Skip to content
Palanor is in early release, with our founding customers.Become a founding customer →
PalanorPalanor
← All signals

technology

New Vulnerabilities Published (NVD CVEs, Monthly)

Latest

15,074count

Methodology

## What this measures

The number of new CVE records (publicly disclosed software vulnerabilities) published in NIST's National Vulnerability Database each month.

## Why it matters

It measures how much new attack surface is being disclosed for defenders to patch.

## How to read it

Read the 12-month total (cyber.nvd.cves_published_12m). It rose from 5,143 in January 2026 to 15,074 in September 2026, the highest month on record.

## What it does not say

It measures disclosure, not attacks. Volume depends on how many organisations issue CVEs: for example, the Linux kernel became a CVE issuer in 2024 and has published thousands since. Most CVEs are never exploited; see cyber.cisa.kev_added_12m for those that are.

## Source

NIST National Vulnerability Database, CVE API 2.0, CVEs by published date. Palanor re-counts the last four complete months every day, since NVD backfills. This product uses the NVD API but is not endorsed or certified by the NVD. U.S. government work, public domain.

Read this signal inside the lattice.

Palanor weighs every signal against the world your organization is watching. Methodology is public; integration is the platform.

See it in Palanor →

Cookies

We only use essential cookies to keep you signed in and remember your theme. No analytics, no tracking, no ads. See the Privacy Policy for the full read.