Security vendor market report, January 2026 | 0-Doubt
Security vendor market report: January 2026
Counts for January 2026 (UTC calendar month) across the vendors 0-Doubt tracks. Figures describe what the sources recorded; they are not a ranking or a judgement of any vendor.
In numbers
327
CVEs published
4
added to CISA KEV
6
funding, acquisition and IPO news items
1
incident news items
0
vendors added to the catalogue
New CVEs
327 CVEs were published in January 2026: 26 critical, 115 high, 128 medium, 23 low, 35 not yet scored.
Source: public vendor feeds, press releases and filings, as listed on the news page. Counted 2026-10-20 21:58 UTC.
Vendors added to the catalogue
No vendors were added to the catalogue in January 2026.
Source: 0-Doubt vendor catalogue, by date the profile was created (merged duplicates excluded). Counted 2026-10-20 21:58 UTC.
How this report is made
Months are UTC calendar months. A report appears only after its month has ended.
CVEs come from NVD and are matched to vendors by name; KEV additions and the ransomware flag come from CISA.
News items are machine-collected from public vendor feeds and filed under the same rules as the news page; nothing here is editorially reviewed or ranked by payment.
The page is rebuilt daily and each section states when it was counted, so late-arriving records can change a figure.
See how trust works for what the platform does and does not verify.
A CVE is matched to a vendor by name, so a count reflects how often NVD records name the vendor, not how secure its products are. A vendor with more products or a larger install base will usually appear more often.
