{"as_of":"2026-10-15T04:49:18.264Z","catalog_version":"2026.10.14","catalog_size":1745,"window_days":365,"added_in_window":305,"ransomware_linked_total":361,"ransomware_share_pct":20.7,"past_due_total":1739,"top_vendors_all_time":[{"key":"Microsoft","count":390},{"key":"Cisco","count":101},{"key":"Apple","count":95},{"key":"Adobe","count":82},{"key":"Google","count":75},{"key":"Oracle","count":46},{"key":"Apache","count":41},{"key":"Ivanti","count":36},{"key":"Fortinet","count":31},{"key":"Linux","count":31},{"key":"Citrix","count":27},{"key":"D-Link","count":26},{"key":"VMware","count":26},{"key":"SonicWall","count":19},{"key":"Synacor","count":19}],"top_vendors_in_window":[{"key":"Microsoft","count":44},{"key":"Cisco","count":20},{"key":"Fortinet","count":11},{"key":"Apple","count":11},{"key":"Google","count":10},{"key":"Adobe","count":8},{"key":"Linux","count":8},{"key":"Ivanti","count":6},{"key":"Citrix","count":6},{"key":"Oracle","count":6},{"key":"SonicWall","count":5},{"key":"Synacor","count":5},{"key":"Check Point","count":4},{"key":"JFrog","count":4},{"key":"Broadcom","count":4}],"additions_by_month":[{"key":"2024-11","count":22},{"key":"2024-12","count":16},{"key":"2025-01","count":14},{"key":"2025-02","count":27},{"key":"2025-03","count":32},{"key":"2025-04","count":15},{"key":"2025-05","count":24},{"key":"2025-06","count":20},{"key":"2025-07","count":20},{"key":"2025-08","count":15},{"key":"2025-09","count":16},{"key":"2025-10","count":31},{"key":"2025-11","count":11},{"key":"2025-12","count":20},{"key":"2026-01","count":17},{"key":"2026-02","count":28},{"key":"2026-03","count":26},{"key":"2026-04","count":31},{"key":"2026-05","count":21},{"key":"2026-06","count":23},{"key":"2026-07","count":26},{"key":"2026-08","count":31},{"key":"2026-09","count":43},{"key":"2026-10","count":15}],"top_cwes":[{"key":"CWE-20","count":119},{"key":"CWE-78","count":111},{"key":"CWE-787","count":105},{"key":"CWE-416","count":93},{"key":"CWE-119","count":88},{"key":"CWE-22","count":81},{"key":"CWE-94","count":72},{"key":"CWE-502","count":71},{"key":"CWE-287","count":48},{"key":"CWE-306","count":42},{"key":"CWE-843","count":38},{"key":"CWE-284","count":37},{"key":"CWE-77","count":33},{"key":"CWE-122","count":33},{"key":"CWE-79","count":33}],"note":"Counts are AnswerPool aggregates over the CISA catalog: which vendors' products are most often found exploited, how additions are trending, and how much of the catalog is ransomware-linked. Counts reflect what CISA has catalogued, which is a floor on real exploitation, not a census.","source":"CISA Known Exploited Vulnerabilities catalog","disclaimer":"Source data from CISA (US federal public domain), retrieved at as_of; groupings and day-counts are computed by AnswerPool. CVE description text is authored by the MITRE CVE Program and is deliberately not redistributed here — follow cve_url for it. Not security advice; KEV inclusion means known exploitation, not that you are exposed.","refresh_after":"2026-10-16T00:00:00.000Z"}