{ "retrievedAt": "2026-10-22", "cveSnapshotAt": "2026-10-22T07:01:20.491Z", "completeThrough": "2026-09", "cveSource": "https://nvd.nist.gov/developers/vulnerabilities", "cveMetric": "NIST NVD CVE API 2.0 totalResults with noRejected, grouped by inclusive UTC publication-date ranges.", "kevSource": "https://github.com/cisagov/kev-data/blob/fd12990e9c566a1ad3060e1a2073129778f438cc/known_exploited_vulnerabilities.csv", "kevBlobSha": "2f6c0943b68f3edab4813ca3ed3642d1c4ac4789", "kevSnapshotLatestEntry": "2026-10-20", "series": [ { "month": "2024-01", "cvePublished": 2594, "kevAdded": 21, "cveCumulativeSince2024": 2594, "partial": false }, { "month": "2024-02", "cvePublished": 2778, "kevAdded": 9, "cveCumulativeSince2024": 5372, "partial": false }, { "month": "2024-03", "cvePublished": 3309, "kevAdded": 10, "cveCumulativeSince2024": 8681, "partial": false }, { "month": "2024-04", "cvePublished": 3621, "kevAdded": 10, "cveCumulativeSince2024": 12302, "partial": false }, { "month": "2024-05", "cvePublished": 4999, "kevAdded": 14, "cveCumulativeSince2024": 17301, "partial": false }, { "month": "2024-06", "cvePublished": 3078, "kevAdded": 9, "cveCumulativeSince2024": 20379, "partial": false }, { "month": "2024-07", "cvePublished": 3113, "kevAdded": 14, "cveCumulativeSince2024": 23492, "partial": false }, { "month": "2024-08", "cvePublished": 2896, "kevAdded": 19, "cveCumulativeSince2024": 26388, "partial": false }, { "month": "2024-09", "cvePublished": 2514, "kevAdded": 25, "cveCumulativeSince2024": 28902, "partial": false }, { "month": "2024-10", "cvePublished": 3564, "kevAdded": 17, "cveCumulativeSince2024": 32466, "partial": false }, { "month": "2024-11", "cvePublished": 4056, "kevAdded": 22, "cveCumulativeSince2024": 36522, "partial": false }, { "month": "2024-12", "cvePublished": 3431, "kevAdded": 16, "cveCumulativeSince2024": 39953, "partial": false }, { "month": "2025-01", "cvePublished": 4275, "kevAdded": 14, "cveCumulativeSince2024": 44228, "partial": false }, { "month": "2025-02", "cvePublished": 3673, "kevAdded": 27, "cveCumulativeSince2024": 47901, "partial": false }, { "month": "2025-03", "cvePublished": 3998, "kevAdded": 32, "cveCumulativeSince2024": 51899, "partial": false }, { "month": "2025-04", "cvePublished": 4034, "kevAdded": 15, "cveCumulativeSince2024": 55933, "partial": false }, { "month": "2025-05", "cvePublished": 3980, "kevAdded": 24, "cveCumulativeSince2024": 59913, "partial": false }, { "month": "2025-06", "cvePublished": 3681, "kevAdded": 20, "cveCumulativeSince2024": 63594, "partial": false }, { "month": "2025-07", "cvePublished": 3776, "kevAdded": 20, "cveCumulativeSince2024": 67370, "partial": false }, { "month": "2025-08", "cvePublished": 3628, "kevAdded": 15, "cveCumulativeSince2024": 70998, "partial": false }, { "month": "2025-09", "cvePublished": 4321, "kevAdded": 16, "cveCumulativeSince2024": 75319, "partial": false }, { "month": "2025-10", "cvePublished": 4273, "kevAdded": 31, "cveCumulativeSince2024": 79592, "partial": false }, { "month": "2025-11", "cvePublished": 3021, "kevAdded": 11, "cveCumulativeSince2024": 82613, "partial": false }, { "month": "2025-12", "cvePublished": 5491, "kevAdded": 20, "cveCumulativeSince2024": 88104, "partial": false }, { "month": "2026-01", "cvePublished": 4302, "kevAdded": 17, "cveCumulativeSince2024": 92406, "partial": false }, { "month": "2026-02", "cvePublished": 4616, "kevAdded": 28, "cveCumulativeSince2024": 97022, "partial": false }, { "month": "2026-03", "cvePublished": 6234, "kevAdded": 26, "cveCumulativeSince2024": 103256, "partial": false }, { "month": "2026-04", "cvePublished": 5810, "kevAdded": 31, "cveCumulativeSince2024": 109066, "partial": false }, { "month": "2026-05", "cvePublished": 6936, "kevAdded": 21, "cveCumulativeSince2024": 116002, "partial": false }, { "month": "2026-06", "cvePublished": 7942, "kevAdded": 23, "cveCumulativeSince2024": 123944, "partial": false }, { "month": "2026-07", "cvePublished": 9770, "kevAdded": 26, "cveCumulativeSince2024": 133714, "partial": false }, { "month": "2026-08", "cvePublished": 12258, "kevAdded": 31, "cveCumulativeSince2024": 145972, "partial": false }, { "month": "2026-09", "cvePublished": 14933, "kevAdded": 43, "cveCumulativeSince2024": 160905, "partial": false } ], "comparisons": { "janSep2025CVE": 35366, "janSep2025KEV": 183, "janSep2026CVE": 72801, "janSep2026KEV": 246, "cveYoYPercent": 105.85025165413109, "kevYoYPercent": 34.42622950819671, "trailing12MonthsCVE": 85586, "previous12MonthsCVE": 46417, "trailing12MonthsGrowthPercent": 84.38503134627399 }, "limitations": [ "CVE counts use official NVD API totalResults with noRejected and saved UTC publication-date queries. Retained responses contain one sample CVE and the API aggregate; upstream records remain revisable.", "CVE publication dates and CISA KEV catalog-addition dates measure different events. KEV additions divided by CVE publications do not estimate exploitation probability.", "The complete series ends September 2026. October 2026 is shown separately through October 21 UTC and compared with October 1–21, 2025. Partial months are excluded from full-month averages.", "Model dates provide temporal context. Attribution to AI research tools requires record-level evidence." ], "models": [ { "date": "2024-05-13", "name": "GPT-4o", "access": "general availability", "url": "https://openai.com/index/hello-gpt-4o/" }, { "date": "2024-06-20", "name": "Claude 3.5 Sonnet", "access": "general availability (AWS dated launch)", "url": "https://aws.amazon.com/about-aws/whats-new/2024/06/anthropic-claude-3-5-sonnet-model-bedrock/" }, { "date": "2024-09-12", "name": "OpenAI o1-preview", "access": "preview", "url": "https://openai.com/index/introducing-openai-o1-preview/" }, { "date": "2025-01-20", "name": "DeepSeek-R1", "access": "open weights + API", "url": "https://api-docs.deepseek.com/news/news250120/" }, { "date": "2025-02-24", "name": "Claude 3.7 Sonnet", "access": "general availability; Claude Code research preview", "url": "https://www.anthropic.com/news/claude-3-7-sonnet" }, { "date": "2025-08-07", "name": "GPT-5", "access": "general availability", "url": "https://openai.com/index/introducing-gpt-5/" }, { "date": "2026-04-07", "name": "Claude Mythos Preview / Glasswing", "access": "restricted partner access", "url": "https://www.anthropic.com/glasswing" }, { "date": "2026-06-09", "name": "Claude Fable 5 / Mythos 5", "access": "general / restricted; suspended Jun 12, restored July 1", "url": "https://www.anthropic.com/news/claude-fable-5-mythos-5" }, { "date": "2026-07-09", "name": "GPT-5.6", "access": "general availability following limited preview", "url": "https://openai.com/index/gpt-5-6/" }, { "date": "2026-09-01", "name": "Claude Fable 5.1 / Mythos 5.1", "access": "general / restricted availability", "url": "https://aws.amazon.com/about-aws/whats-new/2026/09/claude-fable-5-1-aws/" }, { "date": "2026-09-03", "name": "GPT-6 Astra", "access": "staged rollout", "url": "https://openai.com/index/safety-overview-gpt-6-astra/" } ], "spending": [ { "year": 2026, "usdMillions": 308000, "status": "forecast" }, { "year": 2029, "usdMillions": 430000, "status": "forecast" } ], "quarterlyOfficial": [ { "quarter": "2024-Q1", "cvePublished": 8697, "kevAdded": 40 }, { "quarter": "2024-Q2", "cvePublished": 11716, "kevAdded": 33 }, { "quarter": "2024-Q3", "cvePublished": 8591, "kevAdded": 58 }, { "quarter": "2024-Q4", "cvePublished": 11073, "kevAdded": 55 }, { "quarter": "2025-Q1", "cvePublished": 12009, "kevAdded": 73 }, { "quarter": "2025-Q2", "cvePublished": 11701, "kevAdded": 59 }, { "quarter": "2025-Q3", "cvePublished": 11738, "kevAdded": 51 }, { "quarter": "2025-Q4", "cvePublished": 12796, "kevAdded": 62 }, { "quarter": "2026-Q1", "cvePublished": 15163, "kevAdded": 71 }, { "quarter": "2026-Q2", "cvePublished": 20709, "kevAdded": 75 } ], "officialProvenance": { "cve": { "source": "https://github.com/CVEProject/cve-website/blob/dev/src/assets/data/metrics.json", "blobSha": "48ef6548429e249e21a5947bd16ff6857bfc41d9", "commit": "f2b4f05012bbbe22905587c6d0c48e23767b1822", "note": "Official CVE website source; current metrics Q1 2026 is 15163 whereas May 12 quarterly blog says 15176. This snapshot consistently uses the metrics JSON; Q3/Q4 2026 TBA, not zero." }, "kev": { "source": "https://github.com/cisagov/kev-data/blob/fd12990e9c566a1ad3060e1a2073129778f438cc/known_exploited_vulnerabilities.csv", "blobSha": "2f6c0943b68f3edab4813ca3ed3642d1c4ac4789", "rows": 1754, "latestDateAdded": "2026-10-20", "note": "One row per CVE retained in current catalog; count by dateAdded. CISA official mirror, CC0. DateAdded is not first attack or incident date.", "commit": "fd12990e9c566a1ad3060e1a2073129778f438cc", "catalogVersion": "2026.10.21", "dateReleased": "2026-10-21T14:04:39.8983Z" }, "nvd": { "publisher": "NIST National Vulnerability Database", "source": "https://nvd.nist.gov/developers/vulnerabilities", "endpoint": "https://services.nvd.nist.gov/rest/json/cves/2.0", "retrievedAt": "2026-10-22T07:01:20.610899+00:00", "capturedFrom": "2026-10-22T06:53:14.923Z", "capturedThrough": "2026-10-22T07:01:20.491Z", "method": "CVE API 2.0 totalResults for publication timestamps within each inclusive UTC interval; noRejected excludes REJECT/Rejected CVEs; resultsPerPage=1 obtains the server aggregate without fetching full records.", "manifest": "raw/nvd/manifest.json", "files": [ "raw/nvd/2024-01.json", "raw/nvd/2024-02.json", "raw/nvd/2024-03.json", "raw/nvd/2024-04.json", "raw/nvd/2024-05.json", "raw/nvd/2024-06.json", "raw/nvd/2024-07.json", "raw/nvd/2024-08.json", "raw/nvd/2024-09.json", "raw/nvd/2024-10.json", "raw/nvd/2024-11.json", "raw/nvd/2024-12.json", "raw/nvd/2025-01.json", "raw/nvd/2025-02.json", "raw/nvd/2025-03.json", "raw/nvd/2025-04.json", "raw/nvd/2025-05.json", "raw/nvd/2025-06.json", "raw/nvd/2025-07.json", "raw/nvd/2025-08.json", "raw/nvd/2025-09.json", "raw/nvd/2025-10.json", "raw/nvd/2025-11.json", "raw/nvd/2025-12.json", "raw/nvd/2026-01.json", "raw/nvd/2026-02.json", "raw/nvd/2026-03.json", "raw/nvd/2026-04.json", "raw/nvd/2026-05.json", "raw/nvd/2026-06.json", "raw/nvd/2026-07.json", "raw/nvd/2026-08.json", "raw/nvd/2026-09.json", "raw/nvd/2025-10-01-21.json", "raw/nvd/2026-10-01-21.json" ], "note": "totalResults is the official API aggregate. Each retained response contains one sample CVE, not the full record set. Counts can change as NVD records are revised." } }, "partialMonth": { "month": "2026-10", "from": "2026-10-01", "through": "2026-10-21", "partial": true, "cvePublished": 12543, "kevAdded": 24, "cveCumulativeSince2024": 173448 }, "monthlyComparison": { "mode": "month-to-date", "timezone": "UTC", "previous": { "from": "2025-10-01", "through": "2025-10-21", "cvePublished": 2719, "kevAdded": 24 }, "current": { "from": "2026-10-01", "through": "2026-10-21", "cvePublished": 12543, "kevAdded": 24 }, "cveYoYPercent": 361.3093048915042, "kevYoYPercent": 0.0 } }