VendorsFIRST
FIRST
Cybersecurity reports and statistics published by FIRST
8 categories1 reports
Research Reports
Reports and publications from FIRST
Recent Statistics & Reports
There were 6,420 excess CVEs recorded through April 2026, representing a 46.3% cumulative drift above the February forecast.
6/20/2026•
VulnerabilitiesCVE ManagementCVEs
Annual vulnerability disclosures are on pace to approach 70,000 for the first time in history.
6/20/2026•
VulnerabilitiesSecurity TrendsVulnerability Disclosures
GitHub Security Advisory (GHSA) volume increased 449% year-over-year.
6/20/2026•
VulnerabilitiesOpen Source Security
VulnCheck CNA-of-Last-Resort activity increased 3,119%.
6/20/2026•
VulnerabilitiesCVE Assignment
Mozilla CNA Q1 CVE disclosures spiked 164% due to AI-assisted tooling against the Firefox engine.
6/20/2026•
VulnerabilitiesOpen Source SecurityArtificial Intelligence
The CISA KEV catalog contained 1,587 entries as of May 1, 2026.
6/20/2026•
ExploitabilityVulnerability CatalogsCISA KEV
EPSS had scores for 329,934 CVEs as of May 1, 2026.
6/20/2026•
ExploitabilityVulnerability Scoring
Actual CVE disclosures are running 46.3% above projections published four months earlier.
6/20/2026•
VulnerabilitiesCVE Management
The 2026 projected total of CVE disclosures is approximately 66,000, up from a February median projection of 59,427.
6/20/2026•
VulnerabilitiesCVE ManagementCVE Disclosures