march 2026
- cves
- 6,236
- against an average 2025 month
- 1.6×
- busiest day
- mar 25, 619
- used in real attacks
- 10
march 2026 brought 6,236 cves, 1.6 times an average 2025 month.
24 of its 31 days ran above the 2025 average for that weekday.
619
on mar 25, the busiest day. patchstack published 248 of them at once.
634
rated critical, cvss 9 or higher. 480 of them can be hit over the network with no login and nothing for a user to click.
2,311
in open-source packages, 5.1 times their 2025 monthly average. no other kind of software grew as fast.
674
came in three single drops: patchstack 268 on mar 5, patchstack 248 on mar 25, github 158 on mar 20.
10 already used in real attacks
cisa kev, as of oct 24
- 1qualcomm multiple chipsetsmar 2
- 1cisco secure firewall management centermar 4
- 1cisco secure firewall management center and security cloud control firewall managementmar 4
- 1lantronix eds5000mar 11
- 1google chromium v8mar 12
- 1google skiamar 12
- 1langflowmar 20
- 1aquasecurity trivymar 23
- 1citrix netscalermar 23
- 1trueconf clientmar 30
all 10 with cve idshide the list
- mar 2qualcomm multiple chipsetscve-2026-21385
- mar 4cisco secure firewall management center (fmc) and security cloud control (scc) firewall managementcve-2026-20079
- mar 4cisco secure firewall management center (fmc)cve-2026-20131
- mar 11lantronix eds5000cve-2025-67038
- mar 12google skiacve-2026-3909
- mar 12google chromium v8cve-2026-3910
- mar 20langflow langflowcve-2026-33017
- mar 23citrix netscalercve-2026-3055
- mar 23aquasecurity trivycve-2026-33634
- mar 30trueconf clientcve-2026-3502
cisa keeps adding older cves when attacks come to light, so this list can still grow.
this poster
- period
- march 1 to 31, 2026
- cves
- 6,236
- data
- cve list v5, cisa kev, drawn 2026-10-24
- format
- 3:4, drawn for 45 × 60 cm
