Software vulnerabilities explode

Newly published CVEs each month, January 2017–September 2026

Line chart showing monthly newly published CVE records from January 2017 through September 2026. Counts rose from 1,083 in January 2017 to 14,934 in September 2026.

(Please use a modern browser to see the interactive version of this visualization)

Note: Newly published CVE records, not necessarily newly discovered vulnerabilities. Grouped by original publication month (UTC); rejected records excluded. October 2026 is excluded because it is incomplete. Data as of October 22, 2026.Source: CVE Program, CVE List V5

Alistair Barr/BI