Month report
September 2026
Rolled up 2026-10-09 21:28 from 383,794 CVE records
14,947 CVEs published, +246.1% on the same month last year. 1,476 rated critical, 43 listed by CISA as exploited. linux led with 2,117; the most common weakness class was CWE-79 (1,118). wwbn climbed 66 places, the largest move. 4 vendors ranked for the first time.
Published
14,947
Critical / high
1,476 / 6,226
Medium / low
5,143 / 679
Added to CISA KEV
43
Public exploit
294
Scanner template
27
Publication to KEV
How long before CISA listed them
Median days to listing
1
Listed within 7 days
92.9%
Listed within 30 days
100%
Detection gap
Listed as exploited, no public template
Listed this month
43
With a template
10
No template
33
- 1cisco3of 4 listed
- 2google3of 3 listed
- 3linux3of 3 listed
- 4microsoft3of 3 listed
- 5mikrotik3of 3 listed
- 6siemens3of 3 listed
- 7checkpoint2of 2 listed
- 8citrix netscaler2of 2 listed
Measured against the nuclei-templates CVE index only. No template there does not mean a CVE is undetectable by any other tool.
Vendors
Ranked by distinct CVEs this month
| # | Vendor | Top products | ||||||
|---|---|---|---|---|---|---|---|---|
| 1 | linux | 2,117 | 111 | 2 | linux (2117) | — | ||
| 2 | microsoft | 1,002 | 59 | 2 | 3 | windows server 2025 (679) · windows server 2025 server core installation (677) · windows server 2022 (641) | ↑1 | |
| 3 | 660 | 84 | 3 | 9 | chrome (465) · android (184) · android wear (1) | ↑4 | ||
| 4 | oracle | 634 | 97 | oracle hyperion financial management (81) · oracle business intelligence enterprise edition (29) · siebel crm deployment (29) | ↓2 | |||
| 5 | ibm | 404 | 45 | 1 | guardium data protection (53) · financial transaction manager ftm for redhat openshift (46) · datastage on cloud pak for data (45) | ↓1 | ||
| 6 | redhat | 268 | 9 | 7 | red hat enterprise linux 9 (135) · red hat enterprise linux 8 (128) · red hat enterprise linux 10 (123) | ↓1 | ||
| 7 | apple | 247 | 7 | 1 | 10 | macos (223) · ios and ipados (140) · visionos (99) | ↑13 | |
| 8 | adobe | 224 | 32 | 1 | 1 | adobe experience manager 6 5 (105) · adobe experience manager 6 5 lts (105) · adobe experience manager as a cloud service (105) | ↑1 | |
| 9 | dell | 207 | 11 | secure connect gateway 5 0 appliance (104) · secure connect gateway 5 0 application (103) · openmanage server administrator managed node for rhel 8 10 (20) | ↑5 | |||
| 10 | apache | 195 | 53 | 4 | apache syncope (22) · apache roller (18) · apache tomcat (12) | ↓4 | ||
| 11 | mozilla | 191 | 55 | 1 | firefox (181) · thunderbird (179) · firefox for ios (1) | ↑2 | ||
| 12 | nvidia | 167 | 1 | geforce (98) · rtx quadro nvs (98) · tesla (98) | ↑19 | |||
| 13 | hewlett packard enterprise hpe | 157 | 19 | 1 | fabric composer (52) · edgeconnect sd wan gateways (38) · aos cx (34) | · | ||
| 14 | wwbn | 107 | 6 | avideo (107) | ↑66 | |||
| 15 | cisco | 98 | 33 | 3 | 4 | cisco identity services engine software (42) · cisco ise passive identity connector (26) · cisco secure firewall management center fmc (20) | ↑4 | |
| 16 | openclaw | 90 | openclaw (65) · openclaw windows node (6) · clawhub (5) | · | ||||
| 17 | misp | 80 | 2 | 1 | misp (78) · misp modules (1) · sachertortephp (1) | ↑33 | ||
| 18 | mongodb | 71 | 2 | mongodb server (25) · c driver (15) · mongoid (8) | ↑11 | |||
| 19 | sourcecodester | 68 | class and exam timetabling system (12) · online reviewer management system (11) · drug recommendation system (7) | ↓1 | ||||
| 20 | concrete cms | 65 | 1 | concrete cms (65) | · | |||
| 21 | rabbitmq | 65 | 5 | rabbitmq server (54) · amqp091 go (10) · rabbitmq java client (1) | · | |||
| 22 | kiteworks | 61 | 9 | core (35) · email protection gateway (22) · secure data forms (4) | · | |||
| 23 | jetbrains | 57 | 2 | youtrack (44) · intellij idea (6) · teamcity (3) | ↑36 | |||
| 24 | elastic | 53 | kibana (34) · elasticsearch (11) · eck operator (2) | ↓8 | ||||
| 25 | jenkins project | 53 | 1 | jenkins (13) · jenkins script security plugin (10) · jenkins gitlab plugin (2) | ↑17 | |||
| 26 | eclipse foundation | 51 | 8 | netx duo (18) · eclipse aerios (4) · eclipse ankaios (4) | ↑32 | |||
| 27 | grokability | 49 | snipe it (49) | · | ||||
| 28 | siyuan note | 45 | 1 | 1 | siyuan (45) | ↓18 | ||
| 29 | arista networks | 44 | 6 | 1 | eos (39) · velocloud edge (3) · velocloud (1) | · | ||
| 30 | netcore | 44 | 16 | 1 | nr255 v (23) · nbr200v2 (9) · nr289 ge (6) | new | ||
| 31 | ash project | 38 | ash (19) · ash typescript (7) · ash authentication oauth2 server (6) | new | ||||
| 32 | itsourcecode | 37 | sales and inventory system (22) · leave management system (7) · online medicine delivery system (5) | ↑2 | ||||
| 33 | patriksimek | 37 | 21 | 1 | vm2 (37) | · | ||
| 34 | oisf | 35 | 3 | suricata (35) | · | |||
| 35 | contec co | 34 | 1 | remote i o coupler unit server type cpsn mcb271 (7) · fxa3000 (4) · fxa3020 (4) | · | |||
| 36 | pmmp | 32 | pocketmine mp (32) | new | ||||
| 37 | zammad | 32 | 1 | 2 | 1 | zammad (32) | · | |
| 38 | zohocorp | 32 | 3 | manageengine opmanager (11) · manageengine firewall analyzer (7) · manageengine applications manager (6) | · | |||
| 39 | foxit software | 31 | foxit pdf editor (31) · foxit pdf reader (30) | · | ||||
| 40 | sooperset | 31 | 2 | 1 | mcp atlassian (31) | new | ||
| 41 | code projects | 29 | hospital information system (5) · assessment management (3) · doctor appointment system (3) | ↓2 | ||||
| 42 | d link | 29 | 20 | 4 | dwr m921 (5) · dir 895l (3) · di 8400 (2) | ↑10 | ||
| 43 | samsung mobile | 29 | 3 | 1 | samsung mobile devices (20) · bixby touch (1) · collection (1) | ↓6 | ||
| 44 | the wikimedia foundation | 29 | 1 | 15 | mediawiki cargo extension (6) · mediawiki wikilambda extension (3) · mediawiki centralauth extension (2) | · | ||
| 45 | vllm project | 29 | vllm (29) | · | ||||
| 46 | gitlab | 28 | 4 | 1 | 1 | 1 | gitlab (28) | ↑25 |
| 47 | mervinpraison | 28 | 12 | praisonai (24) · praisonaiagents (7) · praisonai platform (2) | ↓1 | |||
| 48 | n8n io | 28 | n8n (28) | ↓18 | ||||
| 49 | tanium | 28 | comply (16) · threat response (4) · asset (2) | · | ||||
| 50 | drupal | 26 | 1 | gammu sms daemon (3) · screenshot (2) · address suggestion (1) | · |
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored. The KEV column counts CVEs published in 2026-09 that are on the CISA KEV catalog today. The 43 in the headline is what CISA listed during the month, whenever those CVEs were published. All 50 ranked vendors are listed; a zero count renders as a dot.
Weaknesses
CWE classes by distinct CVEs
- 1CWE-791,11828 critical↑1
- 2CWE-86279948 critical↑1
- 3CWE-28459974 critical↓2
- 4CWE-8949367 critical—
- 5CWE-41645668 critical↑14
- 6CWE-12244345 critical↑9
- 7CWE-86343929 critical↑2
- 8CWE-2243343 critical↓3
- 9CWE-1254129 critical↑4
- 10CWE-20039514 critical—
- 1CWE-63938319 critical↓4
- 2CWE-91835628 critical↓6
- 3CWE-26934234 critical↑8
- 4CWE-7833879 critical↓6
- 5CWE-306319130 critical↓1
- 6CWE-9428884 critical↓5
- 7CWE-78728631 critical↓5
- 8CWE-4002620 critical↑5
- 9CWE-287258102 critical↓1
- 10CWE-7425326 critical↓4
One CVE is counted once per vendor, product or weakness class it lists, so a ranking column sums to more than the month's total. Only the month's top 100 keys per dimension are stored.