Security vendor market report, September 2026 | 0-Doubt
Security vendor market report: September 2026
Counts for September 2026 (UTC calendar month) across the vendors 0-Doubt tracks. Figures describe what the sources recorded; they are not a ranking or a judgement of any vendor.
In numbers
1,395
CVEs published
9
added to CISA KEV
5
funding, acquisition and IPO news items
166
incident news items
0
vendors added to the catalogue
New CVEs
1,395 CVEs were published in September 2026: 130 critical, 452 high, 477 medium, 63 low, 273 not yet scored.
No vendors were added to the catalogue in September 2026.
Source: 0-Doubt vendor catalogue, by date the profile was created (merged duplicates excluded). Counted 2026-10-20 23:57 UTC.
How this report is made
Months are UTC calendar months. A report appears only after its month has ended.
CVEs come from NVD and are matched to vendors by name; KEV additions and the ransomware flag come from CISA.
News items are machine-collected from public vendor feeds and filed under the same rules as the news page; nothing here is editorially reviewed or ranked by payment.
The page is rebuilt daily and each section states when it was counted, so late-arriving records can change a figure.
See how trust works for what the platform does and does not verify.
A CVE is matched to a vendor by name, so a count reflects how often NVD records name the vendor, not how secure its products are. A vendor with more products or a larger install base will usually appear more often.
