CVE Tools
Sign in
month report

August 2025

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

August 2025 closed with 3,871 published CVEs — +28.0% YoY . 343 criticals, 15 added to CISA KEV. сообщество свободного программного обеспечения led volume, mostly via linux. Biggest breakout: debian at ×6.4 their 12-month median. Top weakness class — CWE-79 (570 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
3,871
— MoM+28.0% YoY
Severity mix
343 / 1,275
critical / high
KEV added
15
0 ransomware-linked
Nuclei coverage
16.7%
648 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
198.9
n=648
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
5
n=10
Detection gap

KEV pressure, no Nuclei coverage

August 2025 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in August 2025

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS89SQL Injection74Injection94Code Injection121CWE-12178OS Command Injection862Missing Authorization22Path Traversal476NULL Pointer Dereference284CWE-284сообщество свободного программного обеспечения5142259ооо «ред софт»4124441linux44ооо «русбитех-астра»4232microsoft131134microsoft corp131133ао «ивк»123maven241111adobe10111debian18go1217621pypi2152

Most discussed CVEs — August 2025

No CVE mentions in the news this month yet.

Breakout vendors

CVE count ≥3× their own 12-period median.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1сообщество свободного программного обеспечения—
    276 CVE10 critCVSS 6.3
    Nuclei 4PoC 26
    linux (187) · debian gnu/linux (85) · gpac (21)
  • 2ооо «ред софт»—
    238 CVE9 critCVSS 6.1
    PoC 24
    ред ос (238) · ред база данных (9)
  • 3linux—
    186 CVECVSS 6.1
    PoC 7
    linux (186) · linux kernel (186)
  • 4ооо «русбитех-астра»—
    168 CVE3 critCVSS 6.4
    PoC 19
    astra linux special edition (167) · astra linux common edition (30)
  • 5microsoft—
    124 CVE8 critCVSS 7.5
    PoC 5
    windows server 2025 (server core installation) (68) · windows server 2025 (68) · windows server 2022, 23h2 edition (server core installation) (63)
  • 6ао «ивк»—
    103 CVE3 critCVSS 6.1
    PoC 11
    альт сп 10 (84) · альт 8 сп (47)
  • 7maven—
    81 CVE10 critCVSS 6.3
    Nuclei 4PoC 5
    com.liferay.portal:release.portal.bom (20) · org.pytorch:executorch-android (5) · com.liferay.portal:release.dxp.bom (5)
  • 8adobe—
    79 CVE1 critCVSS 6.8
    KEV 1PoC 1
    adobe indesign (15) · indesign (14) · indesign desktop (14)
  • 9redhat—
    79 CVE2 critCVSS 6.0
    PoC 10
    red hat enterprise linux (62) · red hat enterprise linux 9 (8) · red hat enterprise linux 8 (7)
  • 10debian—
    77 CVE1 critCVSS 6.3
    ×6.4PoC 5
    debian linux (76) · devscripts (1)
  • 11go—
    75 CVE6 critCVSS 6.0
    PoC 3
    github.com/mattermost/mattermost-plugin-confluence (13) · github.com/mattermost/mattermost/server/v8 (9) · github.com/mattermost/mattermost-server (9)
  • 12pypi—
    75 CVE9 critCVSS 7.5
    PoC 9
    picklescan (29) · executorch (6) · apache-superset (4)
  • 13ао "нппкт"—
    75 CVE3 critCVSS 6.8
    PoC 13
    осон основа оnyx (75)
  • 14canonical—
    72 CVE1 critCVSS 6.4
    PoC 6
    ubuntu (72)
  • 15ао «сбертех»—
    72 CVECVSS 6.1
    PoC 6
    platform v sberlinux os server (69) · субд «platform v pangolin db» (3)
  • 16code-projects—
    54 CVECVSS 6.9
    PoC 54
    online medicine guide (12) · human resource integrated system (7) · simple grading system (6)
  • 17itsourcecode—
    53 CVECVSS 7.2
    PoC 53
    apartment management system (28) · online tour and travel management system (20) · sports management system (3)
  • 18huawei—
    52 CVECVSS 6.1
    ×3.7
    harmonyos (49) · emui (12) · enzoh-w5611t firmware (3)
  • 19google—
    51 CVE5 critCVSS 7.2
    PoC 1
    android (30) · chrome (16) · google chrome (16)
  • 20npm—
    51 CVE9 critCVSS 7.1
    Nuclei 5PoC 12
    @anthropic-ai/claude-code (3) · next (3) · flowise (3)
  • 21linksys—
    50 CVECVSS 8.1
    NEWPoC 47
    re6300 firmware (43) · re6350 (43) · re6350 firmware (43)
  • 22cisco—
    48 CVE1 critCVSS 6.5
    PoC 48
    cisco firepower threat defense software (22) · cisco adaptive security appliance (asa) software (18) · firepower threat defense (17)
  • 23portabilis—
    48 CVECVSS 4.0
    NEWPoC 45
    i-educar (36) · i-diario (12)
  • 24tenda—
    47 CVE4 critCVSS 7.7
    PoC 32
    ac6 firmware (12) · ac20 firmware (9) · ac20 (9)
  • 25liferay—
    46 CVE2 critCVSS 5.8
    Nuclei 1
    dxp (46) · digital experience platform (45) · portal (45)
  • 26nvidia—
    43 CVE3 critCVSS 6.5
    ×3.9
    triton inference server (17) · nvidia triton inference server (17) · gpu display drivers (12)
  • 27qnap—
    43 CVE1 critCVSS 6.8
    qsync central (14) · file station 5 (12) · file station (12)
  • 28packagist—
    39 CVE4 critCVSS 6.7
    Nuclei 3PoC 15
    magento/community-edition (6) · magento/project-community-edition (6) · unopim/unopim (5)
  • 29linksys holdings, inc.—
    37 CVECVSS 8.0
    NEWPoC 34
    re6300 (31) · re7000 (31) · re6250 (31)
  • 30ibm—
    35 CVE1 critCVSS 6.2
    websphere application server (5) · concert (5) · concert software (5)
  • 31shenzhen tenda technology co., ltd.—
    32 CVE3 critCVSS 7.9
    PoC 27
    tenda ac20 (9) · tenda ch22 (4) · tenda ac6 v2.0 (4)
  • 32novell inc.—
    31 CVECVSS 6.1
    PoC 7
    suse linux enterprise server (27) · suse linux enterprise server for sap applications (27) · suse linux enterprise desktop (27)
  • 33dlink—
    30 CVE7 critCVSS 8.0
    PoC 15
    dsl-7740c (9) · dsl-7740c firmware (9) · dir-619l firmware (4)
  • 34siemens—
    30 CVE1 critCVSS 6.9
    smartclient modules opcenter ql home (sc) (7) · soa audit (7) · soa cockpit (7)
  • 35jvckenwood—
    29 CVECVSS 6.9
    NEW
    dmx958xr firmware (29)
  • 36kenwood—
    29 CVECVSS 6.9
    NEW
    dmx958xr (29)
  • 37admerc—
    28 CVECVSS 7.3
    NEWPoC 28
    apartment management system (28)
  • 38dell—
    28 CVE2 critCVSS 6.9
    Nuclei 1PoC 1
    data domain operating system (5) · powerprotect data domain feature release (5) · powerprotect data domain lts 2023 (5)
  • 39sourcecodester—
    28 CVECVSS 7.1
    PoC 26
    covid 19 testing management system (7) · online bank management system (5) · advanced school management system (3)
  • 40anisha—
    24 CVECVSS 7.3
    NEWPoC 24
    online medicine guide (12) · wazifa system (4) · job diary (3)
  • 41libbiosig project—
    24 CVE22 critCVSS 9.7
    PoC 9
    libbiosig (24)
  • 42qualcomm—
    24 CVECVSS 7.1
    wcd9380 firmware (21) · fastconnect 6900 firmware (21) · fastconnect 7800 firmware (20)
  • 43qualcomm, inc.—
    24 CVECVSS 7.3
    snapdragon (24)
  • 44the biosig project—
    24 CVE22 critCVSS 9.7
    PoC 9
    libbiosig (24)
  • 45campcodes—
    23 CVECVSS 7.1
    Nuclei 1PoC 20
    online loan management system (7) · online water billing system (4) · online flight booking management system (3)
  • 46intel—
    22 CVECVSS 6.4
    intel core ultra processor (series 1) (4) · intel core ultra processors (series 2) (4) · 4th gen intel xeon scalable processors (4)
  • 47mattermost—
    22 CVECVSS 5.3
    confluence (13) · mattermost confluence plugin (13) · mattermost (9)
  • 48apache software foundation—
    21 CVE3 critCVSS 7.1
    PoC 2
    apache superset (4) · superset (4) · apache zeppelin (3)
  • 49mozilla—
    21 CVE6 critCVSS 7.8
    firefox (19) · thunderbird (7) · firefox esr (7)
  • 50apache—
    20 CVE3 critCVSS 7.2
    PoC 2
    superset (4) · zeppelin (3) · tomcat (2)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79570—
2CWE-89323—
3CWE-74216—
4CWE-94190—
5CWE-121151—
6CWE-78151—
7CWE-862109—
8CWE-22107—
9CWE-476104—
10CWE-284100—
11CWE-41698—
12CWE-43495—
13CWE-11993—
14CWE-35288—
15CWE-7782—
16CWE-12580—
17CWE-20076—
18CWE-78768—
19CWE-12266—
20CWE-2064—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Web & CMS Plugins882 CVE
    77 crit1 KEV429 vendorsCVSS 7.4
    dxp (46) · digital experience platform (45) · portal (45)
  • Enterprise Software617 CVE
    57 crit6 KEV144 vendorsCVSS 7.3
    apartment management system (28) · directory manager (6) · easy hosting control panel (6)
  • Operating Systems584 CVE
    139 crit36 vendorsCVSS 7.5
    linux (373) · ред ос (238) · linux kernel (186)
  • OSS Libraries496 CVE
    110 crit3 KEV107 vendorsCVSS 7.8
    libbiosig (48) · imagemagick (14) · gstreamer (10)
  • Networking Infrastructure318 CVE
    104 crit10 KEV77 vendorsCVSS 7.8
    re6250 (74) · re6300 (74) · re6350 (74)
  • Hardware Firmware240 CVE
    84 crit51 vendorsCVSS 8.5
    dmx958xr (29) · dmx958xr firmware (29) · qsync central (28)
  • Consumer Software185 CVE
    32 crit5 KEV68 vendorsCVSS 7.8
    adobe indesign (15) · indesign (14) · indesign desktop (14)
  • Mobile Apps129 CVE
    14 crit7 KEV12 vendorsCVSS 7.5
    harmonyos (49) · android (34) · chrome (16)
  • ICS / OT / IoT126 CVE
    43 crit49 vendorsCVSS 7.6
    scada-lts (23) · advanced reporting and dashboards module (5) · ecostruxure power monitoring expert (5)
  • Cloud & SaaS113 CVE
    27 crit4 KEV61 vendorsCVSS 8.4
    covid19 testing management system (7) · n8n (4) · cursor (2)
  • Security Products107 CVE
    16 crit3 KEV46 vendorsCVSS 8.3
    openbao (7) · unified pam (4) · wl20 biometric attendance system (4)
  • DevTools & CI68 CVE
    3 crit25 vendorsCVSS 7.6
    netwide assember (5) · netwide assembler (5) · tcpreplay (5)
  • Communications53 CVE
    11 crit9 KEV33 vendorsCVSS 7.8
    confluence (13) · mattermost confluence plugin (13) · mattermost confluence (11)
  • AI / ML44 CVE
    22 crit28 vendorsCVSS 9.2
    cursor (6) · agent-zero (2) · flowise (2)
  • Databases31 CVE
    8 crit13 vendorsCVSS 7.7
    postgres pro certified (3) · postgres pro enterprise (3) · postgresql (3)
  • Unclassified326 CVE
    48 crit189 vendorsCVSS 7.1
    online medicine guide (12) · ss1 (8) · alpine ilx-507 (7)
Weakness × Sector

Which weaknesses hit which solution categories in August 2025

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS89SQL Injection74Injection94Code Injection121CWE-12178OS Command Injection862Missing Authorization22Path Traversal476NULL Pointer Dereference284CWE-284Web & CMS Plugins3081541074736752529Operating Systems632101037675Enterprise Software15914510582614717112OSS Libraries49157142791218254Networking Infrastructure106365412547Hardware Firmware526131144111176Consumer Software13943192613ICS / OT / IoT221581321116111Cloud & SaaS1110954477Security Products633291723