CVE trendsOctober 2026
Monthly vulnerability volume, critical severity and known-exploitation activity across every published CVE, not just the ones written up here.
Full October 2026 report →Total CVEs
11,181 ±13.9%
Critical
326
High
1,241
KEV added
9
Public exploit
49
Month over month
-25.2%
Published per month, last 12
Hover or use ←/→ for a month’s figures
KEV additions
Entries added per month
715 CVEs entered the CISA KEV catalog across these 36 months — peak Sep 26 at 43, average 19.9 a month.
month CISA added the entry, not the CVE's publication month
Last complete month
September 2026
Top vendor
linux
Biggest breakout
×12.2
Top weakness
CWE-79
Added to CISA KEV
43
Break down by
Quarter over quarter
Largest increases over three months
#1 momentum
splunk
×11.1
Prior quarter
12
Current quarter
133
#2 momentum
siyuan note
×9.3
Prior quarter
13
Current quarter
121
#3 momentum
hewlett packard enterprise hpe
×6.1
Prior quarter
32
Current quarter
195
#4 momentum
arista networks
×4.2
Prior quarter
16
Current quarter
68
#5 momentum
wireshark foundation
×3.9
Prior quarter
12
Current quarter
47
#6 momentum
cisco
×3.9
Prior quarter
46
Current quarter
180
#7 momentum
ibm
×3.9
Prior quarter
229
Current quarter
902
#8 momentum
flowiseai
×3.8
Prior quarter
15
Current quarter
57
#9 momentum
wwbn
×3.6
Prior quarter
34
Current quarter
122
#10 momentum
dokploy
×3.4
Prior quarter
11
Current quarter
37
| # | Vendor | ||||||||
|---|---|---|---|---|---|---|---|---|---|
| 1 | linux | 8,392 | 562 | 3 | 0.04% | 78 | #1* | 12 | |
| 2 | 3,552 | 361 | 13 | 0.37% | 70 | #1* | 12 | ||
| 3 | microsoft | 3,162 | 219 | 29 | 0.92% | 100 | 2 | #2* | 12 |
| 4 | oracle | 3,073 | 590 | 3 | 0.10% | 28 | 1 | #1* | 7 |
| 5 | redhat | 2,212 | 233 | 6 | 0.27% | 183 | 24 | #1* | 12 |
| 6 | ibm | 1,415 | 167 | 1 | 0.07% | 11 | 2 | #4* | 12 |
| 7 | apache | 1,045 | 189 | 2 | 0.19% | 113 | 9 | #3* | 12 |
| 8 | adobe | 991 | 88 | 4 | 0.40% | 6 | 3 | #2* | 11 |
| 9 | apple | 981 | 73 | 7 | 0.71% | 47 | #1* | 11 | |
| 10 | openclaw | 671 | 27 | 0.00% | 8 | #2* | 7 | ||
| 11 | mozilla | 623 | 198 | 0.00% | 20 | #6* | 11 | ||
| 12 | siemens | 577 | 43 | 7 | 1.21% | 35 | 2 | #4* | 11 |
| 13 | dell | 531 | 32 | 1 | 0.19% | 1 | #9* | 11 | |
| 14 | code projects | 457 | 0.00% | 18 | #4* | 11 | |||
| 15 | sourcecodester | 436 | 0.00% | 7 | #7* | 10 | |||
| 16 | nvidia | 380 | 14 | 0.00% | 4 | 1 | #11* | 10 | |
| 17 | cisco | 373 | 76 | 16 | 4.29% | 20 | 1 | #12* | 11 |
| 18 | itsourcecode | 347 | 0.00% | #8* | 12 | ||||
| 19 | tenda | 324 | 21 | 0.00% | 5 | #10* | 9 | ||
| 20 | wwbn | 271 | 22 | 0.00% | 2 | 2 | #8* | 6 |
One CVE is counted once per vendor it lists, so a CVE naming several is counted by each of them and the column sums to more than the number of CVEs. Only each month's top 100 are stored, so a vendor outside that depth in a given month contributes nothing for it. KEV counts the CVEs published inside this window that are on the CISA KEV catalog today. It is not the number CISA listed during the window — that is the KEV-additions series. A zero count renders as a dot.
Archive
Every month on record
2024
2025
Dec
+60.1%5,495
Nov
-25.5%3,021
Oct
+19.8%4,274
Sep
+71.8%4,319
Aug
+25.3%3,629
Jul
+21.2%3,774
Jun
+19.5%3,682
May
-20.3%3,980
Apr
+11.9%4,033
Mar
+21.6%4,010
Feb
+31.9%3,673
Jan
+64.9%4,273
2026
Oct
-24.1%3,246
Sep
+246.1%14,947
Aug
+198.5%10,831
Jul
+158.6%9,761
Jun
+116%7,952
May
+74.3%6,937
Apr
+44.2%5,814
Mar
+55.5%6,236
Feb
+25.7%4,616
Jan
+0.7%4,305