Skip to content
All lab projects

CVE Landscape

The last 30 days of scored CVEs, colored by severity or by what is actually being exploited.

11,531 CVEs, 25 on the CISA KEV list

Written about this: How 14 CVEs finally forced my Next.js upgrade (and what the migration actually looked like)

The window at a glance

11,531 scored CVEs published in the last 30 days, of which 25 appear on the CISA Known Exploited Vulnerabilities catalog. The last pipeline run added 203 records and saw 0 added to KEV. Data generated 2026-09-27.

By severity

  • CRITICAL1,294
  • HIGH5,323
  • MEDIUM4,387
  • LOW527

Busiest vendors

  • microsoft880
  • google468
  • oracle263
  • apple245
  • adobe188
  • dell136
  • ibm89
  • apache61
  • mongodb57
  • arubanetworks53
  • snipeitapp44
  • concretecms42

8,348 of 11,531 have no vendor attributed in NVD yet.

Loading the interactive treemap...