CVE Tools
Sign in
month report

October 2025

Data as of Jun 11, 2026, 06:05 UTCSnapshot v1 Sources CVEList V5+NVD+GHSA+CSAF+FSTEC BDU+CISA KEV+EPSS+Nuclei templates Methodology →

October 2025 closed with 4,544 published CVEs. 288 criticals, 31 added to CISA KEV (2 ransomware-linked). linux led volume, mostly via linux. Top weakness class — CWE-79 (721 CVE). 10 vendors cracked the top-100 for the first time.

Print view
Total CVEs
4,544
— MoM— YoY
Severity mix
288 / 1,462
critical / high
KEV added
31
2 ransomware-linked
Nuclei coverage
15.8%
717 CVEs with templates

Time to exploit

How fast the community ships detection after a CVE drops.

Days → Nuclei (median)
135.3
n=717
Within 7 days
0.0%
Within 30 days
0.0%
Days → KEV (median)
8
n=9
Detection gap

KEV pressure, no Nuclei coverage

October 2025 · vendors with active exploitation listed by CISA but no public detection template.

  • KEV 1f544 CVE
Weakness × Vendor

What's spreading where in October 2025

Cells shaded by share of vendor's hottest weakness. Click any cell to open the CWE history.

79XSS89SQL Injection862Missing Authorization74Injection476NULL Pointer Dereference284CWE-284416Use After Free121CWE-121200Information Exposure94Code Injectionlinux7642сообщество свободного программного обеспечения51633511red hat inc.3323111canonical ltd.2013ооо «русбитех-астра»1111111microsoft1211550114microsoft corp111250114ооо «ред софт»11104514ао «сбертех»136maven24310nagios516311oracle2218

Most discussed CVEs — October 2025

No CVE mentions in the news this month yet.

First time in top-100

Vendors never in top-100 in the prior 24 periods.

Top vendors

Ranked by distinct CVE count this period.

  • 1linux—
    651 CVE1 critCVSS 6.0
    PoC 3
    linux (651) · linux kernel (450)
  • 2сообщество свободного программного обеспечения—
    541 CVE6 critCVSS 6.1
    Nuclei 1PoC 15
    linux (482) · debian gnu/linux (308) · freescout (22)
  • 3redhat—
    337 CVECVSS 6.3
    Nuclei 1PoC 12
    red hat enterprise linux (322) · red hat enterprise linux 9 (10) · red hat enterprise linux 10 (10)
  • 4canonical—
    201 CVECVSS 6.1
    PoC 8
    ubuntu (193) · lxd (8)
  • 5ооо «русбитех-астра»—
    190 CVE8 critCVSS 6.4
    Nuclei 1PoC 24
    astra linux special edition (190) · astra linux common edition (12)
  • 6microsoft—
    183 CVE11 critCVSS 7.0
    KEV 3Nuclei 1PoC 3
    windows server 2025 (127) · windows server 2025 (server core installation) (127) · windows 11 24h2 (121)
  • 7maven—
    103 CVE5 critCVSS 6.3
    Nuclei 2PoC 5
    com.liferay.portal:release.portal.bom (12) · com.liferay.portal:com.liferay.portal.impl (5) · com.liferay:com.liferay.change.tracking.web (4)
  • 8ооо «ред софт»—
    100 CVE7 critCVSS 6.7
    Nuclei 2PoC 26
    ред ос (100)
  • 9nagios—
    99 CVE9 critCVSS 6.7
    NEWPoC 4
    nagios xi (74) · xi (74) · log server (15)
  • 10oracle—
    78 CVE5 critCVSS 6.1
    KEV 3Nuclei 3PoC 3
    mysql server (9) · oracle vm virtualbox (9) · zfs storage appliance kit (9)
  • 11ао «сбертех»—
    78 CVE1 critCVSS 6.0
    PoC 7
    platform v sberlinux os server (78)
  • 12code-projects—
    76 CVE1 critCVSS 6.0
    PoC 76
    simple food ordering system (11) · e-commerce website (10) · client details system (7)
  • 13nagios enterprises llc—
    73 CVE10 critCVSS 6.9
    PoC 2
    nagios xi (50) · nagios log server (15) · nagios fusion (5)
  • 14pypi—
    70 CVE10 critCVSS 7.0
    PoC 9
    keras (4) · bbot (4) · fastmcp (3)
  • 15packagist—
    64 CVE1 critCVSS 6.2
    Nuclei 1PoC 13
    moodle/moodle (7) · bagisto/bagisto (6) · magento/project-community-edition (5)
  • 16ао «ивк»—
    64 CVE5 critCVSS 6.5
    Nuclei 1PoC 7
    альт сп 10 (61) · альт 8 сп (19) · ивк кольчуга-к (лкнв.466217.002) (1)
  • 17fabian—
    63 CVE1 critCVSS 5.9
    PoC 63
    simple food ordering system (11) · e-commerce website (10) · client details system (8)
  • 18go—
    60 CVE4 critCVSS 6.9
    PoC 8
    github.com/mattermost/mattermost/server/v8 (6) · github.com/canonical/lxd (6) · github.com/mattermost/mattermost-server (6)
  • 19npm—
    55 CVE4 critCVSS 7.3
    Nuclei 1PoC 9
    flowise (11) · @strapi/core (3) · @anthropic-ai/claude-code (2)
  • 20tenda—
    55 CVE2 critCVSS 8.5
    PoC 46
    ch22 firmware (13) · ch22 (13) · ac18 firmware (9)
  • 21dlink—
    45 CVE4 critCVSS 7.4
    PoC 37
    dir-600l firmware (24) · dir-600l (24) · nuclias connect (4)
  • 22shenzhen tenda technology co., ltd.—
    45 CVE2 critCVSS 8.4
    PoC 36
    tenda ch22 (13) · tenda ac18 (9) · ac6 (8)
  • 23f5—
    44 CVECVSS 7.1
    KEV 1
    big-ip (34) · big-ip application security manager (24) · big-ip advanced web application firewall (23)
  • 24qnap—
    44 CVECVSS 5.7
    quts hero (26) · qts (26) · qsync central (15)
  • 25andsoft—
    40 CVE9 critCVSS 7.0
    NEW
    e-tms (40)
  • 26ibm—
    40 CVE3 critCVSS 6.5
    transformation extender advanced (5) · db2 high performance unload (4) · engineering requirements management doors next (4)
  • 27juniper—
    40 CVE1 critCVSS 6.4
    PoC 40
    junos space (26) · junos os evolved (7) · junos (7)
  • 28juniper networks—
    40 CVE1 critCVSS 6.6
    PoC 40
    junos space (26) · junos os (8) · junos os evolved (7)
  • 29liferay—
    40 CVECVSS 5.6
    PoC 2
    digital experience platform (40) · dxp (40) · liferay portal (39)
  • 30sourcecodester—
    38 CVECVSS 6.4
    PoC 38
    hotel and lodge management system (15) · best salon management system (4) · point of sales (3)
  • 31adobe—
    36 CVE1 critCVSS 7.2
    commerce (5) · adobe commerce (5) · commerce b2b (5)
  • 32azure-access—
    34 CVE20 critCVSS 8.4
    NEW
    blu-ic2 firmware (34) · blu-ic4 firmware (34)
  • 33azure access technology—
    34 CVE20 critCVSS 8.4
    NEW
    blu-ic4 (34) · blu-ic2 (34)
  • 34dell—
    34 CVE1 critCVSS 6.0
    data domain operating system (20) · powerprotect data domain with data domain operating system (dd os) lts2024 (18) · powerprotect data domain with data domain operating system (dd os) of feature release (18)
  • 35ао "нппкт"—
    33 CVE5 critCVSS 7.6
    Nuclei 4PoC 12
    осон основа оnyx (33)
  • 36ооо "вебсофт девелопмент"—
    33 CVE9 critCVSS 6.7
    NEW
    websoft hcm (33)
  • 37fortinet—
    32 CVECVSS 5.7
    fortios (16) · fortiproxy (13) · fortipam (6)
  • 38the wikimedia foundation—
    30 CVE
    NEW
    mediawiki - growthexperiments extension (2) · mediawiki - imagerating extension (1) · mediawiki - languageselector extension (1)
  • 39samsung—
    28 CVECVSS 6.4
    android (11) · notes (6) · exynos w930 firmware (4)
  • 40fortinet inc.—
    26 CVECVSS 6.0
    fortios (13) · fortiproxy (10) · fortidlp (4)
  • 41samsung mobile—
    26 CVECVSS 5.2
    samsung mobile devices (12) · samsung notes (6) · smart switch (4)
  • 42hcltech—
    24 CVECVSS 5.1
    aion (7) · unica (5) · bigfix modern client management (4)
  • 43totolink—
    24 CVE2 critCVSS 8.2
    PoC 15
    lr350 firmware (7) · lr350 (7) · a3300r firmware (6)
  • 44unknown—
    24 CVE3 critCVSS 6.2
    Nuclei 24PoC 15
    ns maintenance mode for wp (2) · wp private content plus (1) · admin and customer messages after order for woocommerce: orderconvo (1)
  • 45eclipse—
    23 CVE4 critCVSS 6.8
    NEWPoC 4
    threadx netx duo (12) · threadx usbx (5) · threadx (3)
  • 46eclipse foundation—
    23 CVE4 critCVSS 6.8
    NEWPoC 4
    netx duo (11) · usbx (4) · threadx (3)
  • 47ibm corp.—
    23 CVE3 critCVSS 6.7
    transformation extender advanced (5) · ibm db2 high performance unload (4) · ibm security verify access (3)
  • 48huawei—
    21 CVECVSS 5.4
    harmonyos (21)
  • 49apache—
    20 CVE3 critCVSS 7.2
    PoC 1
    tomcat (3) · airflow (3) · kylin (3)
  • 50apache software foundation—
    20 CVE3 critCVSS 7.3
    PoC 1
    apache kylin (3) · tomcat (3) · apache airflow (3)

Top weaknesses

CWE classes by distinct CVE count.

1CWE-79721—
2CWE-89309—
3CWE-862175—
4CWE-74173—
5CWE-476144—
6CWE-284143—
7CWE-416132—
8CWE-121113—
9CWE-200107—
10CWE-94102—
11CWE-7899—
12CWE-35298—
13CWE-2296—
14CWE-40191—
15CWE-11989—
16CWE-12589—
17CWE-78789—
18CWE-43472—
19CWE-50270—
20CWE-40060—

Sectors

Solution categories ranked by distinct CVE count this period.

  • Operating Systems1,116 CVE
    137 crit152 KEV29 vendorsCVSS 7.0
    linux (1133) · linux kernel (450) · red hat enterprise linux (322)
  • Web & CMS Plugins939 CVE
    63 crit440 vendorsCVSS 7.1
    digital experience platform (40) · dxp (40) · liferay portal (39)
  • Enterprise Software691 CVE
    103 crit1 KEV151 vendorsCVSS 7.2
    nagios xi (124) · xi (74) · e-tms (40)
  • OSS Libraries543 CVE
    59 crit93 vendorsCVSS 7.2
    quickjs (14) · ffmpeg (13) · netx duo (11)
  • Networking Infrastructure330 CVE
    127 crit61 vendorsCVSS 8.0
    junos space (53) · dir-600l (24) · dir-600l firmware (24)
  • Security Products235 CVE
    96 crit23 KEV58 vendorsCVSS 8.8
    blu-ic2 (34) · blu-ic2 firmware (34) · blu-ic4 (34)
  • ICS / OT / IoT204 CVE
    54 crit1 KEV59 vendorsCVSS 7.3
    monitouch v-sft (9) · productivity 1000 p1-540 cpu (9) · productivity 1000 p1-550 cpu (9)
  • Hardware Firmware187 CVE
    27 vendorsCVSS 7.5
    qts (52) · quts hero (50) · qsync central (34)
  • Databases127 CVE
    25 crit10 KEV17 vendorsCVSS 7.6
    mysql server (27) · vm virtualbox (18) · peoplesoft enterprise peopletools (16)
  • Consumer Software104 CVE
    32 crit29 vendorsCVSS 8.3
    substance 3d stager (10) · dimension (8) · gimp (7)
  • DevTools & CI88 CVE
    11 crit25 vendorsCVSS 7.7
    threadx netx duo (12) · threadx usbx (5) · radare2 (4)
  • Cloud & SaaS78 CVE
    64 crit5 KEV47 vendorsCVSS 7.9
    learnhouse (4) · whale (3) · n8n (2)
  • Mobile Apps73 CVE
    1 crit7 vendorsCVSS 6.2
    harmonyos (21) · android (14) · android studio (10)
  • AI / ML57 CVE
    11 crit42 vendorsCVSS 9.8
    cursor (6) · flowise (6) · agentflow (2)
  • Communications54 CVE
    31 vendorsCVSS 5.8
    mattermost (12) · mastodon (8) · mattermost server (6)
  • Unclassified302 CVE
    26 crit182 vendorsCVSS 6.6
    sonoma d12 firmware (12) · data leakage prevention system (10) · data leakage prevention system 天锐数据泄露防护系统 (10)
Weakness × Sector

Which weaknesses hit which solution categories in October 2025

Cells shaded by share of the sector's hottest weakness. Click a row to open the sector history.

79XSS89SQL Injection862Missing Authorization74Injection476NULL Pointer Dereference284CWE-284416Use After Free121CWE-121200Information Exposure94Code InjectionOperating Systems33891910716241Web & CMS Plugins3211721081201331644Enterprise Software1951171276233641931OSS Libraries7412231158159109Networking Infrastructure5712718918031ICS / OT / IoT168151735114Security Products13167681381Hardware Firmware34130143104Consumer Software1410291421342Cloud & SaaS11184123122