March 2026

March 2026 closed with 6,821 published CVEs. 685 criticals, 26 added to CISA KEV (1 ransomware-linked). npm led volume, mostly via openclaw. Top weakness class — CWE-79 (765 CVE). 10 vendors cracked the top-100 for the first time.

Time to exploit

How fast the community ships detection after a CVE drops.

• KEV 2google178 CVE
• KEV 2microsoft144 CVE

Top vendors

Ranked by distinct CVE count this period.

• 1npm—
  562 CVE29 critCVSS 7.2
  Nuclei 5PoC 1
  openclaw (370) · parse-server (32) · nocodb (10)
• 2openclaw—
  199 CVE17 critCVSS 6.8
  NEW
  openclaw (198) · voice-call (2) · nextcloud-talk (1)
• 3google—
  178 CVE12 critCVSS 7.9
  KEV 2
  android (101) · chrome (75) · google chrome (61)
• 4linux—
  178 CVE1 critCVSS 6.2
  linux (178) · linux kernel (158)
• 5сообщество свободного программного обеспечения—
  145 CVE10 critCVSS 6.8
  KEV 2Nuclei 2PoC 1
  debian gnu/linux (54) · openclaw (36) · linux (27)
• 6microsoft—
  144 CVE7 critCVSS 7.5
  KEV 2
  microsoft edge (45) · windows 10 version 21h2 (43) · windows 10 version 22h2 (43)
• 7go—
  139 CVE19 critCVSS 7.3
  Nuclei 4PoC 6
  github.com/siyuan-note/siyuan/kernel (14) · github.com/olivetin/olivetin (11) · github.com/forceu/gokapi (8)
• 8themerex—
  105 CVE13 critCVSS 8.3
  NEWNuclei 54
  aldo (1) · alliance (1) · aqualots (1)
• 9pypi—
  94 CVE6 critCVSS 7.0
  Nuclei 2PoC 2
  glances (10) · openssl-encrypt (5) · justhtml (4)
• 10apple—
  89 CVE3 critCVSS 6.0
  macos (79) · ios and ipados (44) · ipados (44)
• 11redhat—
  89 CVE1 critCVSS 6.5
  red hat enterprise linux 9 (39) · red hat enterprise linux 8 (38) · red hat enterprise linux (35)
• 12packagist—
  88 CVE8 critCVSS 6.8
  PoC 4
  craftcms/cms (19) · wwbn/avideo (10) · admidio/admidio (9)
• 13tenda—
  88 CVE14 critCVSS 8.8
  PoC 17
  f453 (17) · f453 firmware (17) · w20e firmware (9)
• 14wwbn—
  84 CVE11 critCVSS 7.1
  NEWNuclei 1
  avideo (81) · avideo-encoder (3)
• 15adobe—
  82 CVECVSS 6.1
  adobe experience manager (34) · experience manager (33) · magento open source (19)
• 16ibm—
  72 CVECVSS 5.6
  infosphere information server (16) · sterling file gateway (7) · sterling b2b integrator (7)
• 17cisco—
  70 CVE2 critCVSS 6.6
  KEV 1Nuclei 1PoC 69
  cisco secure firewall threat defense (ftd) software (40) · cisco secure firewall adaptive security appliance (asa) software (25) · adaptive security appliance software (24)
• 18dlink—
  66 CVE26 critCVSS 7.5
  PoC 20
  dir-513 firmware (35) · dns-726-4 firmware (20) · dns-320l firmware (20)
• 19parse-community—
  65 CVE10 critCVSS 6.9
  NEW
  parse-server (65)
• 20sourcecodester—
  60 CVECVSS 6.1
  PoC 1
  sales and inventory system (20) · client database management system (4) · resort reservation system (4)
• 21code-projects—
  55 CVECVSS 5.7
  simple flight ticket booking system (9) · exam form submission (8) · simple laundry system (7)
• 22mozilla—
  51 CVE21 critCVSS 8.5
  firefox (48) · thunderbird (47) · firefox esr (15)
• 23crates.io—
  50 CVE1 critCVSS 7.3
  zeptoclaw (5) · aws-lc-sys (5) · vaultwarden (4)
• 24discourse—
  48 CVECVSS 5.1
  discourse (48)
• 25linuxfoundation—
  45 CVE3 critCVSS 6.3
  everest (18) · nats-server (13) · backstage (2)
• 26itsourcecode—
  44 CVECVSS 6.1
  PoC 6
  university management system (11) · free hotel reservation system (6) · payroll management system (6)
• 27open-emr—
  44 CVE4 critCVSS 7.0
  NEW
  openemr (44)
• 28openemr—
  44 CVE4 critCVSS 7.0
  NEW
  openemr (44)
• 29nuget—
  43 CVECVSS 6.3
  magick.net-q16-anycpu (19) · magick.net-q16-hdri-anycpu (19) · magick.net-q16-hdri-openmp-arm64 (19)
• 30ancorathemes—
  40 CVE3 critCVSS 8.2
  NEWNuclei 25
  grit (1) · handyman (1) · honor (1)
• 31chamilo—
  38 CVE9 critCVSS 7.5
  NEWPoC 15
  chamilo-lms (38) · chamilo lms (30)
• 32ahsanriaz26gmailcom—
  36 CVE1 critCVSS 6.3
  NEW
  sales and inventory system (31) · inventory system (5)
• 33color—
  36 CVECVSS 6.4
  NEW
  iccdev (36)
• 34d-link—
  36 CVE5 critCVSS 7.3
  PoC 1
  dns-726-4 (20) · dns-320lw (20) · dns-321 (20)
• 35internationalcolorconsortium—
  36 CVECVSS 6.4
  NEW
  iccdev (36)
• 36craftcms—
  34 CVE3 critCVSS 6.6
  NEWPoC 1
  craft cms (23) · cms (23) · craft commerce (7)
• 37mattermost—
  34 CVECVSS 4.9
  mattermost (34) · mattermost server (32) · ms teams (1)
• 38oretnom23—
  33 CVE8 critCVSS 6.1
  PoC 15
  pharmacy point of sale system (9) · online food ordering system (7) · simple online men\'s salon management system (4)
• 39hcl—
  31 CVE1 critCVSS 4.5
  NEW
  aftermarket dpc (17) · aion (10) · sametime (3)
• 40hcltech—
  31 CVE1 critCVSS 4.7
  aftermarket cloud (17) · aion (7) · unica (3)
• 41mikado-themes—
  29 CVECVSS 7.9
  NEWNuclei 19
  amfissa (1) · aviana (1) · belfort (1)
• 42siyuan-note—
  28 CVE12 critCVSS 8.1
  NEWNuclei 5
  siyuan (28)
• 43gitlab—
  27 CVECVSS 5.8
  gitlab (27)
• 44b3log—
  26 CVE11 critCVSS 8.1
  NEWNuclei 4
  siyuan (26)
• 45carmelo—
  26 CVE7 critCVSS 7.3
  NEWPoC 2
  simple food order system (10) · simple flight ticket booking system (9) · simple student alumni system (5)
• 46drupal—
  25 CVECVSS 5.5
  NEW
  openid connect / oauth client (3) · file access fix (deprecated) (2) · anti-spam by cleantalk (1)
• 47raratheme—
  25 CVECVSS 5.3
  NEW
  app landing page (1) · bakes and cakes (1) · benevolent (1)
• 48acronis—
  23 CVECVSS 5.8
  NEW
  acronis cyber protect 17 (21) · acronis cyber protect cloud agent (6) · acronis true image (1)
• 49maven—
  23 CVE7 critCVSS 7.2
  PoC 1
  org.keycloak:keycloak-services (2) · org.apache.livy:livy-server (2) · org.apache.iotdb:iotdb-core (2)
• 50fortinet—
  22 CVECVSS 6.1
  fortiweb (6) · fortianalyzer (6) · fortimanager (6)

Top weaknesses

CWE classes by distinct CVE count.

Sectors

Solution categories ranked by distinct CVE count this period.

• OSS Libraries1,600 CVE
  190 crit281 vendorsCVSS 7.4
  openclaw (370) · parse-server (32) · undici (12)
• Web & CMS Plugins1,581 CVE
  169 crit562 vendorsCVSS 7.8
  avideo (81) · elecv2p (6) · saloon (6)
• Enterprise Software863 CVE
  229 crit171 vendorsCVSS 7.9
  oneuptime (27) · aftermarket cloud (17) · aftermarket dpc (17)
• Operating Systems598 CVE
  39 crit7 KEV37 vendorsCVSS 7.7
  linux (205) · linux kernel (158) · debian gnu/linux (54)
• Networking Infrastructure521 CVE
  370 crit4 KEV109 vendorsCVSS 7.8
  cisco secure firewall threat defense (ftd) software (40) · dir-513 firmware (35) · cisco secure firewall adaptive security appliance (asa) software (25)
• Security Products449 CVE
  45 crit6 KEV103 vendorsCVSS 7.2
  openclaw (198) · acronis cyber protect 17 (21) · acronis cyber protect cloud agent (6)
• Mobile Apps319 CVE
  29 crit4 KEV17 vendorsCVSS 7.6
  android (106) · chrome (75) · google chrome (61)
• Consumer Software305 CVE
  80 crit76 vendorsCVSS 8.5
  adobe experience manager (66) · adobe commerce (38) · experience manager (33)
• Cloud & SaaS254 CVE
  61 crit6 KEV105 vendorsCVSS 8.6
  n8n (22) · vikunja (18) · nocodb (10)
• AI / ML202 CVE
  44 crit4 KEV67 vendorsCVSS 8.0
  everest (18) · nats-server (13) · raytha (11)
• ICS / OT / IoT176 CVE
  108 crit61 vendorsCVSS 8.2
  ubr-01 mk ii (15) · ubr-02 (15) · ubr-lon (15)
• Hardware Firmware174 CVE
  31 crit472 KEV42 vendorsCVSS 7.6
  fastconnect 6900 firmware (14) · qca6595au firmware (14) · qca6696 firmware (14)
• Communications156 CVE
  21 crit3 KEV61 vendorsCVSS 8.7
  mattermost (34) · mattermost server (32) · librechat (16)
• DevTools & CI97 CVE
  9 crit45 vendorsCVSS 9.1
  gitlab (38) · gogs (6) · enterprise server (4)
• Databases61 CVE
  10 crit26 vendorsCVSS 7.5
  ibm qradar siem (4) · enterprise edition (3) · ibm planning analytics local (2)
• Unclassified508 CVE
  100 crit3 KEV311 vendorsCVSS 7.3
  siyuan (28) · blinko (20) · dnr-202l (20)