CVE Tools
Sign in
month report

September 2025

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

September 2025 closed with 4,664 published CVEs. 278 criticals, 16 added to CISA KEV (1 ransomware-linked). linux led volume, mostly via linux kernel. Top weakness class — CWE-79 (696 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
4,664
— MoM— YoY
Severity mix
278 / 1,422
critical / high
KEV added
16
1 ransomware-linked
Nuclei coverage
18.5%
862 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
165.1
n=862
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
16
n=14
Detection gap

KEV pressure, no Nuclei coverage

September 2025 · vendors with active exploitation listed by CISA but no public detection template.

Weakness × Vendor

What's spreading where in September 2025

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS89SQL Injection74Injection862Missing Authorization476NULL Pointer Dereference352CSRF401CWE-401416Use After Free94Code Injection284CWE-284linux14112479сообщество свободного программного обеспечения3212697673red hat inc.646635ооо «русбитех-астра»1143382711canonical ltd.1455521ао «сбертех»563522ао «ивк»1258191google2111103ооо «ред софт»22252101debian25513microsoft corp2918npm1112163

Most discussed CVEs — September 2025

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1linux—
    737 CVECVSS 6.1
    PoC 3
    linux kernel (737) · linux (737)
  • 2сообщество свободного программного обеспечения—
    540 CVE9 critCVSS 6.2
    Nuclei 2PoC 13
    linux (484) · debian gnu/linux (292) · pytorch (12)
  • 3ооо «русбитех-астра»—
    288 CVE6 critCVSS 6.5
    KEV 2PoC 10
    astra linux special edition (280) · astra linux common edition (42) · parsec (31)
  • 4redhat—
    267 CVE4 critCVSS 6.6
    Nuclei 1PoC 2
    red hat enterprise linux (251) · red hat enterprise linux 9 (13) · red hat enterprise linux 10 (13)
  • 5canonical—
    198 CVE1 critCVSS 6.2
    PoC 2
    ubuntu (198)
  • 6google—
    186 CVE9 critCVSS 7.0
    KEV 4PoC 3
    android (166) · google chrome (13) · chrome (12)
  • 7ао «ивк»—
    174 CVE2 critCVSS 6.4
    KEV 1PoC 5
    альт сп 10 (174) · альт 8 сп (57)
  • 8debian—
    139 CVECVSS 6.4
    KEV 1PoC 3
    debian linux (139)
  • 9ооо «ред софт»—
    133 CVE7 critCVSS 6.1
    KEV 2Nuclei 1PoC 15
    ред ос (133) · ред база данных (4)
  • 10ао «сбертех»—
    126 CVECVSS 6.2
    KEV 1PoC 7
    platform v sberlinux os server (126)
  • 11microsoft—
    109 CVE5 critCVSS 7.1
    KEV 1PoC 6
    windows server 2025 (59) · windows server 2025 (server core installation) (59) · windows server 2022, 23h2 edition (server core installation) (57)
  • 12npm—
    100 CVE12 critCVSS 7.5
    Nuclei 5PoC 33
    flowise (6) · @anthropic-ai/claude-code (4) · express-xss-sanitizer (2)
  • 13maven—
    90 CVE6 critCVSS 6.1
    Nuclei 4PoC 1
    com.liferay.portal:release.portal.bom (8) · com.liferay.portal:com.liferay.portal.impl (5) · org.jenkins-ci.main:jenkins-core (3)
  • 14apple—
    83 CVE6 critCVSS 6.4
    macos (75) · ios and ipados (29) · iphone os (28)
  • 15campcodes—
    72 CVECVSS 6.8
    PoC 72
    online learning management system (18) · grocery sales and inventory system (15) · computer sales and inventory system (10)
  • 16sourcecodester—
    69 CVECVSS 6.6
    PoC 67
    pet grooming management software (20) · online student file management system (8) · online exam form submission (7)
  • 17pypi—
    57 CVE4 critCVSS 6.9
    Nuclei 2PoC 10
    picklescan (6) · ethyca-fides (4) · ml-logger (3)
  • 18go—
    55 CVE11 critCVSS 6.8
    Nuclei 4PoC 8
    d7y.io/dragonfly/v2 (11) · github.com/dragonflyoss/dragonfly (11) · github.com/mattermost/mattermost/server/v8 (6)
  • 19itsourcecode—
    55 CVECVSS 6.4
    PoC 54
    pos point of sale system (9) · student information management system (8) · open source job portal (7)
  • 20liferay—
    50 CVECVSS 5.9
    dxp (50) · digital experience platform (49) · portal (49)
  • 21phpgurukul—
    49 CVE9 critCVSS 7.1
    PoC 34
    online fire reporting system (9) · beauty parlour management system (9) · small crm (5)
  • 22ао "нппкт"—
    47 CVE6 critCVSS 7.3
    KEV 1PoC 4
    осон основа оnyx (47)
  • 23tenda—
    45 CVE2 critCVSS 7.4
    PoC 22
    g3 firmware (13) · f3 firmware (5) · ac18 firmware (4)
  • 24ibm—
    44 CVECVSS 5.7
    concert (7) · concert software (7) · watsonx.data (4)
  • 25vasion—
    41 CVE19 critCVSS 8.5
    NEWPoC 19
    virtual appliance application (41) · virtual appliance host (41) · print virtual appliance host (41)
  • 26samsung mobile—
    40 CVECVSS 5.7
    KEV 2
    samsung mobile devices (28) · s assistant (3) · samsung calendar (1)
  • 27shenzhen tenda technology co., ltd.—
    40 CVE2 critCVSS 7.5
    PoC 19
    tenda g3 (13) · tenda f3 (5) · tenda ac9 (3)
  • 28samsung—
    39 CVECVSS 6.0
    KEV 2
    android (26) · sassistant (3) · notes (2)
  • 29nvidia—
    36 CVE1 critCVSS 5.7
    nvidia cuda toolkit (12) · cuda toolkit (10) · triton inference server (5)
  • 30code-projects—
    34 CVECVSS 6.5
    PoC 32
    hostel management system (8) · simple scheduling system (6) · online bidding system (6)
  • 31apprain—
    32 CVE3 critCVSS 5.8
    NEW
    apprain (32) · apprain cmf (32)
  • 32cisco—
    32 CVE2 critCVSS 5.9
    KEV 3Nuclei 1PoC 32
    cisco ios xe software (14) · cisco ios xe (5) · ios (5)
  • 33fabian—
    31 CVECVSS 6.7
    PoC 29
    online bidding system (6) · simple scheduling system (6) · online hotel reservation system (5)
  • 34ashlar—
    30 CVECVSS 7.8
    cobalt (22) · graphite (8)
  • 35ashlar-vellum—
    30 CVECVSS 7.8
    cobalt (22) · graphite (8)
  • 36amd—
    28 CVECVSS 5.7
    amd ryzen™ 7030 series mobile processors with radeon™ graphics (12) · amd ryzen™ 5000 series mobile processors with radeon™ graphics (12) · amd ryzen™ 4000 series mobile processors with radeon™ graphics (11)
  • 37packagist—
    28 CVE1 critCVSS 6.0
    KEV 1Nuclei 2PoC 4
    mautic/core (4) · typo3/cms-core (3) · typo3/cms-backend (3)
  • 38angeljudesuarez—
    27 CVECVSS 6.7
    PoC 26
    hostel management system (9) · open source job portal (7) · sports management system (6)
  • 39dlink—
    27 CVECVSS 6.8
    PoC 22
    dir-823x firmware (12) · dir-823x (12) · dir-852 firmware (4)
  • 40portabilis—
    26 CVECVSS 5.2
    NEWPoC 24
    i-educar (26)
  • 41ibm corp.—
    25 CVECVSS 5.8
    ibm security verify information queue (3) · diamondback tape (2) · ibm license metric tool (2)
  • 42adobe—
    24 CVE2 critCVSS 6.8
    KEV 1Nuclei 3
    experience manager (7) · adobe experience manager (7) · after effects (3)
  • 43d-link—
    24 CVECVSS 6.7
    PoC 19
    dir-823x (11) · dir-852 (4) · di-8200g (2)
  • 44linuxfoundation—
    24 CVE2 critCVSS 6.4
    pytorch (12) · dragonfly (11) · yocto (1)
  • 45qualcomm—
    24 CVE2 critCVSS 8.2
    wsa8835 firmware (18) · wsa8830 firmware (18) · fastconnect 7800 firmware (17)
  • 46qualcomm, inc.—
    23 CVE2 critCVSS 7.7
    snapdragon (23)
  • 47akinsoft—
    21 CVE1 critCVSS 6.4
    NEW
    myrezzta (5) · limondesk (4) · octocloud (4)
  • 48mayurik—
    21 CVECVSS 6.4
    PoC 20
    pet grooming management software (21)
  • 49sap_se—
    21 CVE3 critCVSS 6.1
    sap hcm (my timesheet fiori 2.0 application) (3) · sap bi platform (1) · sap business one (sld) (1)
  • 50wavlink—
    19 CVECVSS 6.4
    NEWPoC 16
    wl-nu516u1 firmware (8) · wl-wn578w2 (7) · wl-wn578w2 firmware (7)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79696—
2CWE-89358—
3CWE-74292—
4CWE-862205—
5CWE-476179—
6CWE-352160—
7CWE-401155—
8CWE-416137—
9CWE-94134—
10CWE-284121—
11CWE-125119—
12CWE-78796—
13CWE-7789—
14CWE-7883—
15CWE-2277—
16CWE-43475—
17CWE-2071—
18CWE-91871—
19CWE-20067—
20CWE-26663—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems1,134 CVE
    85 crit16 KEV32 vendorsCVSS 8.8
    linux (1221) · linux kernel (737) · debian gnu/linux (292)
  • Web & CMS Plugins1,043 CVE
    77 crit10 KEV511 vendorsCVSS 6.7
    dxp (50) · digital experience platform (49) · portal (49)
  • Enterprise Software577 CVE
    150 crit7 KEV149 vendorsCVSS 7.7
    print virtual appliance host (41) · virtual appliance application (41) · virtual appliance host (41)
  • OSS Libraries487 CVE
    55 crit2 KEV113 vendorsCVSS 7.5
    flowise (6) · @anthropic-ai/claude-code (4) · @lobehub/chat (2)
  • Mobile Apps314 CVE
    79 crit9 KEV9 vendorsCVSS 6.8
    android (258) · google chrome (13) · chrome (12)
  • Networking Infrastructure236 CVE
    68 crit20 KEV58 vendorsCVSS 8.6
    cisco ios xe software (14) · wl-wn578w2 (14) · g3 firmware (13)
  • Hardware Firmware173 CVE
    695 crit42 vendorsCVSS 8.2
    nvidia cuda toolkit (24) · amd ryzen™ 5000 series mobile processors with radeon™ graphics (12) · amd ryzen™ 7030 series mobile processors with radeon™ graphics (12)
  • ICS / OT / IoT172 CVE
    204 crit59 vendorsCVSS 9.6
    e3 supervisory controller firmware (9) · плк fastwel cpm810-03 (9) · плк fastwel сpm723-01 (9)
  • Consumer Software140 CVE
    19 crit4 KEV45 vendorsCVSS 9.8
    cobalt (44) · graphite (16) · pdf editor (16)
  • Cloud & SaaS135 CVE
    22 crit19 KEV68 vendorsCVSS 7.9
    mautic (4) · remote clinic (4) · n8n (3)
  • Security Products86 CVE
    9 crit51 vendorsCVSS 8.2
    avreg (4) · fides (4) · cloud saml sso – single sign on login (2)
  • AI / ML79 CVE
    22 crit42 vendorsCVSS 7.9
    pytorch (12) · dragonfly (11) · transformers (5)
  • DevTools & CI76 CVE
    7 crit31 vendorsCVSS 7.5
    indoor connect 8855 (5) · indoor connect 8855 firmware (5) · swagger petstore (3)
  • Communications51 CVE
    2 KEV33 vendorsCVSS 7.7
    mattermost (8) · mattermost server (6) · danny-avila/librechat (3)
  • Databases42 CVE
    4 crit21 vendorsCVSS 9.8
    ibm security verify information queue (3) · diamondback tape (2) · ibm license metric tool (2)
  • Unclassified374 CVE
    43 crit3 KEV241 vendorsCVSS 6.3
    platform (18) · мсвсфера (14) · flagforge (12)
Weakness × Sector

Which weaknesses hit which solution categories in September 2025

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS89SQL Injection74Injection862Missing Authorization476NULL Pointer Dereference352CSRF401CWE-401416Use After Free94Code Injection284CWE-284Operating Systems35221591154119336Web & CMS Plugins42422818211710016920Enterprise Software10815312316873826OSS Libraries711031214427186Networking Infrastructure17129342211ICS / OT / IoT101333284Consumer Software19543141545Hardware Firmware52131847Cloud & SaaS29628171155Security Products19321216