CVE Numbering Authority Distribution Score
Disclosed 2025 CVEs
2025 CVE Statistics
Total CVEs disclosed in 2025: 48186
Updated: 01/01/2026 07:32 EST
Total CNAs: 484
Total CNAs without 2025 CVE disclosure: 142
Total CVSS v4 Scores: 12445
Total CVSS v3 Scores: 34980
Total CVEs with both CVSS v3 and v4: 6042
Total CVEs that provided a solution/remedy: 4595
Total CVEs that provided all three standards CWE, CVSS, and CPE: 4177
CNA Distribution Rankings
| Assigner | Count | Average Score |
|---|---|---|
| Patchstack | 7007 | 70.6 |
| VulDB | 5902 | 86.8 |
| Linux | 5686 | 34.5 |
| mitre | 5208 | 48.2 |
| Wordfence | 3451 | 70.8 |
| GitHub_M | 2866 | 73.4 |
| microsoft | 1244 | 80.1 |
| VulnCheck | 1074 | 87.3 |
| adobe | 829 | 75.8 |
| apple | 730 | 42.8 |
| ibm | 606 | 93.9 |
| WPScan | 595 | 43.9 |
| zdi | 487 | 74.1 |
| INCIBE | 404 | 75.1 |
| @huntr_ai | 370 | 72.1 |
| icscert | 333 | 74.0 |
| oracle | 314 | 76.6 |
| redhat | 299 | 86.3 |
| google_android | 286 | 48.1 |
| siemens | 276 | 65.8 |
| cisco | 274 | 69.5 |
| intel | 273 | 64.4 |
| qualcomm | 273 | 70.7 |
| jpcert | 270 | 70.6 |
| fortinet | 237 | 93.1 |
| SamsungMobile | 234 | 67.3 |
| huawei | 224 | 56.6 |
| dell | 223 | 76.2 |
| apache | 218 | 54.9 |
| sap | 212 | 64.1 |
| TR-CERT | 208 | 70.0 |
| mozilla | 208 | 35.2 |
| talos | 200 | 73.5 |
| drupal | 196 | 42.9 |
| Chrome | 195 | 49.3 |
| nvidia | 186 | 69.8 |
| GitLab | 181 | 91.8 |
| CERT-PL | 167 | 75.8 |
| MediaTek | 162 | 44.5 |
| twcert | 147 | 73.6 |
| qnap | 145 | 80.6 |
| Liferay | 144 | 68.0 |
| CERTVDE | 136 | 65.1 |
| HCL | 126 | 65.9 |
| Mattermost | 120 | 78.3 |
| ivanti | 99 | 68.0 |
| jenkins | 97 | 36.4 |
| hpe | 97 | 46.5 |
| juniper | 94 | 85.9 |
| wikimedia-foundation | 88 | 52.2 |
| ABB | 87 | 70.6 |
| Nozomi | 87 | 75.7 |
| hackerone | 84 | 44.7 |
| JetBrains | 83 | 68.7 |
| AMD | 83 | 57.8 |
| f5 | 81 | 75.9 |
| cisa-cg | 80 | 68.3 |
| autodesk | 71 | 90.8 |
| Rockwell | 70 | 75.4 |
| SICK AG | 68 | 78.6 |
| Google_Devices | 67 | 43.3 |
| OpenHarmony | 66 | 68.9 |
| vmware | 66 | 60.3 |
| palo_alto | 64 | 85.6 |
| schneider | 61 | 54.2 |
| Zoom | 61 | 70.5 |
| Esri | 53 | 71.9 |
| Joomla | 52 | 59.3 |
| eclipse | 49 | 72.5 |
| elastic | 49 | 61.9 |
| CPANSec | 47 | 50.1 |
| certcc | 47 | 40.2 |
| 47 | 75.6 | |
| 3DS | 46 | 55.2 |
| lenovo | 45 | 88.6 |
| DIVD | 44 | 80.9 |
| fedora | 43 | 64.8 |
| suse | 43 | 71.3 |
| trendmicro | 42 | 75.0 |
| hp | 41 | 68.8 |
| Deltaww | 40 | 75.5 |
| WSO2 | 39 | 81.3 |
| azure-access | 39 | 67.8 |
| Arista | 38 | 81.4 |
| AMZN | 38 | 78.6 |
| imaginationtech | 38 | 46.5 |
| Go | 38 | 42.8 |
| INCD | 38 | 67.4 |
| canonical | 37 | 66.3 |
| Zohocorp | 37 | 73.4 |
| NI | 36 | 75.7 |
| snyk | 36 | 72.8 |
| mongodb | 36 | 76.4 |
| Axis | 36 | 70.8 |
| NCSC.ch | 35 | 72.1 |
| ProgressSoftware | 34 | 72.1 |
| DEVOLUTIONS | 34 | 44.6 |
| Fluid Attacks | 33 | 94.6 |
| OpenText | 31 | 75.4 |
| sonicwall | 31 | 44.9 |
| samsung.tv_appliance | 30 | 71.8 |
| rapid7 | 29 | 76.1 |
| Unisoc | 29 | 61.3 |
| ASUS | 29 | 79.2 |
| Silabs | 29 | 76.0 |
| Gridware | 29 | 74.2 |
| SEC-VLab | 29 | 66.1 |
| CERT-In | 29 | 81.6 |
| synology | 29 | 73.8 |
| TPLink | 28 | 71.8 |
| Checkmk | 27 | 73.7 |
| Acronis | 27 | 79.8 |
| Salesforce | 27 | 47.4 |
| WatchGuard | 26 | 84.4 |
| JFROG | 26 | 70.9 |
| ENISA | 26 | 69.5 |
| HashiCorp | 25 | 72.7 |
| GovTech CSG | 25 | 69.6 |
| tenable | 24 | 72.8 |
| Centreon | 22 | 78.8 |
| SolarWinds | 21 | 78.9 |
| zte | 21 | 73.7 |
| AHA | 20 | 79.3 |
| Hitachi Energy | 20 | 71.0 |
| GoogleCloud | 20 | 69.8 |
| Honeywell | 19 | 77.7 |
| PostgreSQL | 19 | 59.6 |
| Moxa | 19 | 83.2 |
| HITVAN | 19 | 70.3 |
| bosch | 19 | 62.8 |
| SEL | 19 | 67.7 |
| Arm | 18 | 41.9 |
| Absolute | 18 | 54.6 |
| atlassian | 18 | 70.6 |
| brocade | 17 | 70.2 |
| PSF | 17 | 69.2 |
| Mitsubishi | 17 | 66.5 |
| symantec | 17 | 62.7 |
| TV | 17 | 69.7 |
| GRAFANA | 16 | 70.5 |
| Zyxel | 16 | 73.0 |
| ASRG | 16 | 81.5 |
| Zabbix | 16 | 76.1 |
| Mautic | 15 | 64.9 |
| wolfSSL | 15 | 66.9 |
| kubernetes | 15 | 68.1 |
| NLOK | 15 | 82.0 |
| ZUSO ART | 15 | 75.1 |
| CSA | 15 | 51.3 |
| Foxit | 15 | 70.1 |
| Eaton | 15 | 67.7 |
| zephyr | 14 | 68.4 |
| Citrix | 14 | 63.9 |
| isc | 14 | 85.9 |
| NEC | 14 | 62.4 |
| ERIC | 14 | 64.6 |
| OX | 14 | 71.4 |
| AMI | 14 | 67.7 |
| php | 13 | 66.7 |
| M-Files Corporation | 13 | 76.1 |
| OpenVPN | 13 | 51.8 |
| Hitachi | 13 | 75.7 |
| Canon | 13 | 69.1 |
| Gallagher | 13 | 68.1 |
| Nokia | 13 | 28.3 |
| ChromeOS | 12 | 42.1 |
| HeroDevs | 12 | 75.8 |
| cloudflare | 12 | 63.1 |
| TYPO3 | 12 | 72.7 |
| FSI | 12 | 74.5 |
| Xerox | 12 | 70.6 |
| 12 | 46.3 | |
| Lexmark | 12 | 68.2 |
| Perforce | 11 | 65.7 |
| Bitdefender | 11 | 78.2 |
| Docker | 11 | 73.1 |
| GitHub_P | 11 | 67.9 |
| jci | 11 | 76.9 |
| airbus | 11 | 82.0 |
| Insyde | 11 | 61.9 |
| XEN | 11 | 30.5 |
| ASR | 11 | 69.8 |
| checkpoint | 10 | 66.2 |
| Supermicro | 10 | 71.6 |
| TQtC | 10 | 68.9 |
| Sophos | 10 | 70.2 |
| Armis | 10 | 78.8 |
| KoreLogic | 10 | 57.1 |
| naver | 10 | 52.9 |
| BlackDuck | 10 | 83.7 |
| debian | 9 | 25.8 |
| TECNOMobile | 9 | 40.3 |
| ESET | 9 | 77.8 |
| BLSOPS | 9 | 75.3 |
| ASUSTOR1 | 9 | 80.4 |
| N-able | 9 | 69.6 |
| Fortra | 9 | 80.7 |
| Carrier | 9 | 81.4 |
| curl | 9 | 44.3 |
| EEF | 9 | 96.2 |
| yandex | 9 | 72.6 |
| cirosec | 8 | 78.0 |
| RTI | 8 | 89.5 |
| Omnissa | 8 | 61.0 |
| Sonatype | 8 | 81.6 |
| AxxonSoft | 8 | 79.6 |
| ONEKEY | 8 | 82.1 |
| hikvision | 8 | 51.8 |
| Xiaomi | 8 | 66.5 |
| Document Fdn. | 7 | 64.1 |
| Honor | 7 | 43.6 |
| bizerba | 7 | 87.1 |
| blackberry | 7 | 69.3 |
| ConnectWise | 7 | 78.9 |
| trellix | 7 | 74.1 |
| Meta | 7 | 69.1 |
| OTRS | 7 | 81.1 |
| NCSC-FI | 7 | 76.3 |
| HiddenLayer | 7 | 70.6 |
| netapp | 7 | 68.9 |
| Medtronic | 7 | 75.7 |
| NETGEAR | 7 | 99.9 |
| flexera | 7 | 85.4 |
| Crestron | 7 | 81.3 |
| Octopus | 7 | 67.4 |
| Checkmarx | 6 | 67.8 |
| Mandiant | 6 | 77.3 |
| TianoCore | 6 | 61.8 |
| KNIME | 6 | 67.3 |
| Pega | 6 | 72.8 |
| harborist | 6 | 65.3 |
| Toreon | 6 | 74.0 |
| S21sec | 6 | 94.2 |
| Palantir | 6 | 64.2 |
| TRO | 6 | 81.2 |
| bcorg | 6 | 73.2 |
| Wiz | 6 | 74.5 |
| LY-Corporation | 6 | 66.8 |
| Netskope | 6 | 78.8 |
| Ping Identity | 6 | 72.5 |
| openssl | 6 | 52.7 |
| Altera | 6 | 90.5 |
| Pentraze | 6 | 74.2 |
| tibco | 5 | 56.6 |
| BT | 5 | 67.8 |
| PureStorage | 5 | 76.8 |
| Kaspersky | 5 | 76.8 |
| SN | 5 | 71.6 |
| Yugabyte | 5 | 69.6 |
| glibc | 5 | 43.6 |
| Hanwha_Vision | 5 | 64.0 |
| NCSC-NL | 5 | 66.6 |
| CyberDanube | 5 | 76.2 |
| OMRON | 5 | 75.2 |
| PandoraFMS | 5 | 79.4 |
| Vivo | 5 | 68.2 |
| redhat-cnalr | 4 | 68.5 |
| ExtremeNetworks | 4 | 75.8 |
| StrongDM | 4 | 70.8 |
| GE_Vernova | 4 | 76.5 |
| ConcreteCMS | 4 | 66.8 |
| DSF | 4 | 53.0 |
| Temporal | 4 | 75.2 |
| upKeeper | 4 | 62.5 |
| CyberArk | 4 | 75.0 |
| freebsd | 4 | 52.0 |
| sba-research | 4 | 85.5 |
| HW | 4 | 68.8 |
| TCS-CERT | 4 | 83.2 |
| floragunn | 4 | 80.0 |
| GandC | 3 | 72.3 |
| HYPR | 3 | 68.0 |
| openjs | 3 | 70.0 |
| Dragos | 3 | 77.7 |
| LGE | 3 | 69.3 |
| Softing | 3 | 87.3 |
| B.Braun | 3 | 78.3 |
| Philips | 3 | 71.7 |
| Saviynt | 3 | 76.3 |
| FSOFT | 3 | 70.3 |
| Proofpoint | 3 | 61.7 |
| NLnet Labs | 3 | 85.7 |
| dahua | 3 | 58.3 |
| Zscaler | 3 | 66.3 |
| TXOne | 3 | 67.0 |
| rami.io | 3 | 77.0 |
| BCNY | 3 | 79.0 |
| Radiometer | 3 | 77.0 |
| arcinfo | 3 | 96.0 |
| Solidigm | 3 | 63.7 |
| Danfoss | 3 | 67.0 |
| OPPO | 3 | 65.3 |
| CrowdStrike | 3 | 79.0 |
| WindRiver | 3 | 74.3 |
| Microchip | 3 | 77.0 |
| krcert | 3 | 70.3 |
| ManageEngine | 3 | 68.7 |
| avaya | 3 | 66.0 |
| Phoenix | 3 | 75.0 |
| Baxter | 2 | 77.5 |
| Genetec | 2 | 79.0 |
| EDB | 2 | 68.0 |
| TML | 2 | 70.5 |
| forcepoint | 2 | 80.0 |
| crafter | 2 | 73.5 |
| Delinea | 2 | 82.0 |
| Cato | 2 | 78.0 |
| Roche | 2 | 72.5 |
| Digi | 2 | 66.5 |
| Bugcrowd | 2 | 66.5 |
| Synaptics | 2 | 66.5 |
| Tcpdump | 2 | 76.5 |
| Huntress | 2 | 45.5 |
| Panasonic_Holdings_Corporation | 2 | 70.0 |
| Canon_EMEA | 2 | 88.0 |
| Neo4j | 2 | 89.5 |
| Seagate | 2 | 76.0 |
| MON-CSIRT | 2 | 75.0 |
| ATIS | 2 | 71.5 |
| OpenNMS | 2 | 78.0 |
| AlgoSec | 2 | 100.0 |
| Opera | 2 | 45.0 |
| Splunk | 2 | 69.0 |
| Forescout | 2 | 75.5 |
| Milestone | 2 | 84.5 |
| ClickHouse | 2 | 56.0 |
| Payara | 2 | 70.5 |
| odoo | 2 | 64.0 |
| Dremio | 1 | 82.0 |
| Hillstone | 1 | 79.0 |
| Profisee | 1 | 77.0 |
| Okta | 1 | 78.0 |
| iManage | 1 | 72.0 |
| OB | 1 | 72.0 |
| dotCMS | 1 | 77.0 |
| openam-jp | 1 | 65.0 |
| rust | 1 | 90.0 |
| openEuler | 1 | 71.0 |
| WDC PSIRT | 1 | 69.0 |
| THA-PSIRT | 1 | 94.0 |
| Vaadin | 1 | 76.0 |
| PaperCut | 1 | 69.0 |
| SoftIron | 1 | 69.0 |
| Jaspersoft | 1 | 65.0 |
| ODA | 1 | 69.0 |
| SailPoint | 1 | 69.0 |
| FERMAX | 1 | 82.0 |
| Ribose | 1 | 82.0 |
| Tanium | 1 | 60.0 |
| larry_cashdollar | 1 | 76.0 |
| SRA | 1 | 100.0 |
| Qualys | 1 | 82.0 |
| ca | 1 | 74.0 |
| tlt_net | 1 | 55.0 |
| Edgewatch | 1 | 74.0 |
| Swift | 1 | 45.0 |
| BECLS | 1 | 81.0 |
| 1E | 1 | 72.0 |
| Anolis | 1 | 74.0 |
| SK-CERT | 1 | 72.0 |
| MIM | 1 | 83.0 |
| YokogawaGroup | 1 | 70.0 |
| Kong | 1 | 69.0 |
| seal | 1 | 69.0 |
| Replicated | 1 | 18.0 |
CNAs that did not disclose CVE in 2025
| Altium | Echo | XONA | Arteche | Hallo_Welt |
| Logitech | Stackable | XI | Intigriti | milestonesys |
| libreswan | GreenRocketSecurity | runZero | SOCRadar | SCIEX |
| M-Files | Alias | Mirantis | Samsung_Mobile | ADI |
| ARCON | NetScaler | ShopBeat | Silver_Peak | Tego_Cyber |
| NX | ELAN | Censys | alibaba | 9front |
| 42Gears | securin | CTOne | TMUS | Cytiva |
| PlexTrac | ZUSO_ART | Ciena | IoT83 | GE_Healthcare |
| OnLogic | WDC_PSIRT | 2N | AppCheck | GV |
| CEP | Dfinity | ZGR | DualVS | Spotfire |
| LMS | OS-S | vx | Dassault_Systemes | Pall |
| Nutanix | ASUSTOR | CISA | senhasegura | LeicaBiosystems |
| IDBS | directcyber | KeeperSecurity | BHV | VULSec |
| Commvault | IDEMIA | Arxscan | DHIS2 | CoolKit |
| KrakenD | MolDev | NetRise | Crafter_CMS | sec1 |
| nodejs | GovTech_CSG | PTC | Baidu | Fluid_Attacks |
| Hitachi_Energy | WrenSecurity | NLnet_Labs | SICK_AG | Automox |
| JAMF | Ampere | HackRTU | FULL | Uniview |
| PingCAP | Almaviva | spartans-security | PingIdentity | Proton |
| PangeaCyber | Gitea | openGauss | Toshiba | SDC |
| The_Missing_Link | obdev | BECDX | OpenBMC | Tigera |
| Halborn | CSW | watchdog | TeamViewer | Stryker |
| Secomea | SmileDigitalHealth | Fidelis | Simplinx | MHV |
| HemoCue | Caliptra | SWI | MyMMT | STAR_Labs |
| DevCycle | Zowe | SCHUTZWERK | Securifera | netflix |
| Profelis | Illumio | Hitachi_Vantara | EA | Leonardo |
| IDT-DNA | BD | KCFTech | ICT | Xylem |
| securepoint | Document_Fdn. | Snow | graphql-java | RealPage |
| Software | YesWeHack |