NVD recorded 2.24 times as many CVEs from January through October as in the same months of 2025
The increase comes as NIST directs vulnerability analysis toward higher-risk records after its enrichment work fell behind submissions in 2025.
By Morgan Laning · Published
Primary source: nist.gov
Why it matters
NIST said its enrichment work did not keep pace with submissions in 2025.
The National Vulnerability Database recorded 92,319 CVEs published from January through October 2026, 2.24 times the 41,213 published in the same period last year, according to a RuntimeWire count using the NVD vulnerability API.
The October increase was sharper: The database recorded 17,481 CVEs published that month, compared with 4,389 in October 2025, or about four times as many. Excluding rejected records, the comparison was 17,060 to 4,273, still roughly fourfold.…
When you purchase through links in our articles, we may earn a small commission. This doesn’t affect our editorial independence.