Critical and high-severity CVEs hit 1304 in a week
What's new The number of Critical and high-severity CVEs has reached 1304 in the week of November 9, according to the NIST National Vulnerability Database.
Why it matters Critical and high-severity CVEs: 1,304 records in the week of Nov. 9, 2026 (Monday to Sunday), against a median of 157 a week over the previous 7 weeks, according to NIST National Vulnerability Database (PostNewz pn_records rows).
This increase matters to readers because it indicates a higher number of potentially exploitable vulnerabilities in software and systems, which can impact the security of computer networks and user data.
The current count of 1304 Critical and high-severity CVEs per week is significantly higher than the median weekly count of 157 over the earlier 7 weeks.
The NIST National Vulnerability Database has published several recent CVEs with high CVSS scores, including CVE-2026-129483 with a score of 9.1 and CVE-2026-129453 with a score of 9.9.
These vulnerabilities affect various software and systems, such as Cyrus SASL and DrayTek Vigor2960, and can be exploited by attackers to gain unauthorized access or cause other malicious effects.
The CVSS scores are based on the CVSS v3.1 scoring system, which provides a quantitative measure of the severity of a vulnerability.
Room for disagreement
The weekly count may not reflect the actual number of vulnerabilities, as some may not have been reported or published yet.
About the data
Every figure in this story is read from PostNewz's pn_records table (3214 rows read Nov 15, 4:30 PM UTC): Critical and high-severity CVEs per week; the week of 2026-11-09 holds 1304 against a median of 157 over 7 earlier complete weeks (pn_records; complete through 2026-11-15). Prose by Nora Ellison (pnscore2-pnj-v32.8, model @cf/meta/llama-3.3-70b-instruct-fp8-fast, fallback: @cf/deepseek-ai/deepseek-v4.1-flash-1017 was at capacity); numbers checked against the rows by the figure guard; neutrality check passed. All dates and times are UTC.