Empirical Security reported that 2026 has already published more CVEs than all of 2025 (48,154) and is 9,754 ahead with four months left to count.
Public source
Publisher name
Public post
Last year's record is no longer a ceiling; at August's rate, it is a midpoint. August 2026 closed with 12,291 published CVEs, up from 3,628 in August 2025 (+238.8%). Som…
Company
Empirical Security
Security Intelligence and Decision Support, Tailored to your Enterprise.
- Industry
- Computer and Network Security
- Location
- Chicago, US
- Company size
- 11–50 employees
About Empirical Security
Empirical builds mathematical models for security data. We maintain the world’s most advanced global models for cybersecurity, and we build local models that respond to your enterprise’s specific context and threat landscape.
See moreLatest activity
Latest activity from Empirical Security
14 signals
Research & Knowledge
Empirical Security reported that of the 51,219 CVEs published in 2026 that NVD has settled, 20,076 are marked as Deferred.
Research & Knowledge
Empirical Security published 12% of CVEs in 2026 with the CNA tag.
Research & Knowledge
Empirical Security found that three of the 26 CNAs tagged nearly every record in 2026.
Discover more
Similar signals
Similar public activity from other companies.
Research & Knowledge
Kai
Kai CISA reported that in the first eight months of 2026, 53,373 CVEs were published, arriving at 233 a day.
Research & Knowledge
ReliaQuest
ReliaQuest research points to a new defense timeline with 6,202 high and critical vulnerabilities identified, 90.6% confirmed valid, and a mean time-to-exploit moving to 7 days before public disclosure.
Research & Knowledge
Cyver.io
Cyver.io reports that the average organization now runs 83 security solutions from 29 vendors in the BDO Global and European Cybersecurity Industry report for July 2026.
Research & Knowledge
Miggo Security
Miggo Security published the August CVE Threat Report, which reviewed 10,550+ vulnerabilities last month.
Research & Knowledge
Censys