cvegen

october 2025

cves
4,274
against an average 2025 month
1.1×
busiest day
oct 22, 389
used in real attacks
10

october 2025 brought 4,274 cves, close to an average 2025 month.

7 of its 31 days ran above the 2025 average for that weekday.

389

on oct 22, the busiest day. patchstack published 210 of them at once.

315

rated critical, cvss 9 or higher. 245 of them can be hit over the network with no login and nothing for a user to click.

546

came in three single drops: patchstack 210 on oct 22, the linux kernel team 169 on oct 1, microsoft 167 on oct 14.

10 already used in real attacks

cisa kev, as of oct 24, 2026

  • 3
    microsoft windows
    oct 14
  • 2
    oracle e-business suite
    oct 5, 12
  • 1
    gladinet centrestack and triofox
    oct 9
  • 1
    linux kernel
    oct 13
  • 1
    f5 big-ip
    oct 15
  • 1
    motex lanscope endpoint manager
    oct 20
  • 1
    oracle fusion middleware
    oct 21
all 10 with cve ids

cisa keeps adding older cves when attacks come to light, so this list can still grow.

this poster

period
october 1 to 31, 2025
cves
4,274
data
cve list v5, cisa kev, drawn 2026-10-24
format
3:4, drawn for 45 × 60 cm
download jpg, 2000 × 2667