Patch, track, repeat: The 2025 CVE retrospective
Summary: Cisco Talos counted 48,196 CVEs in 2025, about 132 per day, with XSS, SQL injection, and deserialization flaws accounting for roughly 10,000 of them. The Known Exploited Vulnerabilities Catalog grew to 241 entries from 186 in 2024, a 30% increase, and 94 of the 2025 additions (39%) came from CVE-2024 and earlier, including vulnerabilities dating back to 2007.
Why it matters: Fifty-four of the year's KEVs hit firewalls, VPNs, and other network appliances, and the KEV vendor count rose to 99 from 79 in October, so each vendor in your environment is another patch cycle and advisory to track. Nearly four in ten newly exploited flaws were already on the books before 2025, which means legacy systems you cannot patch need compensating controls such as microsegmentation and network isolation.
Read the original at Cisco Talos ↗
- Topics
- Vulnerabilities & Patching
- Related
- Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026PostgreSQL Patches 52 Flaws, Including 22-Year-Old Bug Enabling Authenticated RCE Cyber Risks · Nov 13, 2026