Exploited vulnerabilities by vendor
The vendors with the most bugs on CISA’s exploited list, each with scores and free detection rules.
Generated by VEDAS. Scores as of 2026-11-01 19:19 UTC. Rebuilt every few hours from cve-scores, CISA KEV and vedas-signatures. How this works and its limits.
The vendors with the most vulnerabilities on CISA’s Known Exploited Vulnerabilities list. Each page lists that vendor’s exploited CVEs with live EPSS and VEDAS scores and free detection rules.
| Vendor | Exploited (KEV) | With detection rule |
|---|---|---|
| Microsoft | 390 | 15 of 187 |
| Cisco | 102 | 19 of 94 |
| Apple | 95 | 0 of 47 |
| Adobe | 83 | 16 of 51 |
| 76 | 0 of 75 | |
| Oracle | 46 | 18 of 44 |
| Apache | 41 | 36 of 40 |
| Ivanti | 38 | 25 of 37 |
| Fortinet | 32 | 11 of 29 |
| Linux | 32 | 0 of 7 |
| Citrix | 27 | 16 of 27 |
| D-Link | 26 | 17 of 24 |
| VMware | 26 | 14 of 20 |
| SonicWall | 19 | 7 of 18 |
| Synacor | 19 | 16 of 19 |
| Android | 17 | 0 of 1 |
| Palo Alto Networks | 16 | 8 of 16 |
| Samsung | 15 | 2 of 4 |
| Atlassian | 14 | 14 of 14 |
| SAP | 14 | 8 of 14 |
| Mozilla | 13 | 0 of 13 |
| Zyxel | 13 | 4 of 13 |
| Qualcomm | 12 | 0 of 1 |
| Trend Micro | 12 | 0 of 9 |
| QNAP | 11 | 5 of 11 |
| Roundcube | 11 | 10 of 10 |
| SolarWinds | 11 | 7 of 10 |
| Arm | 9 | 0 of 4 |
| Progress | 9 | 9 of 9 |
| Red Hat | 9 | 3 of 5 |
| Zoho | 9 | 9 of 9 |
| F5 | 8 | 4 of 8 |
| IBM | 8 | 6 of 8 |
| Juniper | 8 | 2 of 7 |
| NETGEAR | 8 | 6 of 8 |
| Mitel | 7 | 2 of 6 |
| Sophos | 7 | 6 of 7 |
| Broadcom | 6 | 1 of 5 |
| GitLab | 6 | 4 of 6 |
| Jenkins | 6 | 3 of 6 |
| TP-Link | 6 | 2 of 6 |
| WordPress | 6 | 5 of 6 |
| Check Point | 5 | 1 of 5 |
| DrayTek | 5 | 5 of 5 |
| Drupal | 5 | 4 of 5 |
| Exim | 5 | 1 of 4 |
| GNU | 5 | 4 of 4 |
| Langflow | 5 | 4 of 5 |
| MikroTik | 5 | 0 of 5 |
| N-able | 5 | 4 of 5 |
| PaperCut | 5 | 3 of 5 |
| Plex | 5 | 2 of 5 |
| RARLAB | 5 | 0 of 2 |
| Accellion | 4 | 2 of 3 |
| Arista | 4 | 0 of 4 |
| BeyondTrust | 4 | 0 of 4 |
| ConnectWise | 4 | 3 of 4 |
| Craft CMS | 4 | 2 of 4 |
| Fortra | 4 | 2 of 4 |
| GIGABYTE | 4 | 0 of 1 |
| Gladinet | 4 | 4 of 4 |
| JetBrains | 4 | 4 of 4 |
| JFrog | 4 | 2 of 4 |
| Kentico | 4 | 3 of 4 |
| Nagios | 4 | 3 of 4 |
| Sangoma | 4 | 3 of 4 |
| SimpleHelp | 4 | 4 of 4 |
| Sitecore | 4 | 3 of 4 |
| Ubiquiti | 4 | 3 of 4 |
| Veeam | 4 | 1 of 4 |
| WatchGuard | 4 | 0 of 4 |
| ASUS | 3 | 2 of 3 |
| BerriAI | 3 | 3 of 3 |
| CrushFTP | 3 | 2 of 3 |
| Dassault Systèmes | 3 | 3 of 3 |
| DotNetNuke (DNN) | 3 | 3 of 3 |
| Elastic | 3 | 3 of 3 |
| ImageMagick | 3 | 0 of 0 |
| Kaseya | 3 | 2 of 3 |
| Laravel | 3 | 2 of 3 |
Industry partners
