BlackTreeCVE Intelligence
Historical perspectiveOfficial publication and KEV datesIncomplete months marked
Security in perspective

Security in motion.

New vulnerabilities keep arriving. Some older ones are still being exploited. See both stories in the data.

Download briefing PDF Explore confirmed exploitation
01 / Disclosure and exploitation

Two signals. Two stories.

Publication volume and confirmed exploitation answer different questions. The charts share a calendar, but each has its own count scale.

01 / CVE.org publication date

The disclosure wave

New public vulnerability records, grouped by publication month.

Monthly official CVE publicationsCounts are displayed by calendar month. The current incomplete month is a separate dashed point. Exact values are available in the data table below.05,00010,00015,00020,000Jan 2024Jul 2024Jan 2025Jul 2025Jan 2026Jul 2026
Complete months ○ Current month to date
02 / CISA KEV date added

The exploitation signal

Vulnerabilities added to CISA's exploited list, by the date they joined it.

Monthly CISA KEV additionsCounts are displayed by calendar month. The current incomplete month is a separate dashed point. Exact values are available in the data table below.010203040Jan 2024Jul 2024Jan 2025Jul 2025Jan 2026Jul 2026
Complete months ○ Current month to date

The current month is shown as a hollow point and is never used for a full-month comparison. KEV confirms exploitation in the wild, but it is not a count of incidents or every exploited CVE.

02 / Long view

Every year since 1999

Newest first. 2026 is year to date, not a full-year comparison. Earlier counts can change as source records are corrected.

2026 so farAll other bars show complete calendar years
03 / The long tail

Yesterday's flaws, today's concern

Age of CVEs added to KEV from 1 Sept 2025 to 31 Aug 2026.

16%were published at least 3 years before their KEV addition.46 of 281 additions in this period
75%Less than 1 year old212 CVEs
6%1 to under 3 years old17 CVEs
16%3 years old or more46 CVEs
2%Age not established6 CVEs
See the exact monthly and annual figures

Monthly counts

MonthCVE publicationsKEV additions
Sept 2026 (partial)13,72741
Aug 202612,26131
Jul 20269,75926
Jun 20267,94923
May 20266,93421
Apr 20265,81331
Mar 20266,23626
Feb 20264,61628
Jan 20264,30217
Dec 20255,49520
Nov 20253,02011
Oct 20254,27431
Sept 20254,31916
Aug 20253,62915
Jul 20253,77420
Jun 20253,68220
May 20253,98024
Apr 20254,03315
Mar 20254,00132
Feb 20253,67327
Jan 20254,27314
Dec 20243,43316
Nov 20244,05422
Oct 20243,56617
Sept 20242,51425
Aug 20242,89519
Jul 20243,11314
Jun 20243,0809
May 20244,99114
Apr 20243,60410
Mar 20243,29910
Feb 20242,7849
Jan 20242,59121

Annual publications

YearCVE publications
2026 (year to date)71,597
202548,153
202439,924
202328,847
202225,000
202120,177
202018,363
201917,308
201816,510
201714,642
20166,457
20156,494
20147,928
20135,187
20125,288
20114,150
20104,639
20095,732
20085,673
20077,211
20066,885
20056,708
20041,612
20031,223
20021,690
20011,323
20001,437
1999320
Reading the figures

BlackTree counts official, non-rejected CVE.org records by publication date. KEV counts are non-rejected CVEs currently retained with a CISA Date Added. The age split uses only records with an official publication date no later than KEV addition; the rest are labelled undetermined. Numbers can change after upstream corrections and backfills.

Source checks

CVE.org: ok, last successful refresh 29 Sept 2026

CISA KEV: ok, last successful refresh 29 Sept 2026

CVE.org ↗CISA KEV ↗