technology
New Vulnerabilities Published (NVD CVEs, Monthly)
Latest
15,074count
Methodology
## What this measures
The number of new CVE records (publicly disclosed software vulnerabilities) published in NIST's National Vulnerability Database each month.
## Why it matters
It measures how much new attack surface is being disclosed for defenders to patch.
## How to read it
Read the 12-month total (cyber.nvd.cves_published_12m). It rose from 5,143 in January 2026 to 15,074 in September 2026, the highest month on record.
## What it does not say
It measures disclosure, not attacks. Volume depends on how many organisations issue CVEs: for example, the Linux kernel became a CVE issuer in 2024 and has published thousands since. Most CVEs are never exploited; see cyber.cisa.kev_added_12m for those that are.
## Source
NIST National Vulnerability Database, CVE API 2.0, CVEs by published date. Palanor re-counts the last four complete months every day, since NVD backfills. This product uses the NVD API but is not endorsed or certified by the NVD. U.S. government work, public domain.
Read this signal inside the lattice.
Palanor weighs every signal against the world your organization is watching. Methodology is public; integration is the platform.
See it in Palanor →