Month report
December 2025
Rolled up 2026-09-23 04:40 from 376,511 CVE records
5,495 CVEs published, +60.1% on the same month last year. 430 rated critical, 20 listed by CISA as exploited. linux led with 1,055; the most common weakness class was CWE-79 (809). autodesk climbed 77 places, the largest move. 11 vendors ranked for the first time.
Published
5,495
Critical / high
430 / 1,964
Medium / low
2,159 / 215
Added to CISA KEV
20
Public exploit
150
Scanner template
35
Publication to KEV
How long before CISA listed them
Median days to listing
3
Listed within 7 days
56.5%
Listed within 30 days
69.6%
Weakness × vendor
Where the two overlap
| Vendor | CWE-79 | CWE-862 | CWE-89 | CWE-74 | CWE-352 | CWE-98 | CWE-22 | CWE-94 |
|---|---|---|---|---|---|---|---|---|
| linux | ||||||||
| adobe | 115 | 1 | ||||||
| 1 | 7 | |||||||
| code projects | 6 | 60 | 61 | 6 | ||||
| apple | 1 | 2 | ||||||
| microsoft | 3 | 2 | ||||||
| siemens | 4 | 4 | 1 | |||||
| axiomthemes | 58 |
Detection gap
Listed as exploited, no public template
Listed this month
20
With a template
5
No template
15
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 1,055 | 37 | 2 | linux (1055) · ruggedcom rst2428p (17) · simatic s7 1500 cpu 1518 4 pn dp mfp (15) | ↑1 | ||
| 2 | adobe | 135 | 6 | adobe experience manager (115) · coldfusion (11) · acrobat reader (4) | ↑7 | |||
| 3 | 99 | 1 | 3 | 2 | android (80) · chrome (19) | ↑1 | ||
| 4 | code projects | 74 | student file management system (13) · refugee food management system (12) · simple stock system (6) | ↑2 | ||||
| 5 | apple | 67 | 5 | 3 | 2 | macos (64) · ios and ipados (28) · visionos (20) | ↓4 | |
| 6 | microsoft | 65 | 3 | 1 | 4 | windows 11 version 24h2 (36) · windows 11 version 25h2 (36) · windows server 2025 (36) | ↓3 | |
| 7 | siemens | 60 | 6 | 1 | 2 | linux (31) · ruggedcom rst2428p (18) · simatic s7 1500 cpu 1518 4 pn dp mfp (15) | ↑6 | |
| 8 | axiomthemes | 58 | 777 (1) · agricola (1) · algenix (1) | new | ||||
| 9 | ancorathemes | 48 | 1 | childhope (1) · chinchilla (1) · detailx (1) | · | |||
| 10 | tenda | 48 | 11 | wh450 (21) · m3 (7) · ac20 (4) | ↑25 | |||
| 11 | itsourcecode | 39 | student management system (19) · online cake ordering system (7) · covid tracking system (4) | ↓3 | ||||
| 12 | mediatek | 30 | mt2718 mt6739 mt6761 mt6765 mt6768 mt6781 mt6789 mt6833 mt6835 mt6853 mt6855 mt6877 mt6878 mt6879 mt6883 mt6885 mt6886 mt6889 mt6893 mt6895 mt6897 mt6899 mt6983 mt6985 mt6989 mt6991 mt8196 mt8676 mt8678 mt8792 mt8793 (7) · mt2735 mt6833 mt6833p mt6853 mt6853t mt6855 mt6855t mt6873 mt6875 mt6875t mt6877 mt6877t mt6877tt mt6880 mt6883 mt6885 mt6889 mt6890 mt6891 mt6893 mt8675 mt8771 mt8791 mt8791t mt8797 (6) · mt6739 mt6761 mt6765 mt6768 mt6781 mt6789 mt6833 mt6835 mt6853 mt6855 mt6877 mt6878 mt6879 mt6883 mt6885 mt6886 mt6889 mt6893 mt6895 mt6897 mt6899 mt6983 mt6985 mt6989 mt6991 mt8186 mt8188 mt8196 mt8667 mt8673 mt8676 mt8678 mt8765 mt8766 mt8768 mt8771 mt8781 mt8791t mt8792 mt8793 mt8795t mt8796 mt8798 mt8873 mt8883 (4) | ↑2 | ||||
| 13 | ibm | 28 | 1 | aspera orchestrator (4) · concert (4) · controller (4) | ↓8 | |||
| 14 | merkulove | 28 | appender (1) · buttoner for elementor (1) · coder for elementor (1) | new | ||||
| 15 | kentico | 26 | xperience (26) | · | ||||
| 16 | mailenable | 25 | mailenable (25) | new | ||||
| 17 | sound4 | 22 | 9 | bigvoice2 (20) · bigvoice4 (20) · impact pulse eco (20) | new | |||
| 18 | apache | 20 | 2 | 2 | 1 | apache http server (5) · apache fineract (3) · apache streampark (3) | ↓1 | |
| 19 | autodesk | 20 | shared components (20) · autocad (2) | ↑77 | ||||
| 20 | kantar media | 20 | 8 | bigvoice2 (20) · bigvoice4 (20) · impact pulse eco (20) | new | |||
| 21 | nextcloud | 20 | security advisories (19) · nextcloud (1) | · | ||||
| 22 | campcodes | 19 | supplier management system (7) · complete online beauty parlor management system (4) · online student enrollment system (2) | ↓7 | ||||
| 23 | getgrav | 19 | 2 | grav (19) | · | |||
| 24 | redhat | 19 | 1 | 2 | red hat enterprise linux 8 (9) · red hat enterprise linux 6 (8) · red hat enterprise linux 9 (8) | ↓12 | ||
| 25 | churchcrm | 18 | 7 | 5 | crm (18) | · | ||
| 26 | fortinet | 18 | 2 | 1 | 1 | fortios (4) · fortisandbox (3) · fortiweb (3) | ↓7 | |
| 27 | d link | 17 | 2 | 1 | 1 | dwr m920 (5) · dap 1325 (1) · dcs 850l (1) | ↓4 | |
| 28 | mozilla | 17 | 5 | 2 | firefox (15) · thunderbird (13) · firefox for ios (1) | ↓4 | ||
| 29 | huawei | 16 | harmonyos (16) · emui (2) | ↓11 | ||||
| 30 | samsung mobile | 16 | samsung mobile devices (8) · motionphoto (2) · samsung account (2) | ↑20 | ||||
| 31 | foxit software | 15 | foxit pdf editor (8) · foxit pdf reader (8) · pdfonline foxit com (6) | · | ||||
| 32 | sohutv | 15 | cachecloud (15) | new | ||||
| 33 | phoenix contact | 14 | fl nat 2008 (14) · fl nat 2208 (14) · fl nat 2304 2gc 2sfp (14) | · | ||||
| 34 | socomec | 14 | diris digiware m 70 (13) · easy config system (1) | · | ||||
| 35 | watchguard | 14 | 1 | 1 | 2 | fireware os (13) · mobile vpn with ssl client (1) | new | |
| 36 | elastic | 13 | kibana (6) · elasticsearch (3) · packetbeat (3) | · | ||||
| 37 | nvidia | 13 | 4 | 1 | isaac launchable (3) · nemo framework (2) · resiliency extension (2) | ↓26 | ||
| 38 | teamviewer | 13 | dex (13) | · | ||||
| 39 | fontforge | 12 | 1 | fontforge (12) | new | |||
| 40 | jetbrains | 12 | teamcity (11) · intellij idea (1) | ↑9 | ||||
| 41 | mattermost | 12 | mattermost (12) | ↓7 | ||||
| 42 | sap se | 12 | 2 | application server abap (1) · sap businessobjects business intelligence platform (1) · sap enterprise search for abap (1) | ↓21 | |||
| 43 | sge plc1000 sge plc50 | 12 | 2 | circutor (12) | new | |||
| 44 | synology | 12 | 1 | beedrive for desktop (4) · synology router manager srm (4) · diskstation manager dsm (3) | · | |||
| 45 | advantech co | 11 | 1 | wise deviceon server (11) | new | |||
| 46 | gitlab | 11 | gitlab (11) | ↓18 | ||||
| 47 | hugging face | 11 | 1 | transformers (8) · accelerate (1) · diffusers (1) | new | |||
| 48 | qualcomm | 11 | 1 | snapdragon (11) | ↓19 | |||
| 49 | tencent | 11 | hunyuandit (2) · tface (2) · facedetection dsfd (1) | · | ||||
| 50 | unisoc shanghai technologies co | 11 | t8100 t9100 t8200 t8300 (11) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2025-12 that are on the CISA KEV catalog today. The 20 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-7980912 critical—
- 2CWE-8624158 critical↑1
- 3CWE-8928231 critical↓1
- 4CWE-742094 critical—
- 5CWE-3521913 critical↑1
- 6CWE-981692 critical↑12
- 7CWE-2213411 critical↑2
- 8CWE-9412325 critical↑3
- 9CWE-7811526 critical↑5
- 10CWE-2841016 critical↓5
- 1CWE-43410026 critical↓4
- 2CWE-1199319 critical↑7
- 3CWE-1218025 critical↓3
- 4CWE-20787 critical↓2
- 5CWE-3067720 critical—
- 6CWE-77779 critical↑7
- 7CWE-5027619 critical↑5
- 8CWE-200735 critical↓10
- 9CWE-639725 critical↓3
- 10CWE-125610 critical↓7
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.