Month report
November 2025
Rolled up 2026-09-22 22:46 from 376,476 CVE records
3,021 CVEs published, -25.5% on the same month last year. 257 rated critical, 11 listed by CISA as exploited. apple led with 113; the most common weakness class was CWE-79 (421). apple climbed 96 places, the largest move. 7 vendors ranked for the first time.
Published
3,021
-29.3%on the previous month
Critical / high
257 / 1,053
of the 2,961 scored
Medium / low
1,497 / 154
the rest of the scored bands
Added to CISA KEV
11
listed as exploited this month
Public exploit
131
exploit code indexed publicly
Scanner template
29
1% of the month
Publication to KEV
How long before CISA listed them
11 published this month and listed since — not the 11 listed during it.
Median days to listing
16
from publication to CISA's date added
Listed within 7 days
45.5%
of the 11
Listed within 30 days
54.5%
of the 11
Weakness × vendor
Where the two overlap
CVEs carrying both. Each row is shaded against its own worst class.
| Vendor | CWE-79 | CWE-89 | CWE-862 | CWE-74 | CWE-284 | CWE-352 | CWE-434 | CWE-200 |
|---|---|---|---|---|---|---|---|---|
| apple | 2 | 22 | 11 | |||||
| linux | ||||||||
| microsoft | 3 | 1 | 1 | 4 | 2 | |||
| 1 | ||||||||
| ibm | 4 | 1 | ||||||
| code projects | 3 | 31 | 31 | 2 | 2 | |||
| sourcecodester | 3 | 26 | 2 | 26 | 1 | |||
| itsourcecode | 31 | 31 | 1 | 1 |
Detection gap
Listed as exploited, no public template
CVEs CISA listed this month
Listed this month
11
added to the CISA KEV catalog
With a template
5
45.5% covered
No template
6
nothing in the public index
- 1fortinet1of 2 listed
- 2google1of 1 listed
- 3microsoft1of 1 listed
- 4samsung mobile1of 1 listed
- 5siemens1of 1 listed
- 6watchguard1of 1 listed
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
Δ is the move against last month's rank.
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | apple | 113 | 1 | 3 | macos (94) · ios and ipados (72) · visionos (50) | ↑96 | ||
| 2 | linux | 104 | 2 | 1 | linux (104) · simatic s7 1500 cpu 1518 4 pn dp mfp (3) · simatic s7 1500 cpu 1518f 4 pn dp mfp (3) | ↓1 | ||
| 3 | microsoft | 71 | 5 | 2 | 5 | windows 11 version 24h2 (36) · windows 11 version 25h2 (36) · windows 10 version 1809 (34) | ↓1 | |
| 4 | 69 | 1 | 2 | chrome (66) · android (1) · cadra (1) | · | |||
| 5 | ibm | 40 | 3 | db2 (9) · concert (6) · aix (4) | ↑6 | |||
| 6 | code projects | 38 | responsive hotel site (6) · student information system (6) · simple online hotel reservation system (4) | ↓1 | ||||
| 7 | sourcecodester | 34 | best house rental management system (4) · train station ticketing system (4) · alumni management system (2) | ↑7 | ||||
| 8 | itsourcecode | 32 | inventory management system (7) · covid tracking system (5) · online loan management system (5) | · | ||||
| 9 | adobe | 29 | format plugins (9) · illustrator on ipad (5) · indesign desktop (4) | ↑6 | ||||
| 10 | dell | 28 | 3 | 1 | bcm5820x (8) · controlvault3 (8) · controlvault3 plus (8) | ↑7 | ||
| 11 | nvidia | 27 | 1 | dgx spark (14) · nemo framework (4) · authn component of nvidia aistore (2) | ↑27 | |||
| 12 | redhat | 27 | 1 | 2 | red hat enterprise linux 9 (18) · red hat enterprise linux 8 (17) · red hat enterprise linux 10 (13) | ↑18 | ||
| 13 | siemens | 26 | 1 | 1 | ruggedcom rst2428p (5) · spectrum power 4 (5) · simatic s7 1500 cpu 1518 4 pn dp mfp (4) | ↓7 | ||
| 14 | mediatek | 25 | mt6890 mt7615 mt7622 mt7663 mt7915 mt7916 mt7981 mt7986 (12) · mt2718 mt2737 mt6835 mt6878 mt6886 mt6897 mt6899 mt6982 mt6985 mt6986 mt6986d mt6989 mt6990 mt6991 mt8676 mt8678 mt8755 mt8893 (2) · mt2735 mt2737 mt6739 mt6761 mt6762 mt6762d mt6762m mt6763 mt6765 mt6765t mt6767 mt6768 mt6769 mt6769k mt6769s mt6769t mt6769z mt6771 mt6813 mt6833 mt6833p mt6835 mt6835t mt6853 mt6853t mt6855 mt6855t mt6873 mt6875 mt6875t mt6877 mt6877t mt6877tt mt6878 mt6878m mt6879 mt6880 mt6883 mt6885 mt6886 mt6889 mt6890 mt6891 mt6893 mt6895 mt6895tt mt6896 mt6897 mt6899 mt6980 mt6980d mt6983 mt6983t mt6985 mt6985t mt6989 mt6989t mt6990 mt6991 mt8666 mt8667 mt8673 mt8675 mt8676 mt8678 mt8765 mt8766 mt8766r mt8768 mt8771 mt8786 mt8788 mt8788e mt8791 mt8791t mt8792 mt8793 mt8795t mt8797 mt8798 mt8863 mt8873 mt8883 mt8893 (2) | ↑22 | ||||
| 15 | campcodes | 22 | school fees payment management system (8) · supplier management system (5) · retro basketball shoes online store (4) | ↑17 | ||||
| 16 | advantech | 21 | 3 | webaccess vpn (12) · iview (5) · deviceon iedge (4) | · | |||
| 17 | apache | 19 | 1 | 1 | apache openoffice (7) · apache cloudstack (2) · apache kvrocks (2) | ↑6 | ||
| 18 | huawei | 19 | 1 | harmonyos (19) · emui (3) | ↑4 | |||
| 19 | fortinet | 18 | 1 | 2 | 2 | 1 | fortiadc (3) · forticlientwindows (3) · fortios (3) | ↓1 |
| 20 | qnap systems | 18 | 2 | file station 5 (9) · download station (2) · qulog center (2) | ↓12 | |||
| 21 | sap se | 18 | 2 | sap business connector (4) · sap business one sld (1) · sap commoncryptolib (1) | ↑38 | |||
| 22 | cisco | 16 | 2 | 1 | cisco unified contact center express (6) · cisco digital network architecture center dna center (5) · cisco identity services engine software (5) | ↑41 | ||
| 23 | d link | 16 | 2 | dwr m920 (9) · dir 822k (8) · dir 816l (4) | ↑12 | |||
| 24 | mozilla | 16 | 5 | firefox (16) · thunderbird (15) | ↑13 | |||
| 25 | amd | 15 | 1 | xilinx run time xrt (5) · amd prof (4) · amd epyc 9005 series processors (2) | · | |||
| 26 | canaldenuncia | 15 | canaldenuncia app (15) | new | ||||
| 27 | db electronica telecomunicazioni s p a | 14 | 8 | mozart fm transmitter (14) | new | |||
| 28 | gitlab | 14 | gitlab (14) | ↑20 | ||||
| 29 | qualcomm | 13 | snapdragon (13) | ↓2 | ||||
| 30 | revive | 13 | revive adserver (13) | · | ||||
| 31 | axis communications ab | 12 | axis os (11) · axis optimizer (1) | · | ||||
| 32 | asus | 11 | 2 | router (8) · armoury crate (1) · dsl ac51 (1) | · | |||
| 33 | google cloud | 11 | 1 | looker (8) · looker studio (3) | new | |||
| 34 | mattermost | 11 | 2 | mattermost (11) | ↑33 | |||
| 35 | tenda | 11 | ac21 (3) · ac23 (2) · ch22 (2) | ↓26 | ||||
| 36 | lukevella | 10 | 1 | rallly (10) | new | |||
| 37 | hewlett packard enterprise hpe | 9 | hpe aruba networking aos cx (5) · hpe aruba networking 100 series cellular bridge (2) · hpe aruba networkign aos cx (1) | ↓9 | ||||
| 38 | projectworlds | 9 | advanced library management system (6) · can pass malicious payloads (1) · online admission system (1) | ↑5 | ||||
| 39 | soplanning | 9 | soplanning (9) | new | ||||
| 40 | zoom communications | 9 | zoom clients (2) · zoom workplace (2) · zoom workplace clients (1) | · | ||||
| 41 | audiocodes | 8 | 2 | audiocodes fax ivr appliance (8) | · | |||
| 42 | ays pro | 8 | 1 | ai chatbot with chatgpt and content generator by ays (3) · survey maker (3) · poll maker versus polls anonymous polls image polls (1) | · | |||
| 43 | bdtask | 8 | isshue multi store ecommerce shopping cart solution (2) · saleserp (2) · wholesale inventory control and inventory management system (2) | · | ||||
| 44 | broadcom | 8 | bcm5820x (8) · controlvault3 (8) · controlvault3 plus (8) | · | ||||
| 45 | combodo | 8 | itop (8) | · | ||||
| 46 | elextensions | 8 | 1 | elex wordpress helpdesk customer ticketing system (7) · wschat wordpress live chat (1) | new | |||
| 47 | gnu | 8 | grub2 (6) · red hat enterprise linux 10 (6) · red hat enterprise linux 8 (6) | ↑25 | ||||
| 48 | jcd | 8 | windu cms (8) | new | ||||
| 49 | jetbrains | 8 | hub (3) · youtrack (3) · resharper (1) | · | ||||
| 50 | samsung mobile | 8 | samsung mobile devices (4) · samsung account (1) · samsung email (1) | ↓30 |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2025-11 that are on the CISA KEV catalog today. The 11 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-794214 critical—
- 2CWE-8926024 critical—
- 3CWE-8622055 critical↑1
- 4CWE-741541 critical↓1
- 5CWE-28410413 critical—
- 6CWE-352812 critical↑2
- 7CWE-4348129 critical↑7
- 8CWE-200795 critical↓1
- 9CWE-22707 critical↑3
- 10CWE-121653 critical↓4
- 1CWE-946011 critical↓1
- 2CWE-20573 critical↑12
- 3CWE-125531 critical↑3
- 4CWE-785120 critical↓5
- 5CWE-3064814 critical↑8
- 6CWE-639484 critical↑10
- 7CWE-416471 critical↓6
- 8CWE-98472 critical↑15
- 9CWE-119441 critical↓6
- 10CWE-122422 critical↑9
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.