CyberMax
Home

Known exploited vulnerabilities by vendor

CISA KEV catalog 2026.09.25: 1,726 CVEs from 283 vendors. EPSS scores from 2026-09-27.

Every vendor with 5 or more CVEs in CISA's Known Exploited Vulnerabilities catalog, with how many were added in the last 12 months and how many are used in ransomware.

Vendors with the most CVEs in CISA KEV
Microsoft: 389Microsoft389Cisco: 99Cisco99Apple: 94Apple94Adobe: 82Adobe82Google: 75Google75Oracle: 46Oracle46Apache: 40Apache40Ivanti: 35Ivanti35Linux: 31Linux31Fortinet: 30Fortinet30
VendorKEV CVEsLast 12 monthsRansomwareLatest added
Microsoft389491172026-09-25
Cisco991972026-09-16
Apple941002026-08-18
Adobe828112026-09-24
Google751002026-09-16
Oracle467132026-08-24
Apache40282026-08-04
Ivanti355122026-06-11
Linux31922026-09-18
Fortinet3010142026-09-09
D-Link26222026-04-24
VMware26092025-03-04
Citrix24372026-09-09
SonicWall195132026-09-02
Synacor19662026-08-21
Android17302026-06-02
Palo Alto Networks15262026-05-29
Samsung15302026-04-24
SAP14032025-05-15
Zyxel13122026-09-21
Mozilla13112025-10-06
Atlassian13082024-11-12
Trend Micro12102026-05-21
Qualcomm12102026-03-03
SolarWinds11422026-06-05
Roundcube11202026-02-20
QNAP11092023-12-21
Red Hat9242026-08-26
Progress9142026-08-07
Arm9002024-06-12
Zoho9022023-03-07
F58242026-09-22
IBM8122026-08-04
Juniper8102025-10-02
NETGEAR8002022-09-08
Mitel7052025-02-12
Sophos7022025-02-06
WordPress6302026-09-25
Jenkins6112025-10-02
TP-Link6002025-09-03
MikroTik5302026-09-25
Check Point5422026-09-22
GitLab5312026-09-11
N-able5302026-09-08
PaperCut5322026-08-31
Broadcom5412026-08-18
Langflow5412026-07-21
Drupal5122026-05-22
GNU5202026-01-26
RARLAB5142025-12-09
DrayTek5002025-05-15
Exim5012022-03-25