Statistics
Trends + distributions across KEVs
Comprehensive overview of Known Exploited Vulnerabilities and their characteristics.
Total KEVs
2558
KEVs (Last 30 Days)
1121
CISA KEVs
1619
Beyond CISA KEV
939
Total Tags
31
Total Vendors
787
Intelligence Highlights
Rolling last 7 days by KEV attestation date. “Ahead of CISA” uses operational sources only (excludes CVE metadata ingest). Sensor counts reflect observed exploitation attempts in the honeypot and sensor network (30-day observation retention).
Last 7 Days
New KEVs
30
Beyond CISA KEV
25
In CISA
5
Ahead of CISA
4
Avg Faster
10h
Median Faster
6h
Sensor Telemetry
KEVs in Sensors
9
Active (7d)
9
Exploitation Events (7d)
236
Unique Attackers (7d)
15
Ahead of CISA This Week
| CVE | Vendor / Product | Lead |
|---|---|---|
| CVE-2026-50751 | checkpoint / Quantum Security Gateway, Spark Firewalls | 6 hours faster than CISA KEV |
| CVE-2026-11645 | Google / Chrome | 5 hours faster than CISA KEV |
| CVE-2026-35273 | Oracle Corporation / PeopleSoft Enterprise PeopleTools | 4 hours faster than CISA KEV |
| CVE-2026-10520 | ivanti / Sentry | 1 day faster than CISA KEV |
Trends
KEVs Over Time (Last 12 Months)
KEVs by Year Added
Note: CISA KEV launched on November 3rd, 2021. KEVIntel launched on April 30th, 2025.
KEVs by Tag
Distribution
Table
| Tag | KEV Count |
|---|---|
| cisa | 1619 |
| nuclei_scanner | 990 |
| windows | 423 |
| metasploit | 420 |
| nessus_scanner | 366 |
| malware | 328 |
| microsoft | 296 |
| edge | 263 |
| ransomware | 261 |
| ios | 176 |
| php | 120 |
| macos | 96 |
| linux | 91 |
| java | 90 |
| apache | 61 |
| wordpress | 60 |
| android | 49 |
| dotnet | 24 |
| joomla | 6 |
| python | 5 |
| drupal | 5 |
| elasticsearch | 5 |
| nodejs | 3 |
| redis | 3 |
| ruby | 3 |
| magento | 2 |
| qilin ransomware | 2 |
| mysql | 2 |
| mongodb | 1 |
Distribution
Top 10 Vendors by KEV Count
Top 10 Vendors with Edge KEVs
Vendors with the most KEVs tagged as 'edge' (edge computing, edge devices, etc.)
CVSS Score Distribution
Each chart shows the distribution of CVSS scores for all KEVs. Only KEVs with a score for that version are included in the chart.
CVSS v4.0
CVSS v3.0
CVSS v2.0
EPSS Analysis
EPSS Score Distribution (Last 30 Days)
Top 10 KEVs by EPSS Score
CVE Analysis
Top 10 KEVs by News Mentions
Based on mentions in security news articles and advisories
Top 10 KEVs by Proof of Concepts
Based on publicly available unverified proof of concept exploits
Exploitation Analysis
Time Between CVE Publication and KEV Listing
Note: This shows the time between CVE publication and KEV listing, not necessarily when exploitation began