Skip to content

Data collected

CVEs Live

Exploited vulnerabilities by vendor

All 284 vendors and projects named in the CISA KEV catalog, counted by confirmed exploitation, not by CVEs published.

Build snapshot collected · KEV catalog 2026.10.02 · EPSS of 2 Oct 2026 · not a live feed: collected once, at build time

284 vendors · most entries first.

  1. Microsoft389 in KEV117 with known ransomware use
  2. Cisco100 in KEV7 with known ransomware use
  3. Apple95 in KEV0 with known ransomware use
  4. Adobe82 in KEV11 with known ransomware use
  5. Google75 in KEV0 with known ransomware use
  6. Oracle46 in KEV13 with known ransomware use
  7. Apache40 in KEV8 with known ransomware use
  8. Ivanti35 in KEV12 with known ransomware use
  9. Fortinet31 in KEV14 with known ransomware use
  10. Linux31 in KEV2 with known ransomware use
  11. Citrix26 in KEV7 with known ransomware use
  12. D-Link26 in KEV2 with known ransomware use
  13. VMware26 in KEV9 with known ransomware use
  14. SonicWall19 in KEV13 with known ransomware use
  15. Synacor19 in KEV6 with known ransomware use
  16. Android17 in KEV0 with known ransomware use
  17. Palo Alto Networks15 in KEV6 with known ransomware use
  18. Samsung15 in KEV0 with known ransomware use
  19. SAP14 in KEV3 with known ransomware use
  20. Atlassian13 in KEV8 with known ransomware use
  21. Mozilla13 in KEV1 with known ransomware use
  22. Zyxel13 in KEV2 with known ransomware use
  23. Qualcomm12 in KEV0 with known ransomware use
  24. Trend Micro12 in KEV0 with known ransomware use
  25. QNAP11 in KEV9 with known ransomware use
  26. Roundcube11 in KEV0 with known ransomware use
  27. SolarWinds11 in KEV2 with known ransomware use
  28. Arm9 in KEV0 with known ransomware use
  29. Progress9 in KEV4 with known ransomware use
  30. Red Hat9 in KEV4 with known ransomware use
  31. Zoho9 in KEV2 with known ransomware use
  32. F58 in KEV4 with known ransomware use
  33. IBM8 in KEV2 with known ransomware use
  34. Juniper8 in KEV0 with known ransomware use
  35. NETGEAR8 in KEV0 with known ransomware use
  36. Mitel7 in KEV5 with known ransomware use
  37. Sophos7 in KEV2 with known ransomware use
  38. Jenkins6 in KEV1 with known ransomware use
  39. TP-Link6 in KEV0 with known ransomware use
  40. WordPress6 in KEV0 with known ransomware use
  41. Broadcom5 in KEV1 with known ransomware use
  42. Check Point5 in KEV2 with known ransomware use
  43. DrayTek5 in KEV0 with known ransomware use
  44. Drupal5 in KEV2 with known ransomware use
  45. Exim5 in KEV1 with known ransomware use
  46. GitLab5 in KEV1 with known ransomware use
  47. GNU5 in KEV0 with known ransomware use
  48. Langflow5 in KEV1 with known ransomware use
  49. MikroTik5 in KEV0 with known ransomware use
  50. N-able5 in KEV0 with known ransomware use
  51. PaperCut5 in KEV2 with known ransomware use
  52. RARLAB5 in KEV4 with known ransomware use
  53. Accellion4 in KEV4 with known ransomware use
  54. ConnectWise4 in KEV2 with known ransomware use
  55. Craft CMS4 in KEV0 with known ransomware use
  56. Fortra4 in KEV2 with known ransomware use
  57. GIGABYTE4 in KEV4 with known ransomware use
  58. Gladinet4 in KEV0 with known ransomware use
  59. JetBrains4 in KEV4 with known ransomware use
  60. JFrog4 in KEV0 with known ransomware use
  61. Kentico4 in KEV0 with known ransomware use
  62. Nagios4 in KEV0 with known ransomware use
  63. Sangoma4 in KEV0 with known ransomware use
  64. SimpleHelp4 in KEV3 with known ransomware use
  65. Sitecore4 in KEV1 with known ransomware use
  66. Ubiquiti4 in KEV0 with known ransomware use
  67. Veeam4 in KEV4 with known ransomware use
  68. WatchGuard4 in KEV1 with known ransomware use
  69. Arista3 in KEV0 with known ransomware use
  70. ASUS3 in KEV0 with known ransomware use
  71. BerriAI3 in KEV0 with known ransomware use
  72. BeyondTrust3 in KEV1 with known ransomware use
  73. CrushFTP3 in KEV1 with known ransomware use
  74. Dassault Systèmes3 in KEV0 with known ransomware use
  75. DotNetNuke (DNN)3 in KEV1 with known ransomware use
  76. Elastic3 in KEV0 with known ransomware use
  77. ImageMagick3 in KEV0 with known ransomware use
  78. Kaseya3 in KEV3 with known ransomware use
  79. Laravel3 in KEV1 with known ransomware use
  80. Meta Platforms3 in KEV0 with known ransomware use
  81. OSGeo3 in KEV0 with known ransomware use
  82. PHP3 in KEV1 with known ransomware use
  83. Qlik3 in KEV3 with known ransomware use
  84. Rails3 in KEV0 with known ransomware use
  85. Realtek3 in KEV0 with known ransomware use
  86. SaltStack3 in KEV0 with known ransomware use
  87. SmarterTools3 in KEV3 with known ransomware use
  88. SysAid3 in KEV1 with known ransomware use
  89. TeleMessage3 in KEV0 with known ransomware use
  90. Tenda3 in KEV0 with known ransomware use
  91. TrueConf3 in KEV0 with known ransomware use
  92. Veritas3 in KEV3 with known ransomware use
  93. VMware Tanzu3 in KEV1 with known ransomware use
  94. Acronis2 in KEV0 with known ransomware use
  95. Advantive2 in KEV0 with known ransomware use
  96. Array Networks2 in KEV1 with known ransomware use
  97. Aviatrix2 in KEV0 with known ransomware use
  98. Cleo2 in KEV2 with known ransomware use
  99. Commvault2 in KEV0 with known ransomware use
  100. CWP2 in KEV0 with known ransomware use
  101. CyberPersons2 in KEV2 with known ransomware use
  102. Dahua2 in KEV0 with known ransomware use
  103. Dasan2 in KEV1 with known ransomware use
  104. Dell2 in KEV0 with known ransomware use
  105. EyesOfNetwork2 in KEV0 with known ransomware use
  106. GeoVision2 in KEV0 with known ransomware use
  107. Grafana Labs2 in KEV0 with known ransomware use
  108. Hewlett Packard (HP)2 in KEV0 with known ransomware use
  109. Hikvision2 in KEV0 with known ransomware use
  110. Hitachi Vantara2 in KEV0 with known ransomware use
  111. IETF2 in KEV0 with known ransomware use
  112. Intel2 in KEV1 with known ransomware use
  113. LiteSpeed2 in KEV0 with known ransomware use
  114. Metabase2 in KEV0 with known ransomware use
  115. Micro Focus2 in KEV0 with known ransomware use
  116. MinIO2 in KEV0 with known ransomware use
  117. MongoDB2 in KEV0 with known ransomware use
  118. NUUO2 in KEV0 with known ransomware use
  119. OpenPLC2 in KEV0 with known ransomware use
  120. ownCloud2 in KEV0 with known ransomware use
  121. Paessler2 in KEV0 with known ransomware use
  122. PEAR2 in KEV0 with known ransomware use
  123. PTZOptics2 in KEV0 with known ransomware use
  124. Quest2 in KEV1 with known ransomware use
  125. Rejetto2 in KEV1 with known ransomware use
  126. Reolink2 in KEV0 with known ransomware use
  127. ServiceNow2 in KEV0 with known ransomware use
  128. Sonatype2 in KEV0 with known ransomware use
  129. Sudo2 in KEV0 with known ransomware use
  130. Telerik2 in KEV1 with known ransomware use
  131. ThinkPHP2 in KEV0 with known ransomware use
  132. TIBCO2 in KEV0 with known ransomware use
  133. Unraid2 in KEV0 with known ransomware use
  134. vBulletin2 in KEV0 with known ransomware use
  135. Versa2 in KEV0 with known ransomware use
  136. Wing FTP Server2 in KEV0 with known ransomware use
  137. WSO22 in KEV1 with known ransomware use
  138. Zabbix2 in KEV0 with known ransomware use
  139. Zammad GmbH2 in KEV0 with known ransomware use
  140. 7-Zip1 in KEV0 with known ransomware use
  141. Acclaim Systems1 in KEV0 with known ransomware use
  142. Adminer1 in KEV0 with known ransomware use
  143. Ajax.NET Professional1 in KEV0 with known ransomware use
  144. Alcatel1 in KEV0 with known ransomware use
  145. Amcrest1 in KEV0 with known ransomware use
  146. AMI1 in KEV0 with known ransomware use
  147. Aquasecurity1 in KEV0 with known ransomware use
  148. Arcadyan1 in KEV0 with known ransomware use
  149. Arcserve1 in KEV0 with known ransomware use
  150. Artifex1 in KEV0 with known ransomware use
  151. Audinate1 in KEV0 with known ransomware use
  152. Balbooa1 in KEV0 with known ransomware use
  153. Barracuda Networks1 in KEV0 with known ransomware use
  154. BQE1 in KEV1 with known ransomware use
  155. Cacti1 in KEV0 with known ransomware use
  156. ChakraCore1 in KEV0 with known ransomware use
  157. Checkbox1 in KEV0 with known ransomware use
  158. Code Aurora1 in KEV0 with known ransomware use
  159. Crestron1 in KEV0 with known ransomware use
  160. D-Link and TRENDnet1 in KEV0 with known ransomware use
  161. Daemon1 in KEV0 with known ransomware use
  162. DD-WRT1 in KEV0 with known ransomware use
  163. Delta Electronics1 in KEV0 with known ransomware use
  164. Digiever1 in KEV0 with known ransomware use
  165. Docker1 in KEV0 with known ransomware use
  166. dotCMS1 in KEV1 with known ransomware use
  167. Edimax1 in KEV0 with known ransomware use
  168. Embedthis1 in KEV0 with known ransomware use
  169. Erlang1 in KEV0 with known ransomware use
  170. FatPipe1 in KEV0 with known ransomware use
  171. ForgeRock1 in KEV1 with known ransomware use
  172. FreeType1 in KEV0 with known ransomware use
  173. Fuel CMS1 in KEV0 with known ransomware use
  174. FXC1 in KEV0 with known ransomware use
  175. Git1 in KEV0 with known ransomware use
  176. Gitea1 in KEV0 with known ransomware use
  177. Gogs1 in KEV0 with known ransomware use
  178. Grandstream1 in KEV0 with known ransomware use
  179. Hewlett Packard Enterprise (HPE)1 in KEV0 with known ransomware use
  180. iCagenda1 in KEV0 with known ransomware use
  181. IGEL1 in KEV0 with known ransomware use
  182. Ignite Realtime1 in KEV0 with known ransomware use
  183. InduSoft1 in KEV0 with known ransomware use
  184. Joomla!1 in KEV0 with known ransomware use
  185. Joomlack1 in KEV0 with known ransomware use
  186. JoomShaper1 in KEV0 with known ransomware use
  187. JQuery1 in KEV0 with known ransomware use
  188. Justice AV Solutions1 in KEV0 with known ransomware use
  189. Kestra1 in KEV0 with known ransomware use
  190. Kingsoft1 in KEV0 with known ransomware use
  191. Kludex1 in KEV0 with known ransomware use
  192. KNX Association1 in KEV0 with known ransomware use
  193. Lantronix1 in KEV0 with known ransomware use
  194. LG1 in KEV0 with known ransomware use
  195. Libraesva1 in KEV0 with known ransomware use
  196. Liferay1 in KEV0 with known ransomware use
  197. Looking Glass1 in KEV0 with known ransomware use
  198. Marimo1 in KEV0 with known ransomware use
  199. McAfee1 in KEV0 with known ransomware use
  200. MDaemon1 in KEV0 with known ransomware use
  201. MediaTek1 in KEV0 with known ransomware use
  202. Meta1 in KEV1 with known ransomware use
  203. Mirasvit1 in KEV0 with known ransomware use
  204. MLflow1 in KEV0 with known ransomware use
  205. Motex1 in KEV0 with known ransomware use
  206. n8n1 in KEV0 with known ransomware use
  207. NAKIVO1 in KEV0 with known ransomware use
  208. Netis1 in KEV0 with known ransomware use
  209. Netwrix1 in KEV1 with known ransomware use
  210. NextGen Healthcare1 in KEV1 with known ransomware use
  211. Nice1 in KEV0 with known ransomware use
  212. North Grid1 in KEV0 with known ransomware use
  213. Nostromo1 in KEV0 with known ransomware use
  214. Notepad++1 in KEV0 with known ransomware use
  215. Novi Survey1 in KEV0 with known ransomware use
  216. Npm package1 in KEV0 with known ransomware use
  217. Nx1 in KEV1 with known ransomware use
  218. October CMS1 in KEV0 with known ransomware use
  219. Omnissa1 in KEV0 with known ransomware use
  220. OpenBSD1 in KEV0 with known ransomware use
  221. OpenSSL1 in KEV0 with known ransomware use
  222. Perl1 in KEV0 with known ransomware use
  223. PHP Group1 in KEV1 with known ransomware use
  224. phpMyAdmin1 in KEV0 with known ransomware use
  225. PHPUnit1 in KEV0 with known ransomware use
  226. Pi-hole1 in KEV0 with known ransomware use
  227. PlaySMS1 in KEV0 with known ransomware use
  228. Plex1 in KEV0 with known ransomware use
  229. Prettier1 in KEV0 with known ransomware use
  230. Primetek1 in KEV0 with known ransomware use
  231. ProjectSend1 in KEV0 with known ransomware use
  232. PTC1 in KEV1 with known ransomware use
  233. Pulse Secure1 in KEV0 with known ransomware use
  234. QNAP Systems1 in KEV0 with known ransomware use
  235. Qualitia1 in KEV0 with known ransomware use
  236. Ray-Project1 in KEV0 with known ransomware use
  237. rConfig1 in KEV0 with known ransomware use
  238. React Native Community1 in KEV0 with known ransomware use
  239. Redis1 in KEV0 with known ransomware use
  240. reviewdog1 in KEV0 with known ransomware use
  241. Rockwell1 in KEV0 with known ransomware use
  242. Ruckus Wireless1 in KEV0 with known ransomware use
  243. Samba1 in KEV1 with known ransomware use
  244. Schneider Electric1 in KEV0 with known ransomware use
  245. ScienceLogic1 in KEV0 with known ransomware use
  246. Siemens1 in KEV0 with known ransomware use
  247. Sierra Wireless1 in KEV0 with known ransomware use
  248. SIMalliance1 in KEV0 with known ransomware use
  249. SKYSEA1 in KEV0 with known ransomware use
  250. Smartbedded1 in KEV0 with known ransomware use
  251. SolarView1 in KEV0 with known ransomware use
  252. Soliton Systems K.K1 in KEV0 with known ransomware use
  253. Splunk1 in KEV0 with known ransomware use
  254. Spreadsheet::ParseExcel1 in KEV0 with known ransomware use
  255. Srimax1 in KEV0 with known ransomware use
  256. SugarCRM1 in KEV0 with known ransomware use
  257. Sumavision1 in KEV0 with known ransomware use
  258. Sunhillo1 in KEV0 with known ransomware use
  259. Symantec1 in KEV0 with known ransomware use
  260. TanStack1 in KEV1 with known ransomware use
  261. TeamT51 in KEV0 with known ransomware use
  262. TeamViewer1 in KEV0 with known ransomware use
  263. Teclib1 in KEV0 with known ransomware use
  264. TerraMaster1 in KEV1 with known ransomware use
  265. tj-actions1 in KEV0 with known ransomware use
  266. Treck TCP/IP stack1 in KEV0 with known ransomware use
  267. Trihedral1 in KEV0 with known ransomware use
  268. Trimble1 in KEV0 with known ransomware use
  269. TVT1 in KEV0 with known ransomware use
  270. Twilio1 in KEV0 with known ransomware use
  271. Unitronics1 in KEV0 with known ransomware use
  272. Vite1 in KEV0 with known ransomware use
  273. Wazuh1 in KEV0 with known ransomware use
  274. WebKitGTK1 in KEV0 with known ransomware use
  275. Webmin1 in KEV1 with known ransomware use
  276. WebPros1 in KEV1 with known ransomware use
  277. WebRTC1 in KEV1 with known ransomware use
  278. Widget Factory1 in KEV0 with known ransomware use
  279. XStream1 in KEV0 with known ransomware use
  280. XWiki1 in KEV0 with known ransomware use
  281. Yealink1 in KEV0 with known ransomware use
  282. Yiiframework1 in KEV0 with known ransomware use
  283. ZK Framework1 in KEV1 with known ransomware use
  284. ZKTeco1 in KEV0 with known ransomware use

Reading the vendor counts

As of 3 Oct 2026, the five most listed vendors (Microsoft, Cisco, Apple, Adobe, Google) account for 43% of the 1,733 entries. That concentration says more about where attackers find targets than about which vendor writes worse code: products installed on almost every corporate network are attacked more, and their exploitation is noticed more.

The second column counts entries CISA marks as known to be used in ransomware campaigns, and it ranks vendors differently. Among vendors with at least 15 entries, the largest shares tied to ransomware are SonicWall (13 of 19), Fortinet (14 of 31), Palo Alto Networks (6 of 15), VMware (9 of 26).

Vendors with the most entries have their own page with the product breakdown. For the others, the link opens the KEV catalog filtered by that name.

Questions

Why does one vendor have so many entries?

The count reflects how widely a vendor’s products are deployed and how attractive they are to attackers, as much as the quality of its code. A vendor with a large installed base in governments and companies will have more confirmed exploitation, and therefore more KEV entries.

Is a vendor with no entries safe?

Not necessarily. The catalog only contains vulnerabilities whose exploitation CISA could confirm and that matter to the networks it protects. Products with few users in that context may never be listed even when exploited.

How are vendor names decided?

They are the "vendorProject" field of the CISA catalog, unchanged. Open-source projects appear under the project name, and acquisitions are not always merged, so the same company can appear under more than one name.

Related sections