Month report
January 2026
Rolled up 2026-09-22 22:46 from 376,476 CVE records
4,305 CVEs published, +0.7% on the same month last year. 454 rated critical, 17 listed by CISA as exploited. linux led with 246; the most common weakness class was CWE-79 (608). tp link systems climbed 52 places, the largest move. 11 vendors ranked for the first time.
Published
4,305
Critical / high
454 / 1,710
Medium / low
1,793 / 179
Added to CISA KEV
17
Public exploit
215
Scanner template
43
Publication to KEV
How long before CISA listed them
Median days to listing
9.5
Listed within 7 days
50%
Listed within 30 days
62.5%
Weakness × vendor
Where the two overlap
| Vendor | CWE-79 | CWE-862 | CWE-89 | CWE-74 | CWE-22 | CWE-20 | CWE-428 | CWE-284 |
|---|---|---|---|---|---|---|---|---|
| linux | ||||||||
| microsoft | 2 | 1 | 1 | 3 | 8 | |||
| redhat | 7 | 1 | 1 | 7 | 4 | 6 | ||
| siemens | 2 | |||||||
| oracle | 5 | 6 | ||||||
| internationalcolorconsortium | 43 | |||||||
| code projects | 2 | 38 | 38 | 3 | ||||
| ibm | 5 | 1 |
Detection gap
Listed as exploited, no public template
Listed this month
17
With a template
8
No template
9
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 246 | 12 | 10 | linux (246) · simatic s7 1500 cpu 1518 4 pn dp mfp (49) · simatic s7 1500 cpu 1518f 4 pn dp mfp (49) | — | ||
| 2 | microsoft | 127 | 6 | 3 | 7 | windows 11 version 24h2 (83) · windows 11 version 25h2 (83) · windows server 2025 (83) | ↑4 | |
| 3 | redhat | 123 | 13 | 21 | 1 | red hat enterprise linux 9 (68) · red hat enterprise linux 10 (67) · red hat enterprise linux 8 (63) | ↑21 | |
| 4 | siemens | 83 | 3 | 2 | 10 | linux (57) · simatic s7 1500 cpu 1518 4 pn dp mfp (49) · simatic s7 1500 cpu 1518f 4 pn dp mfp (49) | ↑3 | |
| 5 | oracle | 66 | 2 | 1 | 4 | oracle vm virtualbox (14) · mysql server (11) · oracle java se (5) | · | |
| 6 | internationalcolorconsortium | 59 | 1 | iccdev (59) | new | |||
| 7 | code projects | 44 | online product reservation system (13) · online music site (12) · intern membership management system (8) | ↓3 | ||||
| 8 | ibm | 39 | 1 | db2 for linux unix and windows (18) · applinx (6) · sterling connect express adapter for sterling b2b integrator 5 2 0 (5) | ↑5 | |||
| 9 | qnap systems | 35 | qts (25) · quts hero (22) · hbs 3 hybrid backup sync (2) | · | ||||
| 10 | meddream | 30 | 1 | meddream pacs premium (29) · meddream pacs server (1) | · | |||
| 11 | mediatek | 28 | mediatek chipset (28) | ↑1 | ||||
| 12 | adobe | 25 | substance3d modeler (6) · dreamweaver desktop (5) · indesign desktop (5) | ↓10 | ||||
| 13 | dell | 24 | objectscale (5) · powerprotect data domain with data domain operating system dd os feature release (4) · powerprotect data domain with data domain operating system dd os lts2023 (4) | · | ||||
| 14 | juniper networks | 24 | 1 | junos os (20) · junos os evolved (9) · junos space (1) | · | |||
| 15 | e plugins | 23 | hospital doctor directory (3) · hotel listing (3) · institutions directory (3) | new | ||||
| 16 | apache | 22 | 3 | 4 | 1 | apache mynewt nimble (4) · apache airflow (2) · apache linkis (2) | ↑2 | |
| 17 | hewlett packard enterprise hpe | 22 | 1 | arubaos aos (12) · edgeconnect sd wan orchestrator (5) · hpe aruba networking fabric composer (2) | · | |||
| 18 | qualcomm | 22 | snapdragon (22) | ↑30 | ||||
| 19 | mikado themes | 21 | curly (2) · biagiotti (1) · cocco (1) | new | ||||
| 20 | tp link systems | 21 | 3 | vx800v v1 0 (5) · omada controller (3) · tapo c220 v1 (3) | ↑52 | |||
| 21 | dormakaba | 20 | 5 | access manager 92xx k5 (10) · access manager 92xx k7 (8) · kaba exos 9300 (7) | new | |||
| 22 | sap se | 20 | 4 | sap fiori app intercompany balance reconciliation (6) · business server pages application product designer web ui (1) · nw as java ume user mapping (1) | ↑20 | |||
| 23 | yonyou | 20 | 1 | ksoa (20) | new | |||
| 24 | ancorathemes | 19 | diveit (1) · hobo (1) · indoor plants (1) | ↓15 | ||||
| 25 | mozilla | 19 | 4 | firefox (18) · thunderbird (17) · red hat enterprise linux 10 (8) | ↑3 | |||
| 26 | utt | 19 | 1 | 520w (14) · 512w (4) · hiper 810 (1) | ↑25 | |||
| 27 | algo | 18 | 8180 ip audio alerter (18) | new | ||||
| 28 | totolink | 18 | 1 | lr350 (6) · a7000r (4) · nr1800x (3) | · | |||
| 29 | freerdp | 17 | freerdp (17) · red hat enterprise linux 10 (11) · red hat enterprise linux 10 0 extended update support (11) | · | ||||
| 30 | itsourcecode | 17 | society management system (8) · school management system (7) · directory management system (1) | ↓19 | ||||
| 31 | d link | 16 | 1 | dir 615 (4) · dir 823x (3) · dwr m961 (3) | ↓4 | |||
| 32 | 16 | 3 | 3 | chrome (12) · red hat openshift ai 2 25 (2) · red hat openshift ai 3 3 (2) | ↓29 | |||
| 33 | huawei | 16 | harmonyos (16) · emui (3) | ↓4 | ||||
| 34 | sick | 16 | 2 | tdc x401gl (13) · incoming goods suite (3) | · | |||
| 35 | apple | 14 | ios and ipados (9) · macos (8) · safari (2) | ↓30 | ||||
| 36 | discourse | 14 | discourse (14) | · | ||||
| 37 | drupal | 14 | acquia content hub (1) · ai artificial intelligence (1) · ckeditor 5 premium features (1) | · | ||||
| 38 | tenda | 14 | 1 | 300mbps wireless router f3 and n300 easy setup router (4) · hg10 (3) · ac21 (2) | ↓28 | |||
| 39 | broadcom | 13 | dx netops spectrum (10) · symantec endpoint protection windows client (2) · symantec web security services agent (1) | · | ||||
| 40 | gitlab | 13 | gitlab (13) · openshift pipelines (3) · red hat openshift container platform 4 (3) | ↑6 | ||||
| 41 | rockwell automation | 13 | armorstart lt (9) · verve asset manager (2) · compactlogix 5370 (1) | · | ||||
| 42 | everest | 12 | 1 | everest core (12) | new | |||
| 43 | flexense | 12 | disk pulse enterprise (11) · sync breeze enterprise server (11) · syncbreeze (1) | new | ||||
| 44 | nvidia | 12 | geforce (5) · cuda toolkit (4) · rtx pro rtx quadro (4) | ↓7 | ||||
| 45 | openssl | 12 | 5 | openssl (12) · simatic s7 1500 tm mfp gnu linux subsystem (7) · ai lightweight inference server (1) | · | |||
| 46 | opf | 12 | 2 | openproject (12) | new | |||
| 47 | quatuor | 12 | 12 | evaluaci n de desempe o edd (12) | new | |||
| 48 | shenzhen tenda technology co | 12 | 2 | w30e v2 (11) · tenda d151 d301 (1) | new | |||
| 49 | cisco | 11 | 1 | 1 | cisco identity services engine software (3) · cisco packaged contact center enterprise (2) · cisco secure firewall threat defense ftd software (2) | · | ||
| 50 | coollabsio | 11 | 6 | 1 | coolify (11) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2026-01 that are on the CISA KEV catalog today. The 17 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-7960812 critical—
- 2CWE-8623079 critical—
- 3CWE-8923944 critical—
- 4CWE-741271 critical—
- 5CWE-2211910 critical↑2
- 6CWE-201169 critical↑8
- 7CWE-4281101 critical↑39
- 8CWE-28410012 critical↑2
- 9CWE-352990 critical↓4
- 10CWE-789930 critical↓1
- 1CWE-4349839 critical—
- 2CWE-98932 critical↓6
- 3CWE-949026 critical↓5
- 4CWE-1208415 critical↑7
- 5CWE-200796 critical↑3
- 6CWE-777822 critical—
- 7CWE-7877619 critical↑7
- 8CWE-1217412 critical↓5
- 9CWE-770711 critical↑21
- 10CWE-125705 critical—
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.