3 | 1 | wegia (14) | ↑45 | ||
| 40 | atlassian | 13 | jira align (11) · confluence data center (1) · jira software data center (1) | · | ||||
| 41 | newforma | 13 | 2 | project center (13) | new | |||
| 42 | belkin | 12 | f9k1015 (12) | · | ||||
| 43 | projectworlds | 12 | advanced library management system (4) · expense management system (4) · gate pass management system (2) | ↑10 | ||||
| 44 | rockwell automation | 12 | 1 | comms 1783 natr (3) · 1715 aentr ethernet ip adapter (2) · factorytalk linx (2) | ↑1 | |||
| 45 | centreon | 11 | 1 | infra monitoring (11) | · | |||
| 46 | phpgurukul | 11 | beauty parlour management system (7) · curfew e pass management system (3) · cyber cafe management system (1) | ↓29 | ||||
| 47 | crocoblock | 10 | 1 | jetblog (2) · jetsearch (2) · jetwoobuilder (2) | · | |||
| 48 | gitlab | 10 | gitlab (10) | ↓19 | ||||
| 49 | go standard library | 10 | crypto x509 (2) · archive tar (1) · crypto tls (1) | · | ||||
| 50 | hcl | 10 | aion (5) · hcl myxalytics (3) · hcl aion (2) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2025-10 that are on the CISA KEV catalog today. The 31 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-796834 critical—
- 2CWE-8930535 critical—
- 3CWE-741730 critical—
- 4CWE-8621714 critical—
- 5CWE-28414112 critical↑2
- 6CWE-1211145 critical↑21
- 7CWE-2001017 critical↑11
- 8CWE-352951 critical↓3
- 9CWE-789023 critical↑3
- 10CWE-949012 critical↓4
- 1CWE-416897 critical↓2
- 2CWE-22888 critical↑3
- 3CWE-119874 critical↑7
- 4CWE-4347015 critical—
- 5CWE-476700 critical↓7
- 6CWE-125621 critical↓3
- 7CWE-5025829 critical↑6
- 8CWE-400562 critical↑11
- 9CWE-787512 critical↑2
- 10CWE-120503 critical↑5
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.