[ { "batches": [ { "day": 16, "filer": "Patchstack", "published": 209 }, { "day": 2, "filer": "Patchstack", "published": 191 }, { "day": 14, "filer": "microsoft", "published": 157 } ], "busiest": { "day": 14, "published": 479 }, "critical": 378, "daysAbove": 11, "daysCovered": 31, "daysInMonth": 31, "expected": 4174, "kinds": { "ai software": 8, "browsers": 42, "devices & routers": 117, "enterprise vendors": 939, "industrial": 77, "linux kernel": 223, "open-source packages": 375, "other": 149, "small web apps": 241, "unknown": 555, "wordpress": 1547 }, "label": "january 2025", "month": "01", "noLoginCritical": 274, "paintedAt": "2026-10-24", "published": 4273, "running": false, "scored": 4205, "slug": "2025-01", "usedInAttacks": [ { "cvss": 10, "date": "2025-01-08", "id": "cve-2024-50603", "listed": "2025-01-16", "product": "Controllers", "vendor": "Aviatrix" }, { "cvss": 9, "date": "2025-01-08", "id": "cve-2025-0282", "listed": "2025-01-08", "product": "Connect Secure, Policy Secure, and ZTA Gateways", "vendor": "Ivanti" }, { "cvss": 8.2, "date": "2025-01-09", "id": "cve-2024-53704", "listed": "2025-02-18", "product": "SonicOS", "vendor": "SonicWall" }, { "cvss": 9.8, "date": "2025-01-14", "id": "cve-2024-13159", "listed": "2025-03-10", "product": "Endpoint Manager (EPM)", "vendor": "Ivanti" }, { "cvss": 9.8, "date": "2025-01-14", "id": "cve-2024-13160", "listed": "2025-03-10", "product": "Endpoint Manager (EPM)", "vendor": "Ivanti" }, { "cvss": 9.8, "date": "2025-01-14", "id": "cve-2024-13161", "listed": "2025-03-10", "product": "Endpoint Manager (EPM)", "vendor": "Ivanti" }, { "cvss": 9.6, "date": "2025-01-14", "id": "cve-2024-55591", "listed": "2025-01-14", "product": "FortiOS and FortiProxy", "vendor": "Fortinet" }, { "cvss": 7.8, "date": "2025-01-14", "id": "cve-2025-21333", "listed": "2025-01-14", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 7.8, "date": "2025-01-14", "id": "cve-2025-21334", "listed": "2025-01-14", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 7.8, "date": "2025-01-14", "id": "cve-2025-21335", "listed": "2025-01-14", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 9.9, "date": "2025-01-15", "id": "cve-2024-57726", "listed": "2026-04-24", "product": "SimpleHelp", "vendor": "SimpleHelp" }, { "cvss": 9.1, "date": "2025-01-15", "id": "cve-2024-57727", "listed": "2025-02-13", "product": "SimpleHelp", "vendor": "SimpleHelp" }, { "cvss": 7.2, "date": "2025-01-15", "id": "cve-2024-57728", "listed": "2026-04-24", "product": "SimpleHelp", "vendor": "SimpleHelp" }, { "cvss": 8.1, "date": "2025-01-18", "id": "cve-2025-23209", "listed": "2025-02-20", "product": "Craft CMS", "vendor": "Craft CMS" }, { "cvss": 9.8, "date": "2025-01-23", "id": "cve-2025-23006", "listed": "2025-01-24", "product": "SMA1000 Appliances", "vendor": "SonicWall" }, { "cvss": 7, "date": "2025-01-25", "id": "cve-2025-0411", "listed": "2025-02-06", "product": "7-Zip", "vendor": "7-Zip" }, { "cvss": 10, "date": "2025-01-27", "id": "cve-2025-24085", "listed": "2025-01-29", "product": "Multiple Products", "vendor": "Apple" } ], "year": "2025" }, { "batches": [ { "day": 26, "filer": "Linux", "published": 706 }, { "day": 27, "filer": "Linux", "published": 177 }, { "day": 3, "filer": "Patchstack", "published": 69 } ], "busiest": { "day": 26, "published": 790 }, "critical": 263, "daysAbove": 6, "daysCovered": 28, "daysInMonth": 28, "expected": 3690, "kinds": { "ai software": 8, "browsers": 31, "devices & routers": 40, "enterprise vendors": 643, "industrial": 119, "linux kernel": 909, "open-source packages": 263, "other": 165, "small web apps": 192, "unknown": 476, "wordpress": 827 }, "label": "february 2025", "month": "02", "noLoginCritical": 213, "paintedAt": "2026-10-24", "published": 3673, "running": false, "scored": 3363, "slug": "2025-02", "usedInAttacks": [ { "cvss": 8.8, "date": "2025-02-03", "id": "cve-2023-52163", "listed": "2025-12-22", "product": "DS-2105 Pro", "vendor": "Digiever" }, { "cvss": 9.9, "date": "2025-02-03", "id": "cve-2024-57968", "listed": "2025-03-10", "product": "VeraCore", "vendor": "Advantive" }, { "cvss": 5.8, "date": "2025-02-03", "id": "cve-2025-25181", "listed": "2025-03-10", "product": "VeraCore", "vendor": "Advantive" }, { "cvss": 8.8, "date": "2025-02-04", "id": "cve-2024-40890", "listed": "2025-02-11", "product": "DSL CPE Devices", "vendor": "Zyxel" }, { "cvss": 8.8, "date": "2025-02-04", "id": "cve-2024-40891", "listed": "2025-02-11", "product": "DSL CPE Devices", "vendor": "Zyxel" }, { "cvss": 8.6, "date": "2025-02-06", "id": "cve-2025-0994", "listed": "2025-02-07", "product": "Cityworks", "vendor": "Trimble" }, { "cvss": 9.9, "date": "2025-02-10", "id": "cve-2025-24016", "listed": "2025-06-10", "product": "Wazuh Server", "vendor": "Wazuh" }, { "cvss": 6.1, "date": "2025-02-10", "id": "cve-2025-24200", "listed": "2025-02-12", "product": "iOS and iPadOS", "vendor": "Apple" }, { "cvss": 7.1, "date": "2025-02-11", "id": "cve-2025-21391", "listed": "2025-02-11", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 7.8, "date": "2025-02-11", "id": "cve-2025-21418", "listed": "2025-02-11", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 8.1, "date": "2025-02-11", "id": "cve-2025-24472", "listed": "2025-03-18", "product": "FortiOS and FortiProxy", "vendor": "Fortinet" }, { "cvss": 8.8, "date": "2025-02-12", "id": "cve-2025-0108", "listed": "2025-02-18", "product": "PAN-OS", "vendor": "Palo Alto Networks" }, { "cvss": 7.1, "date": "2025-02-12", "id": "cve-2025-0111", "listed": "2025-02-20", "product": "PAN-OS", "vendor": "Palo Alto Networks" }, { "cvss": 8.2, "date": "2025-02-19", "id": "cve-2025-24989", "listed": "2025-02-21", "product": "Power Pages", "vendor": "Microsoft" }, { "cvss": 9.8, "date": "2025-02-20", "id": "cve-2025-24893", "listed": "2025-10-30", "product": "Platform", "vendor": "XWiki" } ], "year": "2025" }, { "batches": [ { "day": 20, "filer": "@huntr_ai", "published": 298 }, { "day": 3, "filer": "Patchstack", "published": 170 }, { "day": 27, "filer": "Patchstack", "published": 166 } ], "busiest": { "day": 27, "published": 377 }, "critical": 396, "daysAbove": 6, "daysCovered": 31, "daysInMonth": 31, "expected": 3903, "kinds": { "ai software": 103, "browsers": 56, "devices & routers": 108, "enterprise vendors": 719, "industrial": 82, "linux kernel": 207, "open-source packages": 577, "other": 234, "small web apps": 422, "unknown": 368, "wordpress": 1125 }, "label": "march 2025", "month": "03", "noLoginCritical": 363, "paintedAt": "2026-10-24", "published": 4001, "running": false, "scored": 3939, "slug": "2025-03", "usedInAttacks": [ { "cvss": 8.6, "date": "2025-03-04", "id": "cve-2024-48248", "listed": "2025-03-19", "product": "Backup and Replication", "vendor": "NAKIVO" }, { "cvss": 9.8, "date": "2025-03-04", "id": "cve-2025-1316", "listed": "2025-03-19", "product": "IC-7100 IP Camera", "vendor": "Edimax" }, { "cvss": 9.3, "date": "2025-03-04", "id": "cve-2025-22224", "listed": "2025-03-04", "product": "ESXi and Workstation", "vendor": "VMware" }, { "cvss": 8.2, "date": "2025-03-04", "id": "cve-2025-22225", "listed": "2025-03-04", "product": "ESXi", "vendor": "VMware" }, { "cvss": 7.1, "date": "2025-03-04", "id": "cve-2025-22226", "listed": "2025-03-04", "product": "ESXi, Workstation, and Fusion", "vendor": "VMware" }, { "cvss": 10, "date": "2025-03-10", "id": "cve-2025-24813", "listed": "2025-04-01", "product": "Tomcat", "vendor": "Apache" }, { "cvss": 10, "date": "2025-03-11", "id": "cve-2024-54085", "listed": "2025-06-25", "product": "MegaRAC SPx", "vendor": "AMI" }, { "cvss": 6.5, "date": "2025-03-11", "id": "cve-2025-24054", "listed": "2025-04-17", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 10, "date": "2025-03-11", "id": "cve-2025-24201", "listed": "2025-03-13", "product": "Multiple Products", "vendor": "Apple" }, { "cvss": 7, "date": "2025-03-11", "id": "cve-2025-24983", "listed": "2025-03-11", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 4.6, "date": "2025-03-11", "id": "cve-2025-24984", "listed": "2025-03-11", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 7.8, "date": "2025-03-11", "id": "cve-2025-24985", "listed": "2025-03-11", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 5.5, "date": "2025-03-11", "id": "cve-2025-24991", "listed": "2025-03-11", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 7.8, "date": "2025-03-11", "id": "cve-2025-24993", "listed": "2025-03-11", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 7, "date": "2025-03-11", "id": "cve-2025-26633", "listed": "2025-03-11", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 8.1, "date": "2025-03-11", "id": "cve-2025-27363", "listed": "2025-05-06", "product": "FreeType", "vendor": "FreeType" }, { "cvss": 4.4, "date": "2025-03-12", "id": "cve-2025-21590", "listed": "2025-03-13", "product": "Junos OS", "vendor": "Juniper" }, { "cvss": 5.4, "date": "2025-03-12", "id": "cve-2025-27915", "listed": "2025-10-07", "product": "Zimbra Collaboration Suite (ZCS)", "vendor": "Synacor" }, { "cvss": 8.6, "date": "2025-03-15", "id": "cve-2025-30066", "listed": "2025-03-18", "product": "changed-files GitHub Action", "vendor": "tj-actions" }, { "cvss": 8.6, "date": "2025-03-19", "id": "cve-2025-30154", "listed": "2025-03-24", "product": "action-setup GitHub Action", "vendor": "reviewdog" }, { "cvss": 9.8, "date": "2025-03-24", "id": "cve-2025-2746", "listed": "2025-10-20", "product": "Xperience CMS", "vendor": "Kentico" }, { "cvss": 9.8, "date": "2025-03-24", "id": "cve-2025-2747", "listed": "2025-10-20", "product": "Xperience CMS", "vendor": "Kentico" }, { "cvss": 7.2, "date": "2025-03-24", "id": "cve-2025-2749", "listed": "2026-04-20", "product": "Kentico Xperience", "vendor": "Kentico" }, { "cvss": 7.2, "date": "2025-03-25", "id": "cve-2025-29635", "listed": "2026-04-24", "product": "DIR-823X", "vendor": "D-Link" }, { "cvss": 8.3, "date": "2025-03-26", "id": "cve-2025-2783", "listed": "2025-03-27", "product": "Chromium Mojo", "vendor": "Google" }, { "cvss": 5.3, "date": "2025-03-31", "id": "cve-2025-31125", "listed": "2026-01-22", "product": "Vitejs", "vendor": "Vite" } ], "year": "2025" }, { "batches": [ { "day": 1, "filer": "Patchstack", "published": 260 }, { "day": 17, "filer": "Patchstack", "published": 221 }, { "day": 4, "filer": "Patchstack", "published": 136 } ], "busiest": { "day": 1, "published": 429 }, "critical": 317, "daysAbove": 9, "daysCovered": 30, "daysInMonth": 30, "expected": 4094, "kinds": { "ai software": 35, "browsers": 47, "devices & routers": 99, "enterprise vendors": 688, "industrial": 184, "linux kernel": 280, "open-source packages": 371, "other": 262, "small web apps": 413, "unknown": 294, "wordpress": 1360 }, "label": "april 2025", "month": "04", "noLoginCritical": 258, "paintedAt": "2026-10-24", "published": 4033, "running": false, "scored": 3940, "slug": "2025-04", "usedInAttacks": [ { "cvss": 9, "date": "2025-04-03", "id": "cve-2025-22457", "listed": "2025-04-04", "product": "Connect Secure, Policy Secure, and ZTA Gateways", "vendor": "Ivanti" }, { "cvss": 9, "date": "2025-04-03", "id": "cve-2025-30406", "listed": "2025-04-08", "product": "CentreStack", "vendor": "Gladinet" }, { "cvss": 9.8, "date": "2025-04-03", "id": "cve-2025-31161", "listed": "2025-04-07", "product": "CrushFTP", "vendor": "CrushFTP" }, { "cvss": 9.8, "date": "2025-04-07", "id": "cve-2025-3248", "listed": "2025-05-05", "product": "Langflow", "vendor": "Langflow" }, { "cvss": 7.8, "date": "2025-04-08", "id": "cve-2025-29824", "listed": "2025-04-08", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 9, "date": "2025-04-10", "id": "cve-2024-58136", "listed": "2025-05-02", "product": "Yii", "vendor": "Yiiframework" }, { "cvss": 9.8, "date": "2025-04-16", "id": "cve-2025-31200", "listed": "2025-04-17", "product": "Multiple Products", "vendor": "Apple" }, { "cvss": 9.8, "date": "2025-04-16", "id": "cve-2025-31201", "listed": "2025-04-17", "product": "Multiple Products", "vendor": "Apple" }, { "cvss": 10, "date": "2025-04-16", "id": "cve-2025-32433", "listed": "2025-06-09", "product": "Erlang/OTP", "vendor": "Erlang" }, { "cvss": 9.8, "date": "2025-04-18", "id": "cve-2025-42599", "listed": "2025-04-28", "product": "Active! Mail", "vendor": "Qualitia" }, { "cvss": 9.3, "date": "2025-04-22", "id": "cve-2025-34028", "listed": "2025-05-02", "product": "Command Center", "vendor": "Commvault" }, { "cvss": 8.6, "date": "2025-04-24", "id": "cve-2025-1976", "listed": "2025-04-28", "product": "Brocade Fabric OS", "vendor": "Broadcom" }, { "cvss": 10, "date": "2025-04-24", "id": "cve-2025-31324", "listed": "2025-04-29", "product": "NetWeaver", "vendor": "SAP" }, { "cvss": 10, "date": "2025-04-25", "id": "cve-2025-32432", "listed": "2026-03-20", "product": "Craft CMS", "vendor": "Craft CMS" }, { "cvss": 8.8, "date": "2025-04-25", "id": "cve-2025-3928", "listed": "2025-04-28", "product": "Web Server", "vendor": "Commvault" }, { "cvss": 8.1, "date": "2025-04-25", "id": "cve-2025-3935", "listed": "2025-06-02", "product": "ScreenConnect", "vendor": "ConnectWise" } ], "year": "2025" }, { "batches": [ { "day": 1, "filer": "Linux", "published": 245 }, { "day": 15, "filer": "WPScan", "published": 203 }, { "day": 7, "filer": "Patchstack", "published": 155 } ], "busiest": { "day": 1, "published": 372 }, "critical": 347, "daysAbove": 7, "daysCovered": 31, "daysInMonth": 31, "expected": 4038, "kinds": { "ai software": 33, "browsers": 46, "devices & routers": 133, "enterprise vendors": 740, "industrial": 146, "linux kernel": 548, "open-source packages": 318, "other": 250, "small web apps": 523, "unknown": 319, "wordpress": 924 }, "label": "may 2025", "month": "05", "noLoginCritical": 303, "paintedAt": "2026-10-24", "published": 3980, "running": false, "scored": 3634, "slug": "2025-05", "usedInAttacks": [ { "cvss": 7.2, "date": "2025-05-05", "id": "cve-2025-27920", "listed": "2025-05-19", "product": "Output Messenger", "vendor": "Srimax" }, { "cvss": 9.3, "date": "2025-05-07", "id": "cve-2025-2775", "listed": "2025-07-22", "product": "SysAid On-Prem", "vendor": "SysAid" }, { "cvss": 9.3, "date": "2025-05-07", "id": "cve-2025-2776", "listed": "2025-07-22", "product": "SysAid On-Prem", "vendor": "SysAid" }, { "cvss": 5.3, "date": "2025-05-07", "id": "cve-2025-35939", "listed": "2025-06-02", "product": "Craft CMS", "vendor": "Craft CMS" }, { "cvss": 1.9000000000000001, "date": "2025-05-08", "id": "cve-2025-47729", "listed": "2025-05-12", "product": "TM SGNL", "vendor": "TeleMessage" }, { "cvss": 7.5, "date": "2025-05-13", "id": "cve-2025-30397", "listed": "2025-05-13", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 7.8, "date": "2025-05-13", "id": "cve-2025-30400", "listed": "2025-05-13", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 7.8, "date": "2025-05-13", "id": "cve-2025-32701", "listed": "2025-05-13", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 7.8, "date": "2025-05-13", "id": "cve-2025-32706", "listed": "2025-05-13", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 7.8, "date": "2025-05-13", "id": "cve-2025-32709", "listed": "2025-05-13", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 9.6, "date": "2025-05-13", "id": "cve-2025-32756", "listed": "2025-05-14", "product": "Multiple Products", "vendor": "Fortinet" }, { "cvss": 9.1, "date": "2025-05-13", "id": "cve-2025-42999", "listed": "2025-05-15", "product": "NetWeaver", "vendor": "SAP" }, { "cvss": 5.3, "date": "2025-05-13", "id": "cve-2025-4427", "listed": "2025-05-19", "product": "Endpoint Manager Mobile (EPMM)", "vendor": "Ivanti" }, { "cvss": 7.2, "date": "2025-05-13", "id": "cve-2025-4428", "listed": "2025-05-19", "product": "Endpoint Manager Mobile (EPMM)", "vendor": "Ivanti" }, { "cvss": 9.8, "date": "2025-05-13", "id": "cve-2025-4632", "listed": "2025-05-22", "product": "MagicINFO 9 Server", "vendor": "Samsung" }, { "cvss": 9.2, "date": "2025-05-21", "id": "cve-2025-34026", "listed": "2026-01-22", "product": "Concerto", "vendor": "Versa" }, { "cvss": 8.7, "date": "2025-05-21", "id": "cve-2025-4008", "listed": "2025-10-02", "product": "Meteobridge", "vendor": "Smartbedded" }, { "cvss": 5.3, "date": "2025-05-28", "id": "cve-2025-48927", "listed": "2025-07-01", "product": "TM SGNL", "vendor": "TeleMessage" }, { "cvss": 4, "date": "2025-05-28", "id": "cve-2025-48928", "listed": "2025-07-01", "product": "TM SGNL", "vendor": "TeleMessage" } ], "year": "2025" }, { "batches": [ { "day": 18, "filer": "Linux", "published": 362 }, { "day": 10, "filer": "adobe", "published": 253 }, { "day": 6, "filer": "Patchstack", "published": 182 } ], "busiest": { "day": 10, "published": 488 }, "critical": 284, "daysAbove": 7, "daysCovered": 30, "daysInMonth": 30, "expected": 3862, "kinds": { "ai software": 30, "browsers": 30, "devices & routers": 224, "enterprise vendors": 743, "industrial": 103, "linux kernel": 375, "open-source packages": 355, "other": 272, "small web apps": 597, "unknown": 175, "wordpress": 778 }, "label": "june 2025", "month": "06", "noLoginCritical": 237, "paintedAt": "2026-10-24", "published": 3682, "running": false, "scored": 3399, "slug": "2025-06", "usedInAttacks": [ { "cvss": 9.9, "date": "2025-06-02", "id": "cve-2025-49113", "listed": "2026-02-20", "product": "Webmail", "vendor": "Roundcube" }, { "cvss": 9, "date": "2025-06-02", "id": "cve-2025-5086", "listed": "2025-09-11", "product": "DELMIA Apriso", "vendor": "Dassault Systèmes" }, { "cvss": 8.8, "date": "2025-06-02", "id": "cve-2025-5419", "listed": "2025-06-05", "product": "Chromium V8", "vendor": "Google" }, { "cvss": 8.6, "date": "2025-06-03", "id": "cve-2025-21479", "listed": "2025-06-03", "product": "Multiple Chipsets", "vendor": "Qualcomm" }, { "cvss": 8.6, "date": "2025-06-03", "id": "cve-2025-21480", "listed": "2025-06-03", "product": "Multiple Chipsets", "vendor": "Qualcomm" }, { "cvss": 7.5, "date": "2025-06-03", "id": "cve-2025-27038", "listed": "2025-06-03", "product": "Multiple Chipsets", "vendor": "Qualcomm" }, { "cvss": 4.6, "date": "2025-06-05", "id": "cve-2025-47827", "listed": "2025-10-14", "product": "IGEL OS", "vendor": "IGEL" }, { "cvss": 8.8, "date": "2025-06-10", "id": "cve-2025-33053", "listed": "2025-06-10", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 8.8, "date": "2025-06-10", "id": "cve-2025-33073", "listed": "2025-10-20", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 4.2, "date": "2025-06-16", "id": "cve-2025-43200", "listed": "2025-06-16", "product": "Multiple Products", "vendor": "Apple" }, { "cvss": 9.3, "date": "2025-06-17", "id": "cve-2025-5777", "listed": "2025-07-10", "product": "NetScaler ADC and Gateway", "vendor": "Citrix" }, { "cvss": 7.8, "date": "2025-06-21", "id": "cve-2025-6218", "listed": "2025-12-09", "product": "WinRAR", "vendor": "RARLAB" }, { "cvss": 6.1, "date": "2025-06-23", "id": "cve-2025-48700", "listed": "2026-04-20", "product": "Zimbra Collaboration Suite (ZCS)", "vendor": "Synacor" }, { "cvss": 10, "date": "2025-06-24", "id": "cve-2025-32975", "listed": "2026-04-20", "product": "KACE Systems Management Appliance (SMA)", "vendor": "Quest" }, { "cvss": 10, "date": "2025-06-25", "id": "cve-2025-20281", "listed": "2025-07-28", "product": "Identity Services Engine", "vendor": "Cisco" }, { "cvss": 9.2, "date": "2025-06-25", "id": "cve-2025-6543", "listed": "2025-06-30", "product": "NetScaler ADC and Gateway", "vendor": "Citrix" }, { "cvss": 9.3, "date": "2025-06-30", "id": "cve-2025-32463", "listed": "2025-09-29", "product": "Sudo", "vendor": "Sudo" }, { "cvss": 8.1, "date": "2025-06-30", "id": "cve-2025-6554", "listed": "2025-07-02", "product": "Chromium V8", "vendor": "Google" } ], "year": "2025" }, { "batches": [ { "day": 25, "filer": "Linux", "published": 114 }, { "day": 21, "filer": "zdi", "published": 101 } ], "busiest": { "day": 8, "published": 438 }, "critical": 391, "daysAbove": 7, "daysCovered": 31, "daysInMonth": 31, "expected": 4266, "kinds": { "ai software": 72, "browsers": 42, "devices & routers": 184, "enterprise vendors": 871, "industrial": 121, "linux kernel": 401, "open-source packages": 535, "other": 340, "small web apps": 512, "unknown": 265, "wordpress": 431 }, "label": "july 2025", "month": "07", "noLoginCritical": 323, "paintedAt": "2026-10-24", "published": 3774, "running": false, "scored": 3536, "slug": "2025-07", "usedInAttacks": [ { "cvss": 8.1, "date": "2025-07-08", "id": "cve-2025-48384", "listed": "2025-08-25", "product": "Git", "vendor": "Git" }, { "cvss": 8.8, "date": "2025-07-08", "id": "cve-2025-49704", "listed": "2025-07-22", "product": "SharePoint", "vendor": "Microsoft" }, { "cvss": 6.5, "date": "2025-07-08", "id": "cve-2025-49706", "listed": "2025-07-22", "product": "SharePoint", "vendor": "Microsoft" }, { "cvss": 10, "date": "2025-07-10", "id": "cve-2025-47812", "listed": "2025-07-14", "product": "Wing FTP Server", "vendor": "Wing FTP Server" }, { "cvss": 4.3, "date": "2025-07-10", "id": "cve-2025-47813", "listed": "2026-03-16", "product": "Wing FTP Server", "vendor": "Wing FTP Server" }, { "cvss": 8.8, "date": "2025-07-15", "id": "cve-2025-6558", "listed": "2025-07-22", "product": "Chromium", "vendor": "Google" }, { "cvss": 10, "date": "2025-07-16", "id": "cve-2025-20337", "listed": "2025-07-28", "product": "Identity Services Engine", "vendor": "Cisco" }, { "cvss": 9.6, "date": "2025-07-17", "id": "cve-2025-25257", "listed": "2025-07-18", "product": "FortiWeb", "vendor": "Fortinet" }, { "cvss": 9.2, "date": "2025-07-17", "id": "cve-2025-54068", "listed": "2026-03-20", "product": "Livewire", "vendor": "Laravel" }, { "cvss": 9, "date": "2025-07-18", "id": "cve-2025-54309", "listed": "2025-07-22", "product": "CrushFTP", "vendor": "CrushFTP" }, { "cvss": 7.5, "date": "2025-07-19", "id": "cve-2025-54313", "listed": "2026-01-22", "product": "eslint-config-prettier", "vendor": "Prettier" }, { "cvss": 9.8, "date": "2025-07-20", "id": "cve-2025-53770", "listed": "2025-07-20", "product": "SharePoint", "vendor": "Microsoft" }, { "cvss": 7.8, "date": "2025-07-22", "id": "cve-2025-38352", "listed": "2025-09-04", "product": "Kernel", "vendor": "Linux" }, { "cvss": 8.8, "date": "2025-07-29", "id": "cve-2025-31277", "listed": "2026-03-20", "product": "Multiple Products", "vendor": "Apple" } ], "year": "2025" }, { "batches": [ { "day": 14, "filer": "Patchstack", "published": 154 }, { "day": 20, "filer": "Patchstack", "published": 118 }, { "day": 12, "filer": "microsoft", "published": 106 } ], "busiest": { "day": 12, "published": 353 }, "critical": 425, "daysAbove": 7, "daysCovered": 31, "daysInMonth": 31, "expected": 3894, "kinds": { "ai software": 69, "browsers": 37, "devices & routers": 224, "enterprise vendors": 769, "industrial": 107, "linux kernel": 185, "open-source packages": 443, "other": 265, "small web apps": 514, "unknown": 395, "wordpress": 621 }, "label": "august 2025", "month": "08", "noLoginCritical": 351, "paintedAt": "2026-10-24", "published": 3629, "running": false, "scored": 3532, "slug": "2025-08", "usedInAttacks": [ { "cvss": 8, "date": "2025-08-04", "id": "cve-2025-6204", "listed": "2025-10-28", "product": "DELMIA Apriso", "vendor": "Dassault Systèmes" }, { "cvss": 9.1, "date": "2025-08-04", "id": "cve-2025-6205", "listed": "2025-10-28", "product": "DELMIA Apriso", "vendor": "Dassault Systèmes" }, { "cvss": 10, "date": "2025-08-05", "id": "cve-2025-54253", "listed": "2025-10-15", "product": "Experience Manager (AEM) Forms", "vendor": "Adobe" }, { "cvss": 9.4, "date": "2025-08-05", "id": "cve-2025-54948", "listed": "2025-08-18", "product": "Apex One", "vendor": "Trend Micro" }, { "cvss": 8.4, "date": "2025-08-08", "id": "cve-2025-8088", "listed": "2025-08-12", "product": "WinRAR", "vendor": "RARLAB" }, { "cvss": 9.4, "date": "2025-08-14", "id": "cve-2025-8875", "listed": "2025-08-13", "product": "N-Central", "vendor": "N-able" }, { "cvss": 9.4, "date": "2025-08-14", "id": "cve-2025-8876", "listed": "2025-08-13", "product": "N-Central", "vendor": "N-able" }, { "cvss": 10, "date": "2025-08-21", "id": "cve-2025-43300", "listed": "2025-08-21", "product": "iOS, iPadOS, and macOS", "vendor": "Apple" }, { "cvss": 9.2, "date": "2025-08-26", "id": "cve-2025-7775", "listed": "2025-08-26", "product": "NetScaler", "vendor": "Citrix" }, { "cvss": 10, "date": "2025-08-28", "id": "cve-2025-57819", "listed": "2025-08-29", "product": "FreePBX", "vendor": "Sangoma" }, { "cvss": 5.4, "date": "2025-08-29", "id": "cve-2025-55177", "listed": "2025-09-02", "product": "WhatsApp", "vendor": "Meta Platforms" }, { "cvss": 8.6, "date": "2025-08-29", "id": "cve-2025-9377", "listed": "2025-09-03", "product": "Multiple Routers", "vendor": "TP-Link" } ], "year": "2025" }, { "batches": [ { "day": 22, "filer": "Patchstack", "published": 291 }, { "day": 15, "filer": "Linux", "published": 210 }, { "day": 18, "filer": "Linux", "published": 121 } ], "busiest": { "day": 22, "published": 414 }, "critical": 296, "daysAbove": 9, "daysCovered": 30, "daysInMonth": 30, "expected": 4060, "kinds": { "ai software": 72, "browsers": 37, "devices & routers": 96, "enterprise vendors": 873, "industrial": 97, "linux kernel": 737, "open-source packages": 381, "other": 327, "small web apps": 555, "unknown": 315, "wordpress": 829 }, "label": "september 2025", "month": "09", "noLoginCritical": 260, "paintedAt": "2026-10-24", "published": 4319, "running": false, "scored": 4056, "slug": "2025-09", "usedInAttacks": [ { "cvss": 9, "date": "2025-09-03", "id": "cve-2025-53690", "listed": "2025-09-04", "product": "Multiple Products", "vendor": "Sitecore" }, { "cvss": 8.8, "date": "2025-09-04", "id": "cve-2025-48543", "listed": "2025-09-04", "product": "Runtime", "vendor": "Android" }, { "cvss": 9.8, "date": "2025-09-05", "id": "cve-2025-39682", "listed": "2026-09-18", "product": "Kernel", "vendor": "Linux" }, { "cvss": 9.1, "date": "2025-09-09", "id": "cve-2025-54236", "listed": "2025-10-24", "product": "Commerce and Magento", "vendor": "Adobe" }, { "cvss": 8.8, "date": "2025-09-12", "id": "cve-2025-21042", "listed": "2025-11-10", "product": "Mobile Devices", "vendor": "Samsung" }, { "cvss": 8.8, "date": "2025-09-12", "id": "cve-2025-21043", "listed": "2025-10-02", "product": "Mobile Devices", "vendor": "Samsung" }, { "cvss": 9.3, "date": "2025-09-17", "id": "cve-2025-9242", "listed": "2025-11-12", "product": "Firebox", "vendor": "WatchGuard" }, { "cvss": 10, "date": "2025-09-18", "id": "cve-2025-10035", "listed": "2025-09-29", "product": "GoAnywhere MFT", "vendor": "Fortra" }, { "cvss": 9, "date": "2025-09-19", "id": "cve-2025-48703", "listed": "2025-11-04", "product": "Control Web Panel", "vendor": "CWP" }, { "cvss": 6.1, "date": "2025-09-19", "id": "cve-2025-59689", "listed": "2025-09-29", "product": "Email Security Gateway", "vendor": "Libraesva" }, { "cvss": 9.8, "date": "2025-09-23", "id": "cve-2025-26399", "listed": "2026-03-09", "product": "Web Help Desk", "vendor": "SolarWinds" }, { "cvss": 8.8, "date": "2025-09-24", "id": "cve-2025-10585", "listed": "2025-09-23", "product": "Chromium V8", "vendor": "Google" }, { "cvss": 7.7, "date": "2025-09-24", "id": "cve-2025-20352", "listed": "2025-09-29", "product": "IOS and IOS XE", "vendor": "Cisco" }, { "cvss": 9.9, "date": "2025-09-25", "id": "cve-2025-20333", "listed": "2025-09-25", "product": "Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense", "vendor": "Cisco" }, { "cvss": 6.5, "date": "2025-09-25", "id": "cve-2025-20362", "listed": "2025-09-25", "product": "Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense", "vendor": "Cisco" }, { "cvss": 7.8, "date": "2025-09-29", "id": "cve-2025-41244", "listed": "2025-10-30", "product": "VMware Aria Operations and VMware Tools", "vendor": "Broadcom" } ], "year": "2025" }, { "batches": [ { "day": 22, "filer": "Patchstack", "published": 210 }, { "day": 1, "filer": "Linux", "published": 169 }, { "day": 14, "filer": "microsoft", "published": 167 } ], "busiest": { "day": 22, "published": 389 }, "critical": 315, "daysAbove": 7, "daysCovered": 31, "daysInMonth": 31, "expected": 4174, "kinds": { "ai software": 66, "browsers": 17, "devices & routers": 184, "enterprise vendors": 954, "industrial": 119, "linux kernel": 651, "open-source packages": 597, "other": 288, "small web apps": 326, "unknown": 380, "wordpress": 692 }, "label": "october 2025", "month": "10", "noLoginCritical": 245, "paintedAt": "2026-10-24", "published": 4274, "running": false, "scored": 3865, "slug": "2025-10", "usedInAttacks": [ { "cvss": 9.8, "date": "2025-10-05", "id": "cve-2025-61882", "listed": "2025-10-06", "product": "E-Business Suite", "vendor": "Oracle" }, { "cvss": 7.5, "date": "2025-10-09", "id": "cve-2025-11371", "listed": "2025-11-04", "product": "CentreStack and Triofox", "vendor": "Gladinet" }, { "cvss": 7.5, "date": "2025-10-12", "id": "cve-2025-61884", "listed": "2025-10-20", "product": "E-Business Suite", "vendor": "Oracle" }, { "cvss": 7.8, "date": "2025-10-13", "id": "cve-2025-39964", "listed": "2026-09-18", "product": "Kernel", "vendor": "Linux" }, { "cvss": 7.8, "date": "2025-10-14", "id": "cve-2025-24990", "listed": "2025-10-14", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 7.8, "date": "2025-10-14", "id": "cve-2025-59230", "listed": "2025-10-14", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 9.8, "date": "2025-10-14", "id": "cve-2025-59287", "listed": "2025-10-24", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 9.8, "date": "2025-10-15", "id": "cve-2025-53521", "listed": "2026-03-27", "product": "BIG-IP", "vendor": "F5" }, { "cvss": 9.8, "date": "2025-10-20", "id": "cve-2025-61932", "listed": "2025-10-22", "product": "LANSCOPE Endpoint Manager", "vendor": "Motex" }, { "cvss": 9.8, "date": "2025-10-21", "id": "cve-2025-61757", "listed": "2025-11-21", "product": "Fusion Middleware", "vendor": "Oracle" } ], "year": "2025" }, { "batches": [ { "day": 6, "filer": "Patchstack", "published": 147 }, { "day": 4, "filer": "apple", "published": 105 }, { "day": 12, "filer": "Linux", "published": 96 } ], "busiest": { "day": 11, "published": 323 }, "critical": 256, "daysAbove": 4, "daysCovered": 30, "daysInMonth": 30, "expected": 3759, "kinds": { "ai software": 56, "browsers": 107, "devices & routers": 100, "enterprise vendors": 679, "industrial": 72, "linux kernel": 104, "open-source packages": 404, "other": 205, "small web apps": 238, "unknown": 395, "wordpress": 660 }, "label": "november 2025", "month": "11", "noLoginCritical": 211, "paintedAt": "2026-10-24", "published": 3020, "running": false, "scored": 2960, "slug": "2025-11", "usedInAttacks": [ { "cvss": 9.8, "date": "2025-11-03", "id": "cve-2025-11953", "listed": "2026-02-05", "product": "CLI", "vendor": "React Native Community" }, { "cvss": 8.8, "date": "2025-11-05", "id": "cve-2023-43000", "listed": "2026-03-05", "product": "Multiple Products", "vendor": "Apple" }, { "cvss": 8.6, "date": "2025-11-07", "id": "cve-2025-64328", "listed": "2026-02-03", "product": "FreePBX", "vendor": "Sangoma" }, { "cvss": 9.1, "date": "2025-11-10", "id": "cve-2025-12480", "listed": "2025-11-12", "product": "Triofox", "vendor": "Gladinet" }, { "cvss": 7.8, "date": "2025-11-11", "id": "cve-2025-60710", "listed": "2026-04-13", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 7, "date": "2025-11-11", "id": "cve-2025-62215", "listed": "2025-11-12", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 9.4, "date": "2025-11-14", "id": "cve-2025-64446", "listed": "2025-11-14", "product": "FortiWeb", "vendor": "Fortinet" }, { "cvss": 8.8, "date": "2025-11-17", "id": "cve-2025-13223", "listed": "2025-11-19", "product": "Chromium V8", "vendor": "Google" }, { "cvss": 6.7, "date": "2025-11-18", "id": "cve-2025-58034", "listed": "2025-11-18", "product": "FortiWeb", "vendor": "Fortinet" }, { "cvss": 8.2, "date": "2025-11-25", "id": "cve-2025-58360", "listed": "2025-12-11", "product": "GeoServer", "vendor": "OSGeo" }, { "cvss": 9.4, "date": "2025-11-26", "id": "cve-2025-62593", "listed": "2026-08-17", "product": "Ray", "vendor": "Ray-Project" } ], "year": "2025" }, { "batches": [ { "day": 24, "filer": "Linux", "published": 322 }, { "day": 30, "filer": "Linux", "published": 244 }, { "day": 18, "filer": "Patchstack", "published": 218 } ], "busiest": { "day": 9, "published": 667 }, "critical": 429, "daysAbove": 14, "daysCovered": 31, "daysInMonth": 31, "expected": 4237, "kinds": { "ai software": 80, "browsers": 49, "devices & routers": 146, "enterprise vendors": 764, "industrial": 121, "linux kernel": 1054, "open-source packages": 812, "other": 337, "small web apps": 395, "unknown": 464, "wordpress": 1271 }, "label": "december 2025", "month": "12", "noLoginCritical": 352, "paintedAt": "2026-10-24", "published": 5493, "running": false, "scored": 4767, "slug": "2025-12", "usedInAttacks": [ { "cvss": 10, "date": "2025-12-03", "id": "cve-2025-55182", "listed": "2025-12-05", "product": "React Server Components", "vendor": "Meta" }, { "cvss": 9.4, "date": "2025-12-05", "id": "cve-2025-34291", "listed": "2026-05-21", "product": "Langflow", "vendor": "Langflow" }, { "cvss": 7.2, "date": "2025-12-05", "id": "cve-2025-66644", "listed": "2025-12-08", "product": "ArrayOS AG", "vendor": "Array Networks" }, { "cvss": 7.8, "date": "2025-12-08", "id": "cve-2025-48572", "listed": "2025-12-02", "product": "Framework", "vendor": "Android" }, { "cvss": 5.5, "date": "2025-12-08", "id": "cve-2025-48633", "listed": "2025-12-02", "product": "Framework", "vendor": "Android" }, { "cvss": 9.1, "date": "2025-12-09", "id": "cve-2025-59718", "listed": "2025-12-16", "product": "Multiple Products", "vendor": "Fortinet" }, { "cvss": 7.8, "date": "2025-12-09", "id": "cve-2025-62221", "listed": "2025-12-09", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 8.7, "date": "2025-12-10", "id": "cve-2025-8110", "listed": "2026-01-12", "product": "Gogs", "vendor": "Gogs" }, { "cvss": 8.8, "date": "2025-12-12", "id": "cve-2025-14174", "listed": "2025-12-12", "product": "Chromium", "vendor": "Google" }, { "cvss": 7.1, "date": "2025-12-12", "id": "cve-2025-14611", "listed": "2025-12-15", "product": "CentreStack and Triofox", "vendor": "Gladinet" }, { "cvss": 7.8, "date": "2025-12-12", "id": "cve-2025-43510", "listed": "2026-03-20", "product": "Multiple Products", "vendor": "Apple" }, { "cvss": 5.5, "date": "2025-12-12", "id": "cve-2025-43520", "listed": "2026-03-20", "product": "Multiple Products", "vendor": "Apple" }, { "cvss": 10, "date": "2025-12-16", "id": "cve-2025-37164", "listed": "2026-01-07", "product": "OneView", "vendor": "Hewlett Packard Enterprise (HPE)" }, { "cvss": 10, "date": "2025-12-17", "id": "cve-2025-20393", "listed": "2025-12-17", "product": "Multiple Products", "vendor": "Cisco" }, { "cvss": 8.8, "date": "2025-12-17", "id": "cve-2025-43529", "listed": "2025-12-15", "product": "Multiple Products", "vendor": "Apple" }, { "cvss": 9.3, "date": "2025-12-17", "id": "cve-2025-59374", "listed": "2025-12-17", "product": "Live Update", "vendor": "ASUS" }, { "cvss": 6.6, "date": "2025-12-18", "id": "cve-2025-40602", "listed": "2025-12-17", "product": "SMA1000 appliance", "vendor": "SonicWall" }, { "cvss": 7.2, "date": "2025-12-18", "id": "cve-2025-68461", "listed": "2026-02-20", "product": "Webmail", "vendor": "Roundcube" }, { "cvss": 9.3, "date": "2025-12-19", "id": "cve-2025-14733", "listed": "2025-12-19", "product": "Firebox", "vendor": "WatchGuard" }, { "cvss": 7.5, "date": "2025-12-19", "id": "cve-2025-14847", "listed": "2025-12-29", "product": "MongoDB and MongoDB Server", "vendor": "MongoDB" }, { "cvss": 10, "date": "2025-12-19", "id": "cve-2025-68613", "listed": "2026-03-11", "product": "n8n", "vendor": "n8n" }, { "cvss": 8.8, "date": "2025-12-22", "id": "cve-2025-68645", "listed": "2026-01-22", "product": "Zimbra Collaboration Suite (ZCS)", "vendor": "Synacor" }, { "cvss": 10, "date": "2025-12-29", "id": "cve-2025-52691", "listed": "2026-01-26", "product": "SmarterMail", "vendor": "SmarterTools" } ], "year": "2025" }, { "batches": [ { "day": 22, "filer": "Patchstack", "published": 309 }, { "day": 23, "filer": "Patchstack", "published": 95 } ], "busiest": { "day": 13, "published": 444 }, "critical": 456, "daysAbove": 12, "daysCovered": 31, "daysInMonth": 31, "expected": 4038, "kinds": { "ai software": 92, "browsers": 35, "devices & routers": 175, "enterprise vendors": 666, "industrial": 75, "linux kernel": 246, "open-source packages": 1258, "other": 306, "small web apps": 236, "unknown": 262, "wordpress": 951 }, "label": "january 2026", "month": "01", "noLoginCritical": 373, "paintedAt": "2026-10-24", "published": 4302, "running": false, "scored": 4135, "slug": "2026-01", "usedInAttacks": [ { "cvss": 7.2, "date": "2026-01-05", "id": "cve-2025-66376", "listed": "2026-03-18", "product": "Zimbra Collaboration Suite (ZCS)", "vendor": "Synacor" }, { "cvss": 7.4, "date": "2026-01-13", "id": "cve-2025-25249", "listed": "2026-09-09", "product": "Multiple Products", "vendor": "Fortinet" }, { "cvss": 5.5, "date": "2026-01-13", "id": "cve-2026-20805", "listed": "2026-01-13", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 9.8, "date": "2026-01-13", "id": "cve-2026-20963", "listed": "2026-03-18", "product": "SharePoint", "vendor": "Microsoft" }, { "cvss": 10, "date": "2026-01-20", "id": "cve-2026-21962", "listed": "2026-08-24", "product": "HTTP Server and Oracle Weblogic Server Proxy Plug-in", "vendor": "Oracle" }, { "cvss": 8.2, "date": "2026-01-21", "id": "cve-2026-20045", "listed": "2026-01-21", "product": "Unified Communications Manager", "vendor": "Cisco" }, { "cvss": 9.8, "date": "2026-01-21", "id": "cve-2026-24061", "listed": "2026-01-26", "product": "InetUtils", "vendor": "GNU" }, { "cvss": 9.3, "date": "2026-01-22", "id": "cve-2026-23760", "listed": "2026-01-26", "product": "SmarterMail", "vendor": "SmarterTools" }, { "cvss": 9.8, "date": "2026-01-23", "id": "cve-2026-0770", "listed": "2026-07-21", "product": "Langflow", "vendor": "Langflow" }, { "cvss": 9.3, "date": "2026-01-23", "id": "cve-2026-24423", "listed": "2026-02-05", "product": "SmarterMail", "vendor": "SmarterTools" }, { "cvss": 7.8, "date": "2026-01-26", "id": "cve-2026-21509", "listed": "2026-01-26", "product": "Office", "vendor": "Microsoft" }, { "cvss": 9.4, "date": "2026-01-27", "id": "cve-2026-24858", "listed": "2026-01-27", "product": "Multiple Products", "vendor": "Fortinet" }, { "cvss": 8.1, "date": "2026-01-28", "id": "cve-2025-40536", "listed": "2026-02-12", "product": "Web Help Desk", "vendor": "SolarWinds" }, { "cvss": 9.8, "date": "2026-01-28", "id": "cve-2025-40551", "listed": "2026-02-03", "product": "Web Help Desk", "vendor": "SolarWinds" }, { "cvss": 9.8, "date": "2026-01-29", "id": "cve-2026-1281", "listed": "2026-01-29", "product": "Endpoint Manager Mobile (EPMM)", "vendor": "Ivanti" }, { "cvss": 9.8, "date": "2026-01-29", "id": "cve-2026-1340", "listed": "2026-04-08", "product": "Endpoint Manager Mobile (EPMM)", "vendor": "Ivanti" } ], "year": "2026" }, { "batches": [ { "day": 20, "filer": "Patchstack", "published": 213 }, { "day": 25, "filer": "GitHub_M", "published": 124 } ], "busiest": { "day": 19, "published": 388 }, "critical": 451, "daysAbove": 16, "daysCovered": 28, "daysInMonth": 28, "expected": 3690, "kinds": { "ai software": 167, "browsers": 85, "devices & routers": 261, "enterprise vendors": 775, "industrial": 127, "linux kernel": 220, "open-source packages": 1474, "other": 201, "small web apps": 363, "unknown": 194, "wordpress": 749 }, "label": "february 2026", "month": "02", "noLoginCritical": 370, "paintedAt": "2026-10-24", "published": 4616, "running": false, "scored": 4437, "slug": "2026-02", "usedInAttacks": [ { "cvss": 7.7, "date": "2026-02-03", "id": "cve-2025-15556", "listed": "2026-02-12", "product": "Notepad++", "vendor": "Notepad++" }, { "cvss": 9.9, "date": "2026-02-06", "id": "cve-2026-1731", "listed": "2026-02-13", "product": "Remote Support (RS) and Privileged Remote Access (PRA)", "vendor": "BeyondTrust" }, { "cvss": 9.1, "date": "2026-02-06", "id": "cve-2026-21643", "listed": "2026-04-13", "product": "FortiClient EMS", "vendor": "Fortinet" }, { "cvss": 5.3, "date": "2026-02-10", "id": "cve-2025-68686", "listed": "2026-07-27", "product": "FortiOS", "vendor": "Fortinet" }, { "cvss": 8.6, "date": "2026-02-10", "id": "cve-2026-1603", "listed": "2026-03-09", "product": "Endpoint Manager (EPM)", "vendor": "Ivanti" }, { "cvss": 8.8, "date": "2026-02-10", "id": "cve-2026-21510", "listed": "2026-02-10", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 8.8, "date": "2026-02-10", "id": "cve-2026-21513", "listed": "2026-02-10", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 7.8, "date": "2026-02-10", "id": "cve-2026-21514", "listed": "2026-02-10", "product": "Office", "vendor": "Microsoft" }, { "cvss": 7.8, "date": "2026-02-10", "id": "cve-2026-21519", "listed": "2026-02-10", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 6.2, "date": "2026-02-10", "id": "cve-2026-21525", "listed": "2026-02-10", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 7.8, "date": "2026-02-10", "id": "cve-2026-21533", "listed": "2026-02-10", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 7.8, "date": "2026-02-11", "id": "cve-2026-20700", "listed": "2026-02-12", "product": "Multiple Products", "vendor": "Apple" }, { "cvss": 8.8, "date": "2026-02-13", "id": "cve-2026-2441", "listed": "2026-02-17", "product": "Chromium", "vendor": "Google" }, { "cvss": 8.8, "date": "2026-02-13", "id": "cve-2026-25108", "listed": "2026-02-24", "product": "FileZen", "vendor": "Soliton Systems K.K" }, { "cvss": 10, "date": "2026-02-17", "id": "cve-2026-22769", "listed": "2026-02-18", "product": "RecoverPoint for Virtual Machines (RP4VMs)", "vendor": "Dell" }, { "cvss": 5.4, "date": "2026-02-25", "id": "cve-2026-20122", "listed": "2026-04-20", "product": "Catalyst SD-WAN Manger", "vendor": "Cisco" }, { "cvss": 10, "date": "2026-02-25", "id": "cve-2026-20127", "listed": "2026-02-25", "product": "Catalyst SD-WAN Controller and Manager", "vendor": "Cisco" }, { "cvss": 7.5, "date": "2026-02-25", "id": "cve-2026-20128", "listed": "2026-04-20", "product": "Catalyst SD-WAN Manager", "vendor": "Cisco" }, { "cvss": 6.5, "date": "2026-02-25", "id": "cve-2026-20133", "listed": "2026-04-20", "product": "Catalyst SD-WAN Manager", "vendor": "Cisco" }, { "cvss": 8.1, "date": "2026-02-25", "id": "cve-2026-22719", "listed": "2026-03-03", "product": "VMware Aria Operations", "vendor": "Broadcom" } ], "year": "2026" }, { "batches": [ { "day": 5, "filer": "Patchstack", "published": 268 }, { "day": 25, "filer": "Patchstack", "published": 248 }, { "day": 20, "filer": "GitHub_M", "published": 158 } ], "busiest": { "day": 25, "published": 619 }, "critical": 634, "daysAbove": 24, "daysCovered": 31, "daysInMonth": 31, "expected": 4089, "kinds": { "ai software": 216, "browsers": 133, "devices & routers": 234, "enterprise vendors": 983, "industrial": 113, "linux kernel": 178, "open-source packages": 2311, "other": 265, "small web apps": 419, "unknown": 357, "wordpress": 1027 }, "label": "march 2026", "month": "03", "noLoginCritical": 480, "paintedAt": "2026-10-24", "published": 6236, "running": false, "scored": 6097, "slug": "2026-03", "usedInAttacks": [ { "cvss": 7.8, "date": "2026-03-02", "id": "cve-2026-21385", "listed": "2026-03-03", "product": "Multiple Chipsets", "vendor": "Qualcomm" }, { "cvss": 10, "date": "2026-03-04", "id": "cve-2026-20079", "listed": "2026-09-09", "product": "Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management", "vendor": "Cisco" }, { "cvss": 10, "date": "2026-03-04", "id": "cve-2026-20131", "listed": "2026-03-19", "product": "Secure Firewall Management Center (FMC)", "vendor": "Cisco" }, { "cvss": 9.8, "date": "2026-03-11", "id": "cve-2025-67038", "listed": "2026-06-23", "product": "EDS5000", "vendor": "Lantronix" }, { "cvss": 8.8, "date": "2026-03-12", "id": "cve-2026-3909", "listed": "2026-03-13", "product": "Skia", "vendor": "Google" }, { "cvss": 8.8, "date": "2026-03-12", "id": "cve-2026-3910", "listed": "2026-03-13", "product": "Chromium V8", "vendor": "Google" }, { "cvss": 9.3, "date": "2026-03-20", "id": "cve-2026-33017", "listed": "2026-03-25", "product": "Langflow", "vendor": "Langflow" }, { "cvss": 9.3, "date": "2026-03-23", "id": "cve-2026-3055", "listed": "2026-03-30", "product": "NetScaler", "vendor": "Citrix" }, { "cvss": 9.4, "date": "2026-03-23", "id": "cve-2026-33634", "listed": "2026-03-26", "product": "Trivy", "vendor": "Aquasecurity" }, { "cvss": 7.8, "date": "2026-03-30", "id": "cve-2026-3502", "listed": "2026-04-02", "product": "Client", "vendor": "TrueConf" } ], "year": "2026" }, { "batches": [ { "day": 8, "filer": "Patchstack", "published": 164 }, { "day": 14, "filer": "microsoft", "published": 163 }, { "day": 24, "filer": "Linux", "published": 138 } ], "busiest": { "day": 8, "published": 484 }, "critical": 565, "daysAbove": 21, "daysCovered": 30, "daysInMonth": 30, "expected": 4039, "kinds": { "ai software": 263, "browsers": 198, "devices & routers": 255, "enterprise vendors": 967, "industrial": 100, "linux kernel": 377, "open-source packages": 1984, "other": 305, "small web apps": 488, "unknown": 347, "wordpress": 529 }, "label": "april 2026", "month": "04", "noLoginCritical": 430, "paintedAt": "2026-10-24", "published": 5813, "running": false, "scored": 5602, "slug": "2026-04", "usedInAttacks": [ { "cvss": 8.8, "date": "2026-04-01", "id": "cve-2026-5281", "listed": "2026-04-01", "product": "Dawn", "vendor": "Google" }, { "cvss": 9.1, "date": "2026-04-04", "id": "cve-2026-35616", "listed": "2026-04-06", "product": "FortiClient EMS", "vendor": "Fortinet" }, { "cvss": 8.8, "date": "2026-04-07", "id": "cve-2026-34197", "listed": "2026-04-16", "product": "ActiveMQ", "vendor": "Apache" }, { "cvss": 7.5, "date": "2026-04-09", "id": "cve-2026-34486", "listed": "2026-08-04", "product": "Tomcat", "vendor": "Apache" }, { "cvss": 9.3, "date": "2026-04-09", "id": "cve-2026-39987", "listed": "2026-04-23", "product": "Marimo", "vendor": "Marimo" }, { "cvss": 8.6, "date": "2026-04-11", "id": "cve-2026-34621", "listed": "2026-04-13", "product": "Acrobat and Reader", "vendor": "Adobe" }, { "cvss": 5.4, "date": "2026-04-14", "id": "cve-2025-61624", "listed": "2026-10-16", "product": "Multiple Products", "vendor": "Fortinet" }, { "cvss": 6.5, "date": "2026-04-14", "id": "cve-2026-32201", "listed": "2026-04-14", "product": "SharePoint Server", "vendor": "Microsoft" }, { "cvss": 4.3, "date": "2026-04-14", "id": "cve-2026-32202", "listed": "2026-04-28", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 9.8, "date": "2026-04-14", "id": "cve-2026-33824", "listed": "2026-08-18", "product": "Internet Key Exchange (IKE) Service Extensions", "vendor": "Microsoft" }, { "cvss": 7.8, "date": "2026-04-14", "id": "cve-2026-33825", "listed": "2026-04-22", "product": "Defender", "vendor": "Microsoft" }, { "cvss": 9.1, "date": "2026-04-14", "id": "cve-2026-39808", "listed": "2026-07-16", "product": "FortiSandbox", "vendor": "Fortinet" }, { "cvss": 7.8, "date": "2026-04-22", "id": "cve-2026-31431", "listed": "2026-05-01", "product": "Kernel", "vendor": "Linux" }, { "cvss": 9.8, "date": "2026-04-29", "id": "cve-2026-41940", "listed": "2026-04-30", "product": "cPanel & WHM and WP2 (WordPress Squared)", "vendor": "WebPros" } ], "year": "2026" }, { "batches": [ { "day": 27, "filer": "Linux", "published": 275 }, { "day": 6, "filer": "Linux", "published": 224 }, { "day": 8, "filer": "Linux", "published": 197 } ], "busiest": { "day": 27, "published": 714 }, "critical": 669, "daysAbove": 23, "daysCovered": 31, "daysInMonth": 31, "expected": 3894, "kinds": { "ai software": 330, "browsers": 440, "devices & routers": 279, "enterprise vendors": 1043, "industrial": 135, "linux kernel": 1027, "open-source packages": 2050, "other": 344, "small web apps": 407, "unknown": 308, "wordpress": 570 }, "label": "may 2026", "month": "05", "noLoginCritical": 500, "paintedAt": "2026-10-24", "published": 6933, "running": false, "scored": 6252, "slug": "2026-05", "usedInAttacks": [ { "cvss": 9.3, "date": "2026-05-06", "id": "cve-2026-0300", "listed": "2026-05-06", "product": "PAN-OS", "vendor": "Palo Alto Networks" }, { "cvss": 7.2, "date": "2026-05-07", "id": "cve-2026-6973", "listed": "2026-05-07", "product": "Endpoint Manager Mobile (EPMM)", "vendor": "Ivanti" }, { "cvss": 9.3, "date": "2026-05-08", "id": "cve-2026-42208", "listed": "2026-05-08", "product": "LiteLLM", "vendor": "BerriAI" }, { "cvss": 8.7, "date": "2026-05-08", "id": "cve-2026-42271", "listed": "2026-06-08", "product": "LiteLLM", "vendor": "BerriAI" }, { "cvss": 9.6, "date": "2026-05-12", "id": "cve-2026-45321", "listed": "2026-05-27", "product": "TanStack", "vendor": "TanStack" }, { "cvss": 7.8, "date": "2026-05-13", "id": "cve-2026-0257", "listed": "2026-05-29", "product": "PAN-OS", "vendor": "Palo Alto Networks" }, { "cvss": 10, "date": "2026-05-14", "id": "cve-2026-20182", "listed": "2026-05-14", "product": "Catalyst SD-WAN", "vendor": "Cisco" }, { "cvss": 8.1, "date": "2026-05-14", "id": "cve-2026-42897", "listed": "2026-05-15", "product": "Microsoft", "vendor": "Microsoft" }, { "cvss": 9.8, "date": "2026-05-15", "id": "cve-2026-8398", "listed": "2026-05-27", "product": "Daemon Tools Lite", "vendor": "Daemon" }, { "cvss": 7.8, "date": "2026-05-20", "id": "cve-2026-41091", "listed": "2026-05-20", "product": "Defender", "vendor": "Microsoft" }, { "cvss": 4, "date": "2026-05-20", "id": "cve-2026-45498", "listed": "2026-05-20", "product": "Defender", "vendor": "Microsoft" }, { "cvss": 9.8, "date": "2026-05-20", "id": "cve-2026-9082", "listed": "2026-05-22", "product": "Core", "vendor": "Drupal" }, { "cvss": 6.7, "date": "2026-05-21", "id": "cve-2026-34926", "listed": "2026-05-21", "product": "Apex One", "vendor": "Trend Micro" }, { "cvss": 10, "date": "2026-05-21", "id": "cve-2026-48172", "listed": "2026-05-26", "product": "cPanel Plugin", "vendor": "LiteSpeed" }, { "cvss": 10, "date": "2026-05-22", "id": "cve-2026-34908", "listed": "2026-06-23", "product": "UniFi OS", "vendor": "Ubiquiti" }, { "cvss": 10, "date": "2026-05-22", "id": "cve-2026-34909", "listed": "2026-06-23", "product": "UniFi OS", "vendor": "Ubiquiti" }, { "cvss": 10, "date": "2026-05-22", "id": "cve-2026-34910", "listed": "2026-06-23", "product": "UniFi OS", "vendor": "Ubiquiti" }, { "cvss": 8.8, "date": "2026-05-22", "id": "cve-2026-45659", "listed": "2026-07-01", "product": "SharePoint Server", "vendor": "Microsoft" }, { "cvss": 9.8, "date": "2026-05-26", "id": "cve-2026-45247", "listed": "2026-06-03", "product": "Mirasvit Full Page Cache Warmer", "vendor": "Mirasvit" }, { "cvss": 6.5, "date": "2026-05-26", "id": "cve-2026-48710", "listed": "2026-09-02", "product": "Starlette", "vendor": "Kludex" }, { "cvss": 9.3, "date": "2026-05-27", "id": "cve-2026-48027", "listed": "2026-05-27", "product": "Nx Console", "vendor": "Nx" }, { "cvss": 9.8, "date": "2026-05-28", "id": "cve-2026-46817", "listed": "2026-07-15", "product": "E-Business Suite", "vendor": "Oracle" } ], "year": "2026" }, { "batches": [ { "day": 4, "filer": "Chrome", "published": 427 }, { "day": 30, "filer": "Chrome", "published": 382 }, { "day": 16, "filer": "oracle", "published": 240 } ], "busiest": { "day": 9, "published": 718 }, "critical": 929, "daysAbove": 19, "daysCovered": 30, "daysInMonth": 30, "expected": 4060, "kinds": { "ai software": 324, "browsers": 1057, "devices & routers": 177, "enterprise vendors": 1455, "industrial": 122, "linux kernel": 513, "open-source packages": 2205, "other": 366, "small web apps": 357, "unknown": 280, "wordpress": 1093 }, "label": "june 2026", "month": "06", "noLoginCritical": 603, "paintedAt": "2026-10-24", "published": 7949, "running": false, "scored": 7676, "slug": "2026-06", "usedInAttacks": [ { "cvss": 8.4, "date": "2026-06-01", "id": "cve-2025-48595", "listed": "2026-06-02", "product": "Framework", "vendor": "Android" }, { "cvss": 8.6, "date": "2026-06-03", "id": "cve-2026-20230", "listed": "2026-06-25", "product": "Unified Communications Manager", "vendor": "Cisco" }, { "cvss": 7.8, "date": "2026-06-04", "id": "cve-2026-20245", "listed": "2026-06-09", "product": "Catalyst SD-WAN Manager", "vendor": "Cisco" }, { "cvss": 7.5, "date": "2026-06-04", "id": "cve-2026-28318", "listed": "2026-06-05", "product": "Serv-U", "vendor": "SolarWinds" }, { "cvss": 9.6, "date": "2026-06-04", "id": "cve-2026-8037", "listed": "2026-08-07", "product": "LoadMaster", "vendor": "Progress" }, { "cvss": 10, "date": "2026-06-05", "id": "cve-2026-48907", "listed": "2026-06-16", "product": "Joomla Content Editor", "vendor": "Widget Factory" }, { "cvss": 5.8, "date": "2026-06-05", "id": "cve-2026-7473", "listed": "2026-06-09", "product": "Extensible Operating System", "vendor": "Arista" }, { "cvss": 8.8, "date": "2026-06-08", "id": "cve-2026-11645", "listed": "2026-06-09", "product": "Chromium V8", "vendor": "Google" }, { "cvss": 9.3, "date": "2026-06-08", "id": "cve-2026-50751", "listed": "2026-06-08", "product": "Security Gateway", "vendor": "Check Point" }, { "cvss": 10, "date": "2026-06-09", "id": "cve-2026-10520", "listed": "2026-06-11", "product": "Sentry", "vendor": "Ivanti" }, { "cvss": 9.1, "date": "2026-06-09", "id": "cve-2026-25089", "listed": "2026-07-16", "product": "FortiSandbox", "vendor": "Fortinet" }, { "cvss": 9.8, "date": "2026-06-10", "id": "cve-2026-20253", "listed": "2026-06-18", "product": "Enterprise", "vendor": "Splunk" }, { "cvss": 9.8, "date": "2026-06-11", "id": "cve-2026-35273", "listed": "2026-06-12", "product": "PeopleSoft Enterprise PeopleTools", "vendor": "Oracle" }, { "cvss": 10, "date": "2026-06-12", "id": "cve-2026-48558", "listed": "2026-06-29", "product": "SimpleHelp", "vendor": "SimpleHelp" }, { "cvss": 8.5, "date": "2026-06-14", "id": "cve-2026-54420", "listed": "2026-06-15", "product": "cPanel Plugin", "vendor": "LiteSpeed" }, { "cvss": 6.5, "date": "2026-06-15", "id": "cve-2026-20262", "listed": "2026-06-15", "product": "Catalyst SD-WAN Manager", "vendor": "Cisco" }, { "cvss": 8.8, "date": "2026-06-16", "id": "cve-2026-7273", "listed": "2026-09-21", "product": "GS1900 Series Switches", "vendor": "Zyxel" }, { "cvss": 9.3, "date": "2026-06-18", "id": "cve-2026-12569", "listed": "2026-06-25", "product": "Windchill and FlexPLM", "vendor": "PTC" }, { "cvss": 10, "date": "2026-06-20", "id": "cve-2026-48908", "listed": "2026-07-07", "product": "SP Page Builder", "vendor": "JoomShaper" }, { "cvss": 10, "date": "2026-06-20", "id": "cve-2026-48939", "listed": "2026-07-10", "product": "iCagenda", "vendor": "iCagenda" }, { "cvss": 8.4, "date": "2026-06-23", "id": "cve-2026-55255", "listed": "2026-07-07", "product": "Langflow", "vendor": "Langflow" }, { "cvss": 8.8, "date": "2026-06-25", "id": "cve-2026-53266", "listed": "2026-09-18", "product": "Kernel", "vendor": "Linux" }, { "cvss": 10, "date": "2026-06-26", "id": "cve-2026-49869", "listed": "2026-09-02", "product": "Kestra OSS", "vendor": "Kestra" }, { "cvss": 10, "date": "2026-06-29", "id": "cve-2026-56290", "listed": "2026-07-07", "product": "Page Builder", "vendor": "Joomlack" }, { "cvss": 10, "date": "2026-06-30", "id": "cve-2026-48282", "listed": "2026-07-07", "product": "ColdFusion", "vendor": "Adobe" }, { "cvss": 8.8, "date": "2026-06-30", "id": "cve-2026-8452", "listed": "2026-08-26", "product": "NetScaler ADC and NetScaler Gateway", "vendor": "Citrix" } ], "year": "2026" }, { "batches": [ { "day": 21, "filer": "oracle", "published": 1097 }, { "day": 14, "filer": "microsoft", "published": 570 }, { "day": 19, "filer": "Linux", "published": 429 } ], "busiest": { "day": 21, "published": 1474 }, "critical": 1298, "daysAbove": 29, "daysCovered": 31, "daysInMonth": 31, "expected": 4174, "kinds": { "ai software": 399, "browsers": 620, "devices & routers": 114, "enterprise vendors": 2818, "industrial": 159, "linux kernel": 835, "open-source packages": 2638, "other": 419, "small web apps": 374, "unknown": 217, "wordpress": 1166 }, "label": "july 2026", "month": "07", "noLoginCritical": 952, "paintedAt": "2026-10-24", "published": 9759, "running": false, "scored": 9367, "slug": "2026-07", "usedInAttacks": [ { "cvss": 7.8, "date": "2026-07-04", "id": "cve-2026-53362", "listed": "2026-08-27", "product": "Kernel", "vendor": "Linux" }, { "cvss": 8.8, "date": "2026-07-08", "id": "cve-2026-59822", "listed": "2026-09-02", "product": "LiteLLM", "vendor": "BerriAI" }, { "cvss": 10, "date": "2026-07-09", "id": "cve-2026-56291", "listed": "2026-07-10", "product": "Forms", "vendor": "Balbooa" }, { "cvss": 10, "date": "2026-07-14", "id": "cve-2026-15409", "listed": "2026-07-14", "product": "SMA1000 Appliances", "vendor": "SonicWall" }, { "cvss": 7.2, "date": "2026-07-14", "id": "cve-2026-15410", "listed": "2026-07-14", "product": "SMA1000 Appliances", "vendor": "SonicWall" }, { "cvss": 9.8, "date": "2026-07-14", "id": "cve-2026-50522", "listed": "2026-07-22", "product": "SharePoint", "vendor": "Microsoft" }, { "cvss": 9.1, "date": "2026-07-14", "id": "cve-2026-55040", "listed": "2026-08-18", "product": "SharePoint", "vendor": "Microsoft" }, { "cvss": 7.8, "date": "2026-07-14", "id": "cve-2026-56155", "listed": "2026-07-14", "product": "Active Directory Federation Services", "vendor": "Microsoft" }, { "cvss": 5.3, "date": "2026-07-14", "id": "cve-2026-56164", "listed": "2026-07-14", "product": "SharePoint Server", "vendor": "Microsoft" }, { "cvss": 9.8, "date": "2026-07-14", "id": "cve-2026-58644", "listed": "2026-07-16", "product": "SharePoint", "vendor": "Microsoft" }, { "cvss": 8.1, "date": "2026-07-16", "id": "cve-2021-27137", "listed": "2026-07-21", "product": "DD-WRT", "vendor": "DD-WRT" }, { "cvss": 5.9, "date": "2026-07-17", "id": "cve-2026-60137", "listed": "2026-07-21", "product": "Core", "vendor": "WordPress" }, { "cvss": 9.8, "date": "2026-07-17", "id": "cve-2026-63030", "listed": "2026-07-21", "product": "Core", "vendor": "WordPress" }, { "cvss": 9.8, "date": "2026-07-17", "id": "cve-2026-9198", "listed": "2026-08-04", "product": "Langflow", "vendor": "IBM" }, { "cvss": 9.3, "date": "2026-07-17", "id": "cve-2026-9586", "listed": "2026-09-02", "product": "Switchvox", "vendor": "Sangoma" }, { "cvss": 9.3, "date": "2026-07-22", "id": "cve-2026-16232", "listed": "2026-07-22", "product": "SmartConsole", "vendor": "Check Point" }, { "cvss": 10, "date": "2026-07-27", "id": "cve-2026-16812", "listed": "2026-07-27", "product": "VeloCloud Orchestrator", "vendor": "Arista" }, { "cvss": 8.1, "date": "2026-07-27", "id": "cve-2026-42016", "listed": "2026-09-11", "product": "Artifactory", "vendor": "JFrog" }, { "cvss": 9.8, "date": "2026-07-27", "id": "cve-2026-63077", "listed": "2026-08-05", "product": "TeamCity", "vendor": "JetBrains" }, { "cvss": 5.3, "date": "2026-07-29", "id": "cve-2026-20316", "listed": "2026-07-29", "product": "Secure Firewall Management Center (FMC)", "vendor": "Cisco" }, { "cvss": 9.8, "date": "2026-07-30", "id": "cve-2026-59310", "listed": "2026-08-18", "product": "VMware vCenter", "vendor": "Broadcom" } ], "year": "2026" }, { "batches": [ { "day": 18, "filer": "oracle", "published": 889 }, { "day": 15, "filer": "Linux", "published": 844 }, { "day": 11, "filer": "microsoft", "published": 402 } ], "busiest": { "day": 18, "published": 1405 }, "critical": 1743, "daysAbove": 31, "daysCovered": 31, "daysInMonth": 31, "expected": 3903, "kinds": { "ai software": 525, "browsers": 505, "devices & routers": 233, "enterprise vendors": 2986, "industrial": 113, "linux kernel": 1643, "open-source packages": 3303, "other": 722, "small web apps": 481, "unknown": 395, "wordpress": 1354 }, "label": "august 2026", "month": "08", "noLoginCritical": 1319, "paintedAt": "2026-10-24", "published": 12260, "running": false, "scored": 11569, "slug": "2026-08", "usedInAttacks": [ { "cvss": 8.2, "date": "2026-08-01", "id": "cve-2026-18556", "listed": "2026-08-04", "product": "N-central", "vendor": "N-able" }, { "cvss": 8.2, "date": "2026-08-02", "id": "cve-2026-18577", "listed": "2026-08-03", "product": "N-central", "vendor": "N-able" }, { "cvss": 10, "date": "2026-08-06", "id": "cve-2026-5430", "listed": "2026-09-24", "product": "Multiple Products", "vendor": "WSO2" }, { "cvss": 9.8, "date": "2026-08-06", "id": "cve-2026-65400", "listed": "2026-08-18", "product": "macOS", "vendor": "Apple" }, { "cvss": 10, "date": "2026-08-10", "id": "cve-2026-72898", "listed": "2026-08-11", "product": "Metabase", "vendor": "Metabase" }, { "cvss": 8.6, "date": "2026-08-11", "id": "cve-2026-20349", "listed": "2026-08-11", "product": "Secure Firewall Adaptive Security Appliance (ASA) and Secure Firewall Threat Defense (FTD)", "vendor": "Cisco" }, { "cvss": 8.8, "date": "2026-08-11", "id": "cve-2026-65660", "listed": "2026-09-25", "product": "SharePoint", "vendor": "Microsoft" }, { "cvss": 7, "date": "2026-08-11", "id": "cve-2026-68820", "listed": "2026-08-11", "product": "Windows Ancillary Function Driver for WinSock", "vendor": "Microsoft" }, { "cvss": 9.1, "date": "2026-08-11", "id": "cve-2026-71362", "listed": "2026-09-24", "product": "Commerce and Magento", "vendor": "Adobe" }, { "cvss": 7.5, "date": "2026-08-12", "id": "cve-2026-42018", "listed": "2026-09-11", "product": "Artifactory", "vendor": "JFrog" }, { "cvss": 5.3, "date": "2026-08-12", "id": "cve-2026-66384", "listed": "2026-08-27", "product": "Artifactory", "vendor": "JFrog" }, { "cvss": 8.9, "date": "2026-08-13", "id": "cve-2026-73570", "listed": "2026-08-21", "product": "Zimbra Collaboration Suite (ZCS)", "vendor": "Synacor" }, { "cvss": 9.3, "date": "2026-08-17", "id": "cve-2026-64849", "listed": "2026-08-19", "product": "MLflow", "vendor": "MLflow" }, { "cvss": 9.3, "date": "2026-08-19", "id": "cve-2026-19490", "listed": "2026-09-09", "product": "NetScaler", "vendor": "Citrix" }, { "cvss": 9.8, "date": "2026-08-19", "id": "cve-2026-72529", "listed": "2026-08-20", "product": "Server", "vendor": "TrueConf" }, { "cvss": 9, "date": "2026-08-19", "id": "cve-2026-72530", "listed": "2026-08-20", "product": "Server", "vendor": "TrueConf" }, { "cvss": 9.8, "date": "2026-08-26", "id": "cve-2026-60004", "listed": "2026-08-25", "product": "Gitea", "vendor": "Gitea" }, { "cvss": 8.8, "date": "2026-08-28", "id": "cve-2026-81578", "listed": "2026-08-28", "product": "NG/MF", "vendor": "PaperCut" }, { "cvss": 9.4, "date": "2026-08-28", "id": "cve-2026-82078", "listed": "2026-08-28", "product": "NG/MF", "vendor": "PaperCut" }, { "cvss": 9.8, "date": "2026-08-28", "id": "cve-2026-82329", "listed": "2026-09-02", "product": "Artifactory", "vendor": "JFrog" } ], "year": "2026" }, { "batches": [ { "day": 8, "filer": "microsoft", "published": 965 }, { "day": 15, "filer": "oracle", "published": 634 }, { "day": 17, "filer": "Linux", "published": 598 } ], "busiest": { "day": 8, "published": 1563 }, "critical": 1479, "daysAbove": 30, "daysCovered": 30, "daysInMonth": 30, "expected": 4094, "kinds": { "ai software": 496, "browsers": 675, "devices & routers": 215, "enterprise vendors": 4225, "industrial": 231, "linux kernel": 2111, "open-source packages": 3861, "other": 678, "small web apps": 789, "unknown": 303, "wordpress": 1350 }, "label": "september 2026", "month": "09", "noLoginCritical": 1035, "paintedAt": "2026-10-24", "published": 14934, "running": false, "scored": 13568, "slug": "2026-09", "usedInAttacks": [ { "cvss": 10, "date": "2026-09-01", "id": "cve-2026-83548", "listed": "2026-09-02", "product": "SMA1000 Appliances", "vendor": "SonicWall" }, { "cvss": 7.8, "date": "2026-09-01", "id": "cve-2026-83549", "listed": "2026-09-02", "product": "SMA1000 Appliances", "vendor": "SonicWall" }, { "cvss": 8.8, "date": "2026-09-03", "id": "cve-2026-85046", "listed": "2026-09-04", "product": "Chromium V8", "vendor": "Google" }, { "cvss": 8.8, "date": "2026-09-05", "id": "cve-2026-67277", "listed": "2026-09-10", "product": "RouterOS", "vendor": "MikroTik" }, { "cvss": 6.9, "date": "2026-09-05", "id": "cve-2026-67279", "listed": "2026-09-25", "product": "RouterOS", "vendor": "MikroTik" }, { "cvss": 9.2, "date": "2026-09-05", "id": "cve-2026-86060", "listed": "2026-09-10", "product": "RouterOS", "vendor": "MikroTik" }, { "cvss": 10, "date": "2026-09-06", "id": "cve-2026-86218", "listed": "2026-09-08", "product": "N-central", "vendor": "N-able" }, { "cvss": 10, "date": "2026-09-07", "id": "cve-2026-75650", "listed": "2026-09-08", "product": "Commerce and Magento", "vendor": "Adobe" }, { "cvss": 7.8, "date": "2026-09-08", "id": "cve-2026-81963", "listed": "2026-09-08", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 9.9, "date": "2026-09-08", "id": "cve-2026-84869", "listed": "2026-09-11", "product": "ScreenConnect", "vendor": "ConnectWise" }, { "cvss": 7.8, "date": "2026-09-08", "id": "cve-2026-85880", "listed": "2026-09-08", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 9.8, "date": "2026-09-09", "id": "cve-2026-85102", "listed": "2026-09-22", "product": "Multiple Products", "vendor": "Check Point" }, { "cvss": 8.8, "date": "2026-09-09", "id": "cve-2026-87491", "listed": "2026-09-09", "product": "Chromium V8", "vendor": "Google" }, { "cvss": 10, "date": "2026-09-12", "id": "cve-2026-85706", "listed": "2026-09-11", "product": "Community Edition and Enterprise Edition", "vendor": "GitLab" }, { "cvss": 9.8, "date": "2026-09-14", "id": "cve-2026-76461", "listed": "2026-09-14", "product": "Secure Email Gateway", "vendor": "Cisco" }, { "cvss": 8.8, "date": "2026-09-15", "id": "cve-2026-58704", "listed": "2026-09-16", "product": "Pixel", "vendor": "Google" }, { "cvss": 10, "date": "2026-09-16", "id": "cve-2026-76460", "listed": "2026-09-16", "product": "Identity Services Engine", "vendor": "Cisco" }, { "cvss": 7.8, "date": "2026-09-17", "id": "cve-2026-87886", "listed": "2026-09-16", "product": "Backup", "vendor": "Acronis" }, { "cvss": 8.1, "date": "2026-09-22", "id": "cve-2026-87902", "listed": "2026-09-25", "product": "Core", "vendor": "WordPress" }, { "cvss": 9.8, "date": "2026-09-22", "id": "cve-2026-93616", "listed": "2026-09-22", "product": "Multiple Products", "vendor": "Check Point" }, { "cvss": 10, "date": "2026-09-22", "id": "cve-2026-93952", "listed": "2026-09-22", "product": "VeloCloud Orchestrator", "vendor": "Arista" }, { "cvss": 9.8, "date": "2026-09-22", "id": "cve-2026-94127", "listed": "2026-09-22", "product": "BIG-IP APM", "vendor": "F5" }, { "cvss": 4.3, "date": "2026-09-23", "id": "cve-2026-96652", "listed": "2026-10-20", "product": "Media Server", "vendor": "Plex" }, { "cvss": 6.5, "date": "2026-09-23", "id": "cve-2026-96654", "listed": "2026-10-20", "product": "Media Server", "vendor": "Plex" }, { "cvss": 4.3, "date": "2026-09-23", "id": "cve-2026-96655", "listed": "2026-10-20", "product": "Media Server", "vendor": "Plex" }, { "cvss": 7.2, "date": "2026-09-23", "id": "cve-2026-96656", "listed": "2026-10-20", "product": "Media Server", "vendor": "Plex" }, { "cvss": 9.5, "date": "2026-09-27", "id": "cve-2026-88771", "listed": "2026-09-27", "product": "NetScaler", "vendor": "Citrix" }, { "cvss": 9.5, "date": "2026-09-27", "id": "cve-2026-88772", "listed": "2026-09-27", "product": "NetScaler", "vendor": "Citrix" }, { "cvss": 8.8, "date": "2026-09-28", "id": "cve-2026-86950", "listed": "2026-09-29", "product": "Multiple Products", "vendor": "Apple" }, { "cvss": 8.7, "date": "2026-09-30", "id": "cve-2026-102489", "listed": "2026-10-02", "product": "Zammad", "vendor": "Zammad GmbH" }, { "cvss": 8.5, "date": "2026-09-30", "id": "cve-2026-102490", "listed": "2026-10-02", "product": "Zammad", "vendor": "Zammad GmbH" }, { "cvss": 9.8, "date": "2026-09-30", "id": "cve-2026-76504", "listed": "2026-09-30", "product": "Catalyst SD-WAN Manager", "vendor": "Cisco" } ], "year": "2026" }, { "batches": [ { "day": 13, "filer": "microsoft", "published": 1407 }, { "day": 20, "filer": "oracle", "published": 1076 }, { "day": 18, "filer": "Linux", "published": 435 } ], "busiest": { "day": 13, "published": 2291 }, "critical": 1173, "daysAbove": 24, "daysCovered": 24, "daysInMonth": 31, "expected": 3115, "kinds": { "ai software": 388, "browsers": 752, "devices & routers": 197, "enterprise vendors": 4371, "industrial": 147, "linux kernel": 923, "open-source packages": 3882, "other": 518, "small web apps": 511, "unknown": 163, "wordpress": 1749 }, "label": "october 2026", "month": "10", "noLoginCritical": 832, "paintedAt": "2026-10-24", "published": 13601, "running": true, "scored": 12638, "slug": "2026-10", "usedInAttacks": [ { "cvss": 9.8, "date": "2026-10-01", "id": "cve-2026-104286", "listed": "2026-10-01", "product": "FortiMail", "vendor": "Fortinet" }, { "cvss": 7.3, "date": "2026-10-04", "id": "cve-2026-105133", "listed": "2026-10-14", "product": "AhsayCBS", "vendor": "Ahsay" }, { "cvss": 10, "date": "2026-10-04", "id": "cve-2026-105134", "listed": "2026-10-14", "product": "AhsayCBS", "vendor": "Ahsay" }, { "cvss": 8.7, "date": "2026-10-04", "id": "cve-2026-88779", "listed": "2026-10-04", "product": "NetScaler", "vendor": "Citrix" }, { "cvss": 9.3, "date": "2026-10-05", "id": "cve-2026-21589", "listed": "2026-10-15", "product": "Multiple Products", "vendor": "Atlassian" }, { "cvss": 8.6, "date": "2026-10-13", "id": "cve-2026-104935", "listed": "2026-10-13", "product": "Connect Secure", "vendor": "Ivanti" }, { "cvss": 8.8, "date": "2026-10-13", "id": "cve-2026-96951", "listed": "2026-10-13", "product": "Windows", "vendor": "Microsoft" }, { "cvss": 8.6, "date": "2026-10-14", "id": "cve-2026-0322", "listed": "2026-10-14", "product": "PAN-OS", "vendor": "Palo Alto Networks" }, { "cvss": 7.8, "date": "2026-10-14", "id": "cve-2026-106931", "listed": "2026-10-20", "product": "SiteGuard Server Edition", "vendor": "EG Secure Solutions" }, { "cvss": 9.2, "date": "2026-10-14", "id": "cve-2026-110447", "listed": "2026-10-23", "product": "Collabora Online – Built-in CODE Server", "vendor": "Collabora" }, { "cvss": 9.8, "date": "2026-10-14", "id": "cve-2026-76519", "listed": "2026-10-14", "product": "Secure Email Gateway", "vendor": "Cisco" }, { "cvss": 9.3, "date": "2026-10-15", "id": "cve-2026-102764", "listed": "2026-10-16", "product": "Remote Support", "vendor": "BeyondTrust" }, { "cvss": 6.7, "date": "2026-10-15", "id": "cve-2026-110936", "listed": "2026-10-20", "product": "Software Center", "vendor": "Siemens" }, { "cvss": 9.9, "date": "2026-10-22", "id": "cve-2026-114625", "listed": "2026-10-23", "product": "VeloCloud Orchestrator", "vendor": "Arista" } ], "year": "2026" } ]