Month report
June 2026
Rolled up 2026-09-14 09:26 from 370,877 CVE records
7,952 CVEs published, +116% on the same month last year. 933 rated critical, 23 listed by CISA as exploited. google led with 1,090; the most common weakness class was CWE-79 (637). codeastro climbed 66 places, the largest move. 8 vendors ranked for the first time.
Published
7,952
Critical / high
933 / 3,345
Medium / low
3,047 / 349
Added to CISA KEV
23
Public exploit
286
Scanner template
58
Publication to KEV
How long before CISA listed them
Median days to listing
7.5
Listed within 7 days
50%
Listed within 30 days
83.3%
Detection gap
Listed as exploited, no public template
Listed this month
23
With a template
9
No template
14
- 1cisco3of 3 listed
- 2google2of 2 listed
- 3ubiquiti1of 3 listed
- 4oracle1of 2 listed
- 5arista networks1of 1 listed
- 6lantronix1of 1 listed
- 7litespeed technologies1of 1 listed
- 8mirasvit1of 1 listed
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | 1,090 | 121 | 2 | 27 | chrome (965) · android (117) · mcp toolbox for databases googleapis mcp toolbox (4) | ↑1 | ||
| 2 | linux | 513 | 40 | 10 | linux (513) · red hat enterprise linux 10 (49) · red hat enterprise linux 8 (49) | ↓1 | ||
| 3 | redhat | 330 | 31 | 29 | red hat enterprise linux 8 (197) · red hat enterprise linux 9 (195) · red hat enterprise linux 10 (182) | — | ||
| 4 | oracle | 242 | 123 | 1 | 3 | 1 | oracle webcenter content (29) · jd edwards enterpriseone tools (14) · oracle enterprise manager base platform (14) | ↑22 |
| 5 | microsoft | 221 | 15 | 6 | windows 11 version 26h1 (111) · windows server 2025 (109) · windows server 2025 server core installation (109) | ↓1 | ||
| 6 | adobe | 143 | 12 | 1 | 1 | 2 | adobe experience manager 6 5 (57) · adobe experience manager 6 5 lts (57) · adobe experience manager as a cloud service (57) | ↑6 |
| 7 | apache | 121 | 16 | 8 | 2 | apache airflow (17) · apache activemq (15) · apache http server (13) | ↓1 | |
| 8 | ibm | 75 | 16 | 2 | websphere application server (16) · langflow oss (14) · watsonx data intelligence (10) | ↑7 | ||
| 9 | spring | 72 | 3 | spring framework (18) · spring security (7) · spring web services (7) | · | |||
| 10 | capgo | 61 | 1 | capgo (60) · cli (1) | new | |||
| 11 | openclaw | 61 | openclaw (61) | ↓3 | ||||
| 12 | themerex | 58 | 5 | abelle (1) · airsupply (1) · autoparts (1) | · | |||
| 13 | apple | 52 | 1 | 3 | macos (49) · ios and ipados (38) · watchos (34) | ↓8 | ||
| 14 | mozilla | 50 | 8 | 2 | firefox (45) · thunderbird (42) · red hat enterprise linux 10 (16) | ↑4 | ||
| 15 | sourcecodester | 49 | 1 | class and exam timetabling system (16) · pharmacy sales and inventory system (6) · inventory system (3) | ↑7 | |||
| 16 | itsourcecode | 43 | hospital management system (16) · fees management system (9) · online hotel management system (6) | ↑40 | ||||
| 17 | siemens | 43 | 4 | 3 | linux (30) · simatic s7 1500 cpu 1518 4 pn dp mfp (30) · simatic s7 1500 cpu 1518f 4 pn dp mfp (30) | ↓10 | ||
| 18 | imagemagick | 41 | 1 | imagemagick (41) · red hat enterprise linux 6 (10) · red hat enterprise linux 7 extended lifecycle support (8) | · | |||
| 19 | dell | 38 | 1 | powerflex (10) · display and peripheral manager (4) · wyse management suite wms (4) | ↑17 | |||
| 20 | jenkins project | 36 | 1 | jenkins (8) · jenkins assembla plugin (3) · jenkins contrast continuous application security plugin (3) | ↑41 | |||
| 21 | picklescan | 34 | 8 | picklescan (34) | new | |||
| 22 | wolfssl | 32 | 1 | wolfssl (32) | · | |||
| 23 | nocodb | 29 | 1 | nocodb (29) | · | |||
| 24 | misp | 28 | 5 | 1 | misp (27) · bsimvis (1) | ↑62 | ||
| 25 | acer | 26 | 7 | connect m6e 5g portable wifi router (26) | ↑46 | |||
| 26 | codeastro | 26 | human resource management system (7) · leave management system (5) · student attendance management system (5) | ↑66 | ||||
| 27 | frappe | 26 | frappe framework (12) · frappe (11) · erpnext (2) | ↑56 | ||||
| 28 | nextcloud | 26 | 1 | security advisories (26) | · | |||
| 29 | netty | 25 | 2 | netty (22) · red hat build of apache camel 4 18 1 p1 for spring boot 3 5 16 (13) · red hat data grid 8 6 2 (13) | ↑34 | |||
| 30 | zephyrproject | 25 | 1 | zephyr (25) | new | |||
| 31 | gitlab | 24 | gitlab (24) | ↓4 | ||||
| 32 | gogs | 24 | 3 | 3 | 2 | gogs (24) | · | |
| 33 | qnap systems | 24 | 1 | 1 | quts hero (13) · qts (12) · file station 5 (6) | · | ||
| 34 | flowise | 23 | 8 | 3 | 3 | flowise (23) · flowise components (1) | new | |
| 35 | qualcomm | 22 | snapdragon (22) | ↑56 | ||||
| 36 | n8n io | 21 | 3 | 1 | n8n (21) | ↑30 | ||
| 37 | mattermost | 20 | mattermost (18) · github com mattermost mattermost server public (1) · mattermost google drive plugin (1) | ↓16 | ||||
| 38 | geovision | 19 | 12 | 1 | gv lpclpc2011 2211 (10) · gv i o box 4e (8) · geovision (1) | ↑37 | ||
| 39 | openssl | 18 | 1 | 1 | openssl (18) · cost management 4 (1) · multicluster engine for kubernetes (1) | · | ||
| 40 | angular | 17 | angular (17) · red hat enterprise linux 8 (2) · red hat fuse 7 (2) | new | ||||
| 41 | code projects | 17 | 5 | hotel and tourism reservation system (4) · online hospital management system (3) · online music site (3) | ↓10 | |||
| 42 | fission | 17 | 5 | fission (17) | new | |||
| 43 | gen digital | 17 | avast antivirus (8) · avast business antivirus (8) · avast one (8) | new | ||||
| 44 | netgear | 17 | raxe500 (6) · raxe450 (5) · xr1000 (5) | · | ||||
| 45 | open webui | 17 | open webui (17) | ↓35 | ||||
| 46 | opf | 17 | 4 | openproject (17) | · | |||
| 47 | revive | 17 | adserver (17) | · | ||||
| 48 | tenda | 17 | 1 | 2 | jd12l (5) · hg10 (3) · hg7hg9 (3) | ↑2 | ||
| 49 | arista networks | 16 | 2 | 1 | 1 | eos (8) · arista edge threat management arista next generation firewall ngfw (5) · eos cloudvision exchange cvx (3) | · | |
| 50 | dr ger | 16 | infinity acute care system (2) · infinity delta (2) · infinity delta xl (2) | new |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2026-06 that are on the CISA KEV catalog today. The 23 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-7963721 critical—
- 2CWE-41642246 critical↑4
- 3CWE-8940088 critical↓1
- 4CWE-86236723 critical↓1
- 5CWE-284362106 critical↑7
- 6CWE-2035559 critical↑4
- 7CWE-2228038 critical↓3
- 8CWE-1252047 critical↑10
- 9CWE-50218256 critical↑17
- 10CWE-2001719 critical↑9
- 1CWE-741700 critical—
- 2CWE-7817045 critical↓7
- 3CWE-30616569 critical↑12
- 4CWE-63916511 critical↑1
- 5CWE-9181516 critical↓6
- 6CWE-78715013 critical↑4
- 7CWE-9414544 critical↓10
- 8CWE-8631389 critical↓4
- 9CWE-4001364 critical↑3
- 10CWE-12113018 critical↓3
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.