cvegen

june 2026

cves
7,949
against an average 2025 month
2.0×
busiest day
jun 9, 718
used in real attacks
26

june 2026 brought 7,949 cves, 2.0 times an average 2025 month.

19 of its 30 days ran above the 2025 average for that weekday.

718

on jun 9, the busiest day.

929

rated critical, cvss 9 or higher. 603 of them can be hit over the network with no login and nothing for a user to click.

1,057

in browsers, 23 times their 2025 monthly average. no other kind of software grew as fast.

1,049

came in three single drops: chrome 427 on jun 4, chrome 382 on jun 30, oracle 240 on jun 16.

26 already used in real attacks

cisa kev, as of oct 24

  • 2
    cisco catalyst sd-wan manager
    jun 4, 15
  • 1
    android framework
    jun 1
  • 1
    cisco unified communications manager
    jun 3
  • 1
    progress loadmaster
    jun 4
  • 1
    solarwinds serv-u
    jun 4
  • 1
    arista extensible operating system
    jun 5
  • 1
    widget factory joomla content editor
    jun 5
  • 1
    check point security gateway
    jun 8
  • 1
    google chromium v8
    jun 8
  • 1
    fortinet fortisandbox
    jun 9
and 15 more productsall 26 with cve ids

cisa keeps adding older cves when attacks come to light, so this list can still grow.

this poster

period
june 1 to 30, 2026
cves
7,949
data
cve list v5, cisa kev, drawn 2026-10-24
format
3:4, drawn for 45 × 60 cm
download jpg, 2000 × 2667