cvegen

may 2025

cves
3,980
against an average 2025 month
1.0×
busiest day
may 1, 372
used in real attacks
19

may 2025 brought 3,980 cves, close to an average 2025 month.

7 of its 31 days ran above the 2025 average for that weekday.

372

on may 1, the busiest day. the linux kernel team published 245 of them at once.

347

rated critical, cvss 9 or higher. 303 of them can be hit over the network with no login and nothing for a user to click.

603

came in three single drops: the linux kernel team 245 on may 1, wpscan 203 on may 15, patchstack 155 on may 7.

19 already used in real attacks

cisa kev, as of oct 24, 2026

  • 5
    microsoft windows
    may 13
  • 3
    telemessage tm sgnl
    may 8, 28
  • 2
    sysaid
    may 7
  • 2
    ivanti endpoint manager mobile
    may 13
  • 1
    srimax output messenger
    may 5
  • 1
    craft cms
    may 7
  • 1
    fortinet products
    may 13
  • 1
    samsung magicinfo 9 server
    may 13
  • 1
    sap netweaver
    may 13
  • 1
    smartbedded meteobridge
    may 21
and 1 more productall 19 with cve ids

cisa keeps adding older cves when attacks come to light, so this list can still grow.

this poster

period
may 1 to 31, 2025
cves
3,980
data
cve list v5, cisa kev, drawn 2026-10-24
format
3:4, drawn for 45 × 60 cm
download jpg, 2000 × 2667