Statistiche CVE: settembre 2026

🌐 Scopri le cifre chiave delle vulnerabilità pubblicate a settembre 2026 su CVE Find.

🔎 Panoramica

• Numero totale di CVE pubblicate : 15,075 (+18.5% rispetto al mese precedente)
• Vulnerabilità aggiunte al catalogo CISA KEV : 43

📂 Distribuzione per categorie principali

• Authorization problems : 2160
• Cross-site Scripting : 1114
• Overflow : 938
• Memory Corruption : 575
• SQL Injection : 493
• Directory Traversal : 431

📈 Distribuzione per punteggio CVSS

• Low : 485
• Medium : 4965
• High : 5749
• Critical : 1447

🏢 Fornitori più colpiti

1. microsoft : 1142
2. google : 646
3. apple : 347
4. oracle : 309
5. ibm : 221

📦 Prodotti più colpiti

1. microsoft windows_server_2025 : 679
2. microsoft windows_server_2022 : 641
3. microsoft windows_11_24h2 : 631
4. microsoft windows_11_26h1 : 631
5. microsoft windows_11_25h2 : 630

⚠️ CVE rilevanti del mese

• CVE-2026-55107 (10 CRITICAL) : Kobako is a Ruby gem that embeds a Wasm-isolated mruby interpreter inside applications, allowing execution of untrusted Ruby scripts (LLM-generated code, user formulas, student ...
• CVE-2026-102427 (10 CRITICAL) : Joomla Extension - ordasoft.com - Unauthenticated Remote Code Execution in OrdaSoft Joomla CCK < 8.3.16 - site/uploader.php is reached through the component’s normal frontend ro...
• CVE-2026-96349 (10 CRITICAL) : Unauthenticated Remote Code Execution (RCE) in SiteSkite <= 2.1.8 versions.
• CVE-2026-71379 (10 CRITICAL) : The file export endpoint allows any unauthenticated attacker to export arbitrary database tables by sending a crafted POST request.
• CVE-2026-96587 (10 CRITICAL) : The Viidure Android application embeds permanent, plaintext cloud storage credentials within its compiled code. These credentials provide full access to critical platform storag...

Esplora tutti i dati in dettaglio su CVE Find.