2026
Vulnerability Stats

It's October 5 and 73,327 vulnerabilities have been published in 2026.

This marks an increase of 103% compared to this time last year.

The vulnerability statistics page is updated daily and is designed to be easily screenshotable and shareable.

2026
Vulnerability Breakdown

CRITICAL
8,387
HIGH
29,480
MEDIUM
28,417
LOW
2,779

Plus 4,188 vulnerabilities yet to be given a severity rating.

2026 Vulnerability Severity By Month

264

New vulnerabilities every day in 2026

Each day your organisation needs to check and patch 264 vulnerability.

Across 1000's of devices!

Vulnerabilities Trending in 2026

Top 10 Trending Vulnerabilities for 2026

Vulnerability in Linux Kernel Affecting Crypto ...

CVE-2026-31431
LinuxLinux👾

Remote Code Execution Vulnerability in GitHub E...

CVE-2026-3854
GithubEnterprise Server👾

Arbitrary File Access Flaw in macOS Product by ...

CVE-2026-28910
AppleMac OS

Server-Side Request Forgery Vulnerability in Ne...

CVE-2026-44578
VercelNext.js👾

Authentication Bypass Vulnerability in cPanel a...

CVE-2026-41940
WebprosCpanel👾

Heap Buffer Overflow in NGINX Plus and NGINX Op...

CVE-2026-42945
F5Nginx Plus👾

Legacy API Interface Vulnerability in EZVIZ Pro...

CVE-2026-32683
EzvizEzviz App

Authentication Bypass in Fortinet FortiAnalyzer...

CVE-2026-24858
FortinetFortiweb👾

Improper Input Validation in Citrix NetScaler A...

CVE-2026-88771
Citrix NetscalerAdc👾

Pre-auth Reflected XSS Vulnerability in WordPress

CVE-2026-64638
WordPressWordPress👾

Pareto Principle
The 80/20 Rule

The Pareto principle states that for many outcomes, roughly 80% of consequences come from 20% of causes.

In the world of Vulnerability Management, only a small amount of CVEs introduce the majority of risk.

Tracking CVEs that generate vibrant conversation gives us a tool to reliability identify the most important vulnerabilities.

2017 - 2026 Vulnerability Severity By Year

More Vulnerabilities

Means more Exploits

Which means more Ransomware

Vulnerability Arrivals 📆

Vulnerabilities are not published in a predictable way. Every day is a vulnerable day 🤨

Vulnerability Published Matrix for 2026

Vulnerability Published Matrix for 2025

Vendor Breakdown

Wonder if your vendors are doing a good job? 🤔

Vulnerability Weighted Impact by Vendors

Impact is the sum of the CVSSv3 base score for all vulnerabilities by vendor.