{"generated":"2026-11-09T04:30:37Z","asof":"2026-11-06","monthly":[{"month":"2024-11","total":4056,"kev":22},{"month":"2024-12","total":3431,"kev":16},{"month":"2025-01","total":4275,"kev":14},{"month":"2025-02","total":3673,"kev":27},{"month":"2025-03","total":3998,"kev":32},{"month":"2025-04","total":4034,"kev":15},{"month":"2025-05","total":3980,"kev":24},{"month":"2025-06","total":3681,"kev":20},{"month":"2025-07","total":3776,"kev":20},{"month":"2025-08","total":3628,"kev":15},{"month":"2025-09","total":4321,"kev":16},{"month":"2025-10","total":4273,"kev":31},{"month":"2025-11","total":3021,"kev":11},{"month":"2025-12","total":5491,"kev":20},{"month":"2026-01","total":4302,"kev":17},{"month":"2026-02","total":4616,"kev":28},{"month":"2026-03","total":6234,"kev":26},{"month":"2026-04","total":5810,"kev":31},{"month":"2026-05","total":6936,"kev":21},{"month":"2026-06","total":7942,"kev":23},{"month":"2026-07","total":9770,"kev":26},{"month":"2026-08","total":12256,"kev":31},{"month":"2026-09","total":14928,"kev":43},{"month":"2026-10","total":17052,"kev":36}],"categories":[{"month":"2024-11","os":5,"middleware":5,"webapp":5,"network":7,"library":0,"cloud":0},{"month":"2024-12","os":2,"middleware":4,"webapp":3,"network":7,"library":0,"cloud":0},{"month":"2025-01","os":4,"middleware":4,"webapp":0,"network":5,"library":1,"cloud":0},{"month":"2025-02","os":4,"middleware":4,"webapp":4,"network":10,"library":3,"cloud":2},{"month":"2025-03","os":9,"middleware":11,"webapp":5,"network":5,"library":0,"cloud":2},{"month":"2025-04","os":6,"middleware":5,"webapp":1,"network":3,"library":0,"cloud":0},{"month":"2025-05","os":5,"middleware":9,"webapp":2,"network":5,"library":2,"cloud":1},{"month":"2025-06","os":7,"middleware":1,"webapp":4,"network":7,"library":1,"cloud":0},{"month":"2025-07","os":0,"middleware":9,"webapp":3,"network":4,"library":2,"cloud":2},{"month":"2025-08","os":1,"middleware":6,"webapp":2,"network":5,"library":1,"cloud":0},{"month":"2025-09","os":3,"middleware":1,"webapp":5,"network":7,"library":0,"cloud":0},{"month":"2025-10","os":12,"middleware":7,"webapp":10,"network":2,"library":0,"cloud":0},{"month":"2025-11","os":2,"middleware":3,"webapp":3,"network":3,"library":0,"cloud":0},{"month":"2025-12","os":4,"middleware":3,"webapp":2,"network":8,"library":3,"cloud":0},{"month":"2026-01","os":3,"middleware":8,"webapp":2,"network":2,"library":2,"cloud":0},{"month":"2026-02","os":7,"middleware":10,"webapp":5,"network":5,"library":1,"cloud":0},{"month":"2026-03","os":7,"middleware":7,"webapp":4,"network":5,"library":2,"cloud":1},{"month":"2026-04","os":4,"middleware":12,"webapp":5,"network":7,"library":3,"cloud":0},{"month":"2026-05","os":7,"middleware":1,"webapp":6,"network":4,"library":3,"cloud":0},{"month":"2026-06","os":2,"middleware":7,"webapp":4,"network":9,"library":1,"cloud":0},{"month":"2026-07","os":0,"middleware":7,"webapp":8,"network":11,"library":0,"cloud":0},{"month":"2026-08","os":6,"middleware":17,"webapp":2,"network":3,"library":3,"cloud":0},{"month":"2026-09","os":7,"middleware":11,"webapp":5,"network":18,"library":2,"cloud":0},{"month":"2026-10","os":2,"middleware":16,"webapp":5,"network":12,"library":1,"cloud":0}],"cve_notable":[{"id":"CVE-2026-19868","product":"SonicOS SSLVPN","vendor":"SonicWall","category":"network","cvss":7.5,"cvss_disp":"7.5","epss":0.00621,"epss_disp":"1%","kev":1,"kev_disp":"あり","kev_date":"2026-11-06","published":"2026-11-06","title":"An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user…","pdisp":"SonicOS SSLVPN"},{"id":"CVE-2024-27834","product":"Multiple Products","vendor":"Apple","category":"os","cvss":5.5,"cvss_disp":"5.5","epss":0.01502,"epss_disp":"2%","kev":1,"kev_disp":"あり","kev_date":"2026-11-04","published":"2024-05-14","title":"The issue was addressed with improved checks. This issue is fixed in Safari 17.5, iOS…","pdisp":"Multiple Products"},{"id":"CVE-2026-119977","product":"WordPress Core","vendor":"WordPress","category":"webapp","cvss":8.1,"cvss_disp":"8.1","epss":0.01157,"epss_disp":"1%","kev":1,"kev_disp":"あり","kev_date":"2026-11-03","published":"2026-10-31","title":"WordPress Core is vulnerable to Remote Code Execution in versions 4.7 through 7.1.3. This…","pdisp":"WordPress Core"},{"id":"CVE-2026-118527","product":"Connect Secure","vendor":"Ivanti","category":"network","cvss":4.3,"cvss_disp":"4.3","epss":0.00822,"epss_disp":"1%","kev":1,"kev_disp":"あり","kev_date":"2026-10-30","published":"2026-11-03","title":"Use of predictable filenames in Ivanti Connect Secure before versions 25.1.1.3 and…","pdisp":"Connect Secure"},{"id":"CVE-2026-111357","product":"Connect Secure","vendor":"Ivanti","category":"network","cvss":7.0,"cvss_disp":"7.0","epss":0.00533,"epss_disp":"1%","kev":1,"kev_disp":"あり","kev_date":"2026-10-30","published":"2026-10-15","title":"Ivanti Connect Secure 22.8R2.4 mishandles the manner in which the dsinvoked broker trusts…","pdisp":"Connect Secure"},{"id":"CVE-2026-97229","product":"Community Edition and Enterprise Edition","vendor":"GitLab","category":"middleware","cvss":10.0,"cvss_disp":"10.0","epss":0.6522,"epss_disp":"65%","kev":1,"kev_disp":"あり","kev_date":"2026-10-29","published":"2026-10-13","title":"GitLab has remediated an issue in GitLab CE/EE affecting all versions from 19.2 before…","pdisp":"Community Edition and Enterprise Edition"},{"id":"CVE-2026-76418","product":"Secure Firewall ASA Software and Cisco Secure FTD Software","vendor":"Cisco","category":"network","cvss":8.6,"cvss_disp":"8.6","epss":0.00821,"epss_disp":"1%","kev":1,"kev_disp":"あり","kev_date":"2026-10-29","published":"2026-10-28","title":"A vulnerability in the Remote Access SSL VPN service of Cisco Secure Firewall Adaptive…","pdisp":"Secure Firewall ASA Software and Cisco Secure FTD Software"},{"id":"CVE-2026-41709","product":"VMware ESX","vendor":"Broadcom","category":"middleware","cvss":2.7,"cvss_disp":"2.7","epss":0.00689,"epss_disp":"1%","kev":1,"kev_disp":"あり","kev_date":"2026-10-28","published":"2026-07-30","title":"VMware ESX contains an insufficient logging vulnerability. A malicious administrator…","pdisp":"VMware ESX"},{"id":"CVE-2026-46300","product":"Kernel","vendor":"Linux","category":"os","cvss":7.8,"cvss_disp":"7.8","epss":0.1613,"epss_disp":"16%","kev":1,"kev_disp":"あり","kev_date":"2026-10-28","published":"2026-05-23","title":"In the Linux kernel, the following vulnerability has been resolved:  net: skbuff:…","pdisp":"Kernel"},{"id":"CVE-2026-48356","product":"Commerce and Magento","vendor":"Adobe","category":"webapp","cvss":9.3,"cvss_disp":"9.3","epss":0.47472,"epss_disp":"47%","kev":1,"kev_disp":"あり","kev_date":"2026-10-27","published":"2026-07-14","title":"Adobe Commerce is affected by an Unrestricted Upload of File with Dangerous Type…","pdisp":"Commerce and Magento"},{"id":"CVE-2025-53771","product":"Sharepoint Server","vendor":"Microsoft","category":"middleware","cvss":6.5,"cvss_disp":"6.5","epss":0.9989,"epss_disp":"100%","kev":0,"kev_disp":"—","kev_date":"","published":"2025-07-20","title":"Improper authentication in Microsoft Office SharePoint allows an unauthorized attacker to…","pdisp":"Sharepoint Server"},{"id":"CVE-2025-1974","product":"","vendor":"","category":"os","cvss":9.8,"cvss_disp":"9.8","epss":0.994,"epss_disp":"99%","kev":0,"kev_disp":"—","kev_date":"","published":"2025-03-25","title":"A security issue was discovered in Kubernetes where under certain conditions, an…","pdisp":"A security issue was…"},{"id":"CVE-2025-29927","product":"Next.Js","vendor":"Vercel","category":"webapp","cvss":9.1,"cvss_disp":"9.1","epss":0.99225,"epss_disp":"99%","kev":0,"kev_disp":"—","kev_date":"","published":"2025-03-21","title":"Next.js is a React framework for building full-stack web applications. Starting in…","pdisp":"Next.Js"},{"id":"CVE-2025-4123","product":"Grafana","vendor":"Grafana","category":"webapp","cvss":7.6,"cvss_disp":"7.6","epss":0.97083,"epss_disp":"97%","kev":0,"kev_disp":"—","kev_date":"","published":"2025-05-22","title":"A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client…","pdisp":"Grafana"},{"id":"CVE-2025-27636","product":"Camel","vendor":"Apache","category":"library","cvss":5.6,"cvss_disp":"5.6","epss":0.97057,"epss_disp":"97%","kev":0,"kev_disp":"—","kev_date":"","published":"2025-03-09","title":"Bypass/Injection vulnerability in Apache Camel components under particular conditions. …","pdisp":"Camel"},{"id":"CVE-2025-34037","product":"","vendor":"","category":"network","cvss":10.0,"cvss_disp":"10.0","epss":0.96154,"epss_disp":"96%","kev":0,"kev_disp":"—","kev_date":"","published":"2025-06-24","title":"An OS command injection vulnerability exists in various models of E-Series…","pdisp":"An OS command injection…"},{"id":"CVE-2026-43284","product":"Linux Kernel","vendor":"Linux","category":"os","cvss":8.8,"cvss_disp":"8.8","epss":0.94194,"epss_disp":"94%","kev":0,"kev_disp":"—","kev_date":"","published":"2026-05-08","title":"In the Linux kernel, the following vulnerability has been resolved:  xfrm: esp: avoid…","pdisp":"Linux Kernel"},{"id":"CVE-2026-43500","product":"Linux Kernel","vendor":"Linux","category":"os","cvss":7.8,"cvss_disp":"7.8","epss":0.94118,"epss_disp":"94%","kev":0,"kev_disp":"—","kev_date":"","published":"2026-05-11","title":"In the Linux kernel, the following vulnerability has been resolved:  rxrpc: Also unshare…","pdisp":"Linux Kernel"}],"vendors":[{"vendor":"Microsoft","cve_30d":42,"kev_90d":8},{"vendor":"Cisco","cve_30d":21,"kev_90d":7},{"vendor":"Fortinet","cve_30d":12,"kev_90d":3},{"vendor":"Apple","cve_30d":11,"kev_90d":3},{"vendor":"Google","cve_30d":11,"kev_90d":4},{"vendor":"Linux","cve_30d":9,"kev_90d":6},{"vendor":"Ivanti","cve_30d":8,"kev_90d":3},{"vendor":"Adobe","cve_30d":7,"kev_90d":3}],"stats":[{"kev7_disp":"5","kev30_disp":"35","epss90_disp":"337","epss50_disp":"3,473"}]}