Reports & Trends

Last updated: June 3, 2026 · Data from the last 30 days ·
Updated daily at 21:00 UTC

Exploitation Activity — Last 30 Days

Daily count of new CVEs added to the CISA Known Exploited Vulnerabilities catalog
and ransomware victims tracked by Ransomware.live. Taller bars mean busier days —
use this to spot clusters and decide whether your team is in a high-tempo period.
66 new KEVs and 1,705 ransomware victims recorded in this window.

New KEVs per Day

2 4 5 7 7 7 7 7 5 5 5 5 6 7 5 May 5 May 12 May 19 May 26 Jun 2

Ransomware Victims per Day

48 96 145 193 127 133 124 149 178 182 193 162 155 159 143 May 5 May 12 May 19 May 26 Jun 2

EPSS Movement Tracker

CVEs whose exploitation probability (EPSS) has increased the most since they were
first published on ThreatPodium. EPSS is a daily probability score from FIRST.org
estimating the likelihood of exploitation within 30 days. A large jump means
attacker tooling or active scanning has increased — these are the CVEs trending
toward confirmed exploitation before the KEV catalog catches up.
Showing 7 CVEs with a movement of
5 percentage points or more.

CVE Vendor / Product First EPSS Current EPSS Change
CVE-2026-0257 Palo Alto Networks PAN-OS 0.1% 36.3% +36.2pp
CVE-2022-0492 Linux Kernel 5.2% 26.3% +21.1pp
CVE-2026-45321 TanStack TanStack 0.0% 17.1% +17.1pp
CVE-2026-9082 Drupal Core 17.3% 34.2% +16.9pp
CVE-2026-8398 Daemon Daemon Tools Lite 0.0% 15.5% +15.5pp
CVE-2026-48172 LiteSpeed cPanel Plugin 0.0% 8.0% +8.0pp
CVE-2026-48027 Nx Nx Console 26.8% 32.1% +5.3pp

Vendor Risk Leaderboard — Last 30 Days

Vendors ranked by cumulative KEV exposure over the last 30 days.
A vendor at the top of this list has had actively exploited vulnerabilities confirmed
by CISA repeatedly — not just in a single busy week. The “Days with KEV Activity”
column shows consistency: a vendor appearing on 8 of 30 days is a structural
concern worth continuous monitoring, not just a one-off patch event.

Microsoft 13 Litespeed 6 Nx 6 Daemon 6 Tanstack 6 Palo Alto Networks 5 Langflow 4 Adobe 3 Drupal 3 Oracle 3

# Vendor Total KEVs (30d) Days with KEV Activity
1 Microsoft 13 3
2 Litespeed 6 6
3 Nx 6 6
4 Daemon 6 6
5 Tanstack 6 6
6 Palo Alto Networks 5 5
7 Langflow 4 4
8 Adobe 3 3
9 Drupal 3 3
10 Oracle 3 3