Month report
March 2026
Rolled up 2026-10-09 16:51 from 383,779 CVE records
6,236 CVEs published, +55.5% on the same month last year. 643 rated critical, 26 listed by CISA as exploited. redhat led with 243; the most common weakness class was CWE-79 (733). hcl climbed 62 places, the largest move. 4 vendors ranked for the first time.
Published
6,236
Critical / high
643 / 2,600
Medium / low
2,513 / 332
Added to CISA KEV
26
Public exploit
269
Scanner template
65
Publication to KEV
How long before CISA listed them
Median days to listing
4
Listed within 7 days
70%
Listed within 30 days
80%
Detection gap
Listed as exploited, no public template
Listed this month
26
With a template
10
No template
16
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | redhat | 243 | 34 | 17 | 1 | red hat enterprise linux 9 (142) · red hat enterprise linux 8 (140) · red hat enterprise linux 10 (130) | ↑1 | |
| 2 | openclaw | 196 | 16 | 4 | openclaw (194) · voice call (2) · nextcloud talk (1) | ↑15 | ||
| 3 | linux | 178 | 1 | 3 | linux (178) · simatic s7 1500 cpu 1518 4 pn dp mfp (37) · simatic s7 1500 cpu 1518f 4 pn dp mfp (37) | ↓2 | ||
| 4 | 152 | 13 | 2 | 10 | android (77) · chrome (74) · clasp (1) | ↑23 | ||
| 5 | themerex | 105 | 13 | aldo (1) · alliance (1) · aqualots (1) | ↑53 | |||
| 6 | microsoft | 98 | 5 | 8 | windows 10 version 21h2 (43) · windows 10 version 22h2 (43) · windows 11 version 23h2 (41) | ↓2 | ||
| 7 | apple | 89 | 3 | 6 | macos (79) · ios and ipados (44) · visionos (30) | ↓4 | ||
| 8 | wwbn | 84 | 11 | 2 | 2 | avideo (81) · avideo encoder (3) | · | |
| 9 | adobe | 81 | 1 | adobe experience manager (33) · adobe commerce (19) · substance3d painter (9) | ↑1 | |||
| 10 | tenda | 73 | 3 | 2 | f453 (17) · i3 (7) · w3 (7) | ↑1 | ||
| 11 | ibm | 72 | infosphere information server (16) · sterling b2b integrator (7) · concert (6) | ↓6 | ||||
| 12 | cisco | 69 | 2 | 2 | 2 | 1 | cisco secure firewall threat defense ftd software (40) · cisco secure firewall adaptive security appliance asa software (25) · cisco ios xe software (12) | ↑22 |
| 13 | parse community | 65 | 9 | 1 | 1 | parse server (65) | · | |
| 14 | siemens | 65 | 2 | 3 | simatic s7 1500 cpu 1518 4 pn dp mfp (47) · simatic s7 1500 cpu 1518f 4 pn dp mfp (47) · siplus s7 1500 cpu 1518 4 pn dp mfp (47) | — | ||
| 15 | sourcecodester | 60 | sales and inventory system (20) · client database management system (4) · resort reservation system (4) | ↑16 | ||||
| 16 | code projects | 55 | simple flight ticket booking system (9) · exam form submission (8) · simple laundry system (7) | ↑4 | ||||
| 17 | mozilla | 51 | 22 | 1 | firefox (48) · thunderbird (47) · red hat enterprise linux 10 (21) | ↓11 | ||
| 18 | discourse | 48 | 1 | discourse (48) | ↑22 | |||
| 19 | itsourcecode | 44 | university management system (11) · college management system (6) · free hotel reservation system (6) | ↓4 | ||||
| 20 | openemr | 44 | 3 | 5 | openemr (44) | ↑3 | ||
| 21 | ancorathemes | 40 | 3 | anderson (1) · apollo night club dj event wordpress theme (1) · beelove (1) | ↑22 | |||
| 22 | chamilo | 38 | 5 | 1 | chamilo lms (38) | · | ||
| 23 | d link | 36 | 5 | dnr 202l (20) · dnr 322l (20) · dnr 326 (20) | ↓15 | |||
| 24 | internationalcolorconsortium | 36 | iccdev (36) | ↑41 | ||||
| 25 | craftcms | 34 | 2 | 3 | cms (23) · commerce (7) · aws s3 (1) | ↑5 | ||
| 26 | mattermost | 34 | 1 | mattermost (34) | ↑27 | |||
| 27 | hcl | 31 | 1 | aftermarket dpc (17) · aion (10) · sametime (3) | ↑62 | |||
| 28 | mikado themes | 29 | amfissa (1) · aviana (1) · belfort (1) | · | ||||
| 29 | siyuan note | 28 | 9 | 1 | 6 | siyuan (28) | new | |
| 30 | gitlab | 27 | gitlab (27) · openshift pipelines (1) · red hat openshift container platform 4 (1) | ↓5 | ||||
| 31 | drupal | 25 | openid connect oauth client (3) · file access fix deprecated (2) · ai artificial intelligence (1) | ↑55 | ||||
| 32 | raratheme | 25 | app landing page (1) · bakes and cakes (1) · benevolent (1) | · | ||||
| 33 | acronis | 23 | acronis cyber protect 17 (21) · acronis cyber protect cloud agent (6) · acronis true image (1) | · | ||||
| 34 | fortinet | 22 | 1 | fortianalyzer (6) · fortimanager (6) · fortiweb (6) | ↑17 | |||
| 35 | dell | 21 | powerscale onefs (8) · alienware command center awcc (3) · device management agent ddma (3) | ↓7 | ||||
| 36 | imagemagick | 21 | imagemagick (21) · red hat enterprise linux 6 (2) · red hat enterprise linux 7 extended lifecycle support (2) | ↓20 | ||||
| 37 | mediatek | 21 | mediatek chipset (21) | ↓5 | ||||
| 38 | apache | 20 | 4 | 7 | apache airflow (4) · red hat fuse 7 (3) · red hat jboss enterprise application platform expansion pack (3) | ↓12 | ||
| 39 | nvidia | 20 | 1 | megatron lm (5) · triton inference server (3) · bionemo framework (2) | ↑2 | |||
| 40 | canva | 19 | affinity (19) | new | ||||
| 41 | everest | 18 | everest core (18) | · | ||||
| 42 | go vikunja | 18 | vikunja (18) | new | ||||
| 43 | huawei | 18 | 1 | harmonyos (18) · emui (3) | ↓6 | |||
| 44 | suitecrm | 18 | 1 | suitecrm (15) · suitecrm core (3) | · | |||
| 45 | elated themes | 17 | 1 | amoli (1) · askka (1) · elated listing (1) | · | |||
| 46 | freerdp | 17 | freerdp (17) · red hat enterprise linux 10 (4) · red hat enterprise linux 6 (4) | ↓25 | ||||
| 47 | samsung mobile | 17 | 4 | smart switch (7) · samsung mobile devices (5) · galaxy store (3) | ↑3 | |||
| 48 | tp link systems | 16 | 2 | archer nx200 v1 0 (4) · archer nx200 v2 0 (4) · archer nx200 v2 20 (4) | ↓30 | |||
| 49 | mbs | 15 | 2 | ubr 01 mk ii (15) · ubr 02 (15) · ubr lon (15) | new | |||
| 50 | qnap systems | 15 | 1 | qunetswitch (4) · qurouter (4) · video station (2) | ↓43 |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2026-03 that are on the CISA KEV catalog today. The 26 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-7973325 critical—
- 2CWE-8947465 critical↑1
- 3CWE-86232914 critical↓1
- 4CWE-2224229 critical—
- 5CWE-742256 critical↑2
- 6CWE-982223 critical↑19
- 7CWE-78720220 critical↑13
- 8CWE-9419350 critical↑1
- 9CWE-12118322 critical↓1
- 10CWE-8631729 critical↑17
- 1CWE-91816516 critical↑3
- 2CWE-11915810 critical↓6
- 3CWE-7815745 critical↓8
- 4CWE-28414714 critical↓3
- 5CWE-1251308 critical↓2
- 6CWE-6391197 critical↑6
- 7CWE-50211847 critical—
- 8CWE-2001127 critical↓6
- 9CWE-2011110 critical↑7
- 10CWE-30610426 critical↓1
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.