🔽 Vulnerability Volumes
More ≠ More
In 2025, CISA published 508 ICS advisories, up from 423 in 2024 and 380 in 2023. Unique advisories tracked across all sources, including vendor PSIRTs and international CERTs, rose 20.6% year over year from 1,830 to 2,207. At first glance, those numbers sound like a worsening crisis. They are more accurately a sign that the disclosure ecosystem is maturing.
Here’s a sneak peek of some stats you’ll find in the OT Vulnerability Intelligence report:
► Of 2,203 High/Critical CVEs tracked, only 29 (1.32%) appear in CISA’s Known Exploited Vulnerabilities catalog.
► The proportion of vulnerabilities tracked by official CISA ICS Advisories fell from 28.3% in 2024 to 17.5% in 2025
► Medium-severity CVEs nearly doubled year over year (558 to 1,044+)