{
 "quarter": "Q3 2026",
 "start": "2026-07-01",
 "end": "2026-09-30",
 "built": "2026-10-25",
 "kev": {
  "added": 100,
  "previous_quarter": 75,
  "same_quarter_last_year": 51,
  "ransomware_known": 6,
  "by_vendor": {
   "Microsoft": 12,
   "Cisco": 7,
   "Linux": 5,
   "Citrix": 4,
   "JFrog": 4,
   "Fortinet": 4,
   "SonicWall": 4,
   "MikroTik": 3,
   "WordPress": 3,
   "Adobe": 3,
   "Check Point": 3,
   "Google": 3,
   "N-able": 3,
   "Apple": 2,
   "Arista": 2,
   "PaperCut": 2,
   "Red Hat": 2,
   "Oracle": 2,
   "TrueConf": 2,
   "Langflow": 2,
   "WSO2": 1,
   "F5": 1,
   "Zyxel": 1,
   "Acronis": 1,
   "ConnectWise": 1,
   "GitLab": 1,
   "BerriAI": 1,
   "Kludex": 1,
   "Kestra": 1,
   "Sangoma": 1,
   "ownCloud": 1,
   "Ajax.NET Professional": 1,
   "Gitea": 1,
   "Synacor": 1,
   "MLflow": 1,
   "Broadcom": 1,
   "Ray-Project": 1,
   "Metabase": 1,
   "Progress": 1,
   "JetBrains": 1,
   "Apache": 1,
   "IBM": 1,
   "DD-WRT": 1,
   "KNX Association": 1,
   "Balbooa": 1,
   "iCagenda": 1,
   "JoomShaper": 1,
   "Joomlack": 1
  },
  "by_cve_age": {
   "same": 86,
   "1": 5,
   "2-5": 5,
   "6+": 4
  },
  "by_cwe": {
   "CWE-287": 8,
   "CWE-94": 6,
   "CWE-306": 6,
   "CWE-78": 6,
   "CWE-787": 5,
   "CWE-502": 5,
   "CWE-22": 4,
   "CWE-89": 4,
   "CWE-288": 4,
   "CWE-918": 4,
   "CWE-119": 3,
   "CWE-122": 3,
   "CWE-284": 3,
   "CWE-434": 3,
   "CWE-863": 2,
   "CWE-121": 2,
   "CWE-269": 2,
   "CWE-352": 2,
   "CWE-177": 1,
   "CWE-841": 1,
   "CWE-98": 1,
   "CWE-347": 1,
   "CWE-20": 1,
   "CWE-295": 1,
   "CWE-362": 1,
   "CWE-754": 1,
   "CWE-693": 1,
   "CWE-648": 1,
   "CWE-276": 1,
   "CWE-862": 1,
   "CWE-35": 1,
   "CWE-88": 1,
   "CWE-1336": 1,
   "CWE-59": 1,
   "CWE-96": 1,
   "CWE-908": 1,
   "CWE-843": 1,
   "CWE-444": 1,
   "CWE-184": 1,
   "CWE-441": 1,
   "CWE-470": 1,
   "CWE-415": 1,
   "CWE-1390": 1,
   "CWE-244": 1,
   "CWE-416": 1,
   "CWE-77": 1,
   "CWE-311": 1,
   "CWE-259": 1,
   "CWE-200": 1,
   "CWE-436": 1,
   "CWE-829": 1,
   "CWE-645": 1,
   "CWE-1220": 1,
   "CWE-639": 1
  },
  "due_days_median": 3,
  "due_7_days_or_less": 78,
  "cves": [
   "CVE-2008-4128",
   "CVE-2015-3246",
   "CVE-2015-5287",
   "CVE-2019-1068",
   "CVE-2021-23758",
   "CVE-2021-27137",
   "CVE-2022-0995",
   "CVE-2023-4346",
   "CVE-2023-49105",
   "CVE-2025-25249",
   "CVE-2025-39682",
   "CVE-2025-39964",
   "CVE-2025-62593",
   "CVE-2025-68686",
   "CVE-2026-0770",
   "CVE-2026-15409",
   "CVE-2026-15410",
   "CVE-2026-16232",
   "CVE-2026-16812",
   "CVE-2026-18556",
   "CVE-2026-18577",
   "CVE-2026-19490",
   "CVE-2026-20079",
   "CVE-2026-20316",
   "CVE-2026-20349",
   "CVE-2026-21962",
   "CVE-2026-25089",
   "CVE-2026-33824",
   "CVE-2026-34486",
   "CVE-2026-39808",
   "CVE-2026-42016",
   "CVE-2026-42018",
   "CVE-2026-45659",
   "CVE-2026-46817",
   "CVE-2026-48282",
   "CVE-2026-48710",
   "CVE-2026-48908",
   "CVE-2026-48939",
   "CVE-2026-49869",
   "CVE-2026-50522",
   "CVE-2026-53266",
   "CVE-2026-53362",
   "CVE-2026-5430",
   "CVE-2026-55040",
   "CVE-2026-55255",
   "CVE-2026-56155",
   "CVE-2026-56164",
   "CVE-2026-56290",
   "CVE-2026-56291",
   "CVE-2026-58644",
   "CVE-2026-58704",
   "CVE-2026-59310",
   "CVE-2026-59822",
   "CVE-2026-60004",
   "CVE-2026-60137",
   "CVE-2026-63030",
   "CVE-2026-63077",
   "CVE-2026-64849",
   "CVE-2026-65400",
   "CVE-2026-65660",
   "CVE-2026-66384",
   "CVE-2026-67277",
   "CVE-2026-67279",
   "CVE-2026-68820",
   "CVE-2026-71362",
   "CVE-2026-72529",
   "CVE-2026-72530",
   "CVE-2026-7273",
   "CVE-2026-72898",
   "CVE-2026-73570",
   "CVE-2026-75650",
   "CVE-2026-76460",
   "CVE-2026-76461",
   "CVE-2026-76504",
   "CVE-2026-8037",
   "CVE-2026-81578",
   "CVE-2026-81963",
   "CVE-2026-82078",
   "CVE-2026-82329",
   "CVE-2026-83548",
   "CVE-2026-83549",
   "CVE-2026-8452",
   "CVE-2026-84869",
   "CVE-2026-85046",
   "CVE-2026-85102",
   "CVE-2026-85706",
   "CVE-2026-85880",
   "CVE-2026-86060",
   "CVE-2026-86218",
   "CVE-2026-86950",
   "CVE-2026-87491",
   "CVE-2026-87886",
   "CVE-2026-87902",
   "CVE-2026-88771",
   "CVE-2026-88772",
   "CVE-2026-9198",
   "CVE-2026-93616",
   "CVE-2026-93952",
   "CVE-2026-94127",
   "CVE-2026-9586"
  ]
 },
 "cve_published": {
  "quarter": 36953,
  "previous_quarter": 20695,
  "same_quarter_last_year": 11722
 },
 "patch_tuesday": [
  {
   "alias": "2026-Jul",
   "month": "July 2026",
   "released": "2026-07-14",
   "count": 571,
   "exploited": 3,
   "critical": 57,
   "slug": null
  },
  {
   "alias": "2026-Aug",
   "month": "August 2026",
   "released": "2026-08-11",
   "count": 402,
   "exploited": 1,
   "critical": 44,
   "slug": "patch-tuesday-2026-08"
  },
  {
   "alias": "2026-Sep",
   "month": "September 2026",
   "released": "2026-09-08",
   "count": 973,
   "exploited": 2,
   "critical": 113,
   "slug": "patch-tuesday-2026-09"
  }
 ],
 "patch_tuesday_missing": [],
 "sources": [
  "https://www.cisa.gov/known-exploited-vulnerabilities-catalog",
  "https://github.com/CVEProject/cvelistV5",
  "https://api.msrc.microsoft.com/cvrf/v3.0/updates"
 ],
 "license": "CC BY 4.0, attribution: Gociux (https://gociux.com)"
}