Known exploited vulnerabilities by vendor
The CISA Known Exploited Vulnerabilities catalog lists vulnerabilities confirmed as exploited in the wild, which U.S. federal civilian agencies must remediate by a set due date. It currently contains 1,741 entries across 288 vendors, of which 361 (20.7%) are flagged as used in known ransomware campaigns. Microsoft accounts for the most entries (390, 22.4% of the catalog). Each vendor page joins its KEV entries with NVD CVSS scores — see our methodology.
Vendors with 3 or more KEV entries (93)
| # | Vendor | Entries | Ransomware-linked | Products | Last added |
|---|---|---|---|---|---|
| 1 | Microsoft | 390 | 117 | 72 | 2026-10-13 |
| 2 | Cisco | 100 | 7 | 43 | 2026-09-30 |
| 3 | Apple | 95 | 0 | 9 | 2026-09-29 |
| 4 | Adobe | 82 | 11 | 14 | 2026-09-24 |
| 5 | 75 | 0 | 25 | 2026-09-16 | |
| 6 | Oracle | 46 | 13 | 17 | 2026-08-24 |
| 7 | Apache | 41 | 8 | 21 | 2026-10-08 |
| 8 | Ivanti | 36 | 12 | 16 | 2026-10-13 |
| 9 | Fortinet | 31 | 14 | 10 | 2026-10-01 |
| 10 | Linux | 31 | 2 | 1 | 2026-09-18 |
| 11 | Citrix | 27 | 7 | 12 | 2026-10-04 |
| 12 | D-Link | 26 | 2 | 21 | 2026-04-24 |
| 13 | VMware | 26 | 9 | 14 | 2025-03-04 |
| 14 | SonicWall | 19 | 13 | 9 | 2026-09-02 |
| 15 | Synacor | 19 | 6 | 4 | 2026-08-21 |
| 16 | Android | 17 | 0 | 6 | 2026-06-02 |
| 17 | Palo Alto Networks | 15 | 6 | 2 | 2026-05-29 |
| 18 | Samsung | 15 | 0 | 2 | 2026-04-24 |
| 19 | SAP | 14 | 3 | 5 | 2025-05-15 |
| 20 | Atlassian | 13 | 8 | 9 | 2024-11-12 |
| 21 | Mozilla | 13 | 1 | 4 | 2025-10-06 |
| 22 | Zyxel | 13 | 2 | 7 | 2026-09-21 |
| 23 | Qualcomm | 12 | 0 | 3 | 2026-03-03 |
| 24 | Trend Micro | 12 | 0 | 9 | 2026-05-21 |
| 25 | QNAP | 11 | 9 | 5 | 2023-12-21 |
| 26 | Roundcube | 11 | 0 | 2 | 2026-02-20 |
| 27 | SolarWinds | 11 | 2 | 4 | 2026-06-05 |
| 28 | Arm | 9 | 0 | 3 | 2024-06-12 |
| 29 | Progress | 9 | 4 | 8 | 2026-08-07 |
| 30 | Red Hat | 9 | 4 | 7 | 2026-08-26 |
| 31 | Zoho | 9 | 2 | 4 | 2023-03-07 |
| 32 | F5 | 8 | 4 | 5 | 2026-09-22 |
| 33 | IBM | 8 | 2 | 6 | 2026-08-04 |
| 34 | Juniper | 8 | 0 | 2 | 2025-10-02 |
| 35 | NETGEAR | 8 | 0 | 7 | 2022-09-08 |
| 36 | Mitel | 7 | 5 | 4 | 2025-02-12 |
| 37 | Sophos | 7 | 2 | 6 | 2025-02-06 |
| 38 | Jenkins | 6 | 1 | 6 | 2025-10-02 |
| 39 | TP-Link | 6 | 0 | 5 | 2025-09-03 |
| 40 | WordPress | 6 | 0 | 4 | 2026-09-25 |
| 41 | Broadcom | 5 | 1 | 5 | 2026-08-18 |
| 42 | Check Point | 5 | 2 | 4 | 2026-09-22 |
| 43 | DrayTek | 5 | 0 | 3 | 2025-05-15 |
| 44 | Drupal | 5 | 2 | 3 | 2026-05-22 |
| 45 | Exim | 5 | 1 | 3 | 2022-03-25 |
| 46 | GitLab | 5 | 1 | 4 | 2026-09-11 |
| 47 | GNU | 5 | 0 | 4 | 2026-01-26 |
| 48 | Langflow | 5 | 1 | 1 | 2026-07-21 |
| 49 | MikroTik | 5 | 0 | 1 | 2026-09-25 |
| 50 | N-able | 5 | 0 | 2 | 2026-09-08 |
| 51 | PaperCut | 5 | 2 | 2 | 2026-08-31 |
| 52 | RARLAB | 5 | 4 | 2 | 2025-12-09 |
| 53 | Accellion | 4 | 4 | 1 | 2021-11-03 |
| 54 | ConnectWise | 4 | 2 | 1 | 2026-09-11 |
| 55 | Craft CMS | 4 | 0 | 1 | 2026-03-20 |
| 56 | Fortra | 4 | 2 | 2 | 2025-09-29 |
| 57 | GIGABYTE | 4 | 4 | 1 | 2022-10-24 |
| 58 | Gladinet | 4 | 0 | 3 | 2025-12-15 |
| 59 | JetBrains | 4 | 4 | 1 | 2026-08-05 |
| 60 | JFrog | 4 | 0 | 1 | 2026-09-11 |
| 61 | Kentico | 4 | 0 | 3 | 2026-04-20 |
| 62 | Nagios | 4 | 0 | 1 | 2022-01-18 |
| 63 | Sangoma | 4 | 0 | 3 | 2026-09-02 |
| 64 | SimpleHelp | 4 | 3 | 1 | 2026-06-29 |
| 65 | Sitecore | 4 | 1 | 3 | 2025-09-04 |
| 66 | Ubiquiti | 4 | 0 | 2 | 2026-06-23 |
| 67 | Veeam | 4 | 4 | 1 | 2024-10-17 |
| 68 | WatchGuard | 4 | 1 | 3 | 2025-12-19 |
| 69 | Arista | 3 | 0 | 2 | 2026-09-22 |
| 70 | ASUS | 3 | 0 | 3 | 2025-12-17 |
| 71 | BerriAI | 3 | 0 | 1 | 2026-09-02 |
| 72 | BeyondTrust | 3 | 1 | 3 | 2026-02-13 |
| 73 | CrushFTP | 3 | 1 | 1 | 2025-07-22 |
| 74 | Dassault Systèmes | 3 | 0 | 1 | 2025-10-28 |
| 75 | DotNetNuke (DNN) | 3 | 1 | 1 | 2021-11-03 |
| 76 | Elastic | 3 | 0 | 2 | 2022-03-25 |
| 77 | ImageMagick | 3 | 0 | 1 | 2024-09-09 |
| 78 | Kaseya | 3 | 3 | 1 | 2022-05-24 |
| 79 | Laravel | 3 | 1 | 3 | 2026-03-20 |
| 80 | Meta Platforms | 3 | 0 | 1 | 2025-09-02 |
| 81 | OSGeo | 3 | 0 | 2 | 2025-12-11 |
| 82 | PHP | 3 | 1 | 3 | 2025-07-07 |
| 83 | Qlik | 3 | 3 | 1 | 2025-01-13 |
| 84 | Rails | 3 | 0 | 1 | 2025-07-07 |
| 85 | Realtek | 3 | 0 | 3 | 2023-09-18 |
| 86 | SaltStack | 3 | 0 | 1 | 2021-11-03 |
| 87 | SmarterTools | 3 | 3 | 1 | 2026-02-05 |
| 88 | SysAid | 3 | 1 | 2 | 2025-07-22 |
| 89 | TeleMessage | 3 | 0 | 1 | 2025-07-01 |
| 90 | Tenda | 3 | 0 | 3 | 2021-11-03 |
| 91 | TrueConf | 3 | 0 | 2 | 2026-08-20 |
| 92 | Veritas | 3 | 3 | 1 | 2023-04-07 |
| 93 | VMware Tanzu | 3 | 1 | 3 | 2022-08-25 |
Other vendors (195)
Vendors with fewer than 3 KEV entries (241 entries in total).
Acronis (2) · Advantive (2) · Array Networks (2) · Aviatrix (2) · Cleo (2) · Commvault (2) · CWP (2) · CyberPersons (2) · Dahua (2) · Dasan (2) · Dell (2) · EyesOfNetwork (2) · GeoVision (2) · Grafana Labs (2) · Hewlett Packard (HP) (2) · Hikvision (2) · Hitachi Vantara (2) · IETF (2) · Intel (2) · LiteSpeed (2) · Metabase (2) · Micro Focus (2) · MinIO (2) · MongoDB (2) · NUUO (2) · OpenPLC (2) · ownCloud (2) · Paessler (2) · PEAR (2) · PTZOptics (2) · Quest (2) · Rejetto (2) · Reolink (2) · ServiceNow (2) · Sonatype (2) · Sudo (2) · Telerik (2) · ThinkPHP (2) · TIBCO (2) · Unraid (2) · vBulletin (2) · Versa (2) · Wing FTP Server (2) · WSO2 (2) · Zabbix (2) · Zammad GmbH (2) · 7-Zip (1) · Acclaim Systems (1) · Adminer (1) · Ajax.NET Professional (1) · Alcatel (1) · Amcrest (1) · AMI (1) · Aquasecurity (1) · Arcadyan (1) · Arcserve (1) · Artifex (1) · Audinate (1) · Balbooa (1) · Barracuda Networks (1) · BQE (1) · Cacti (1) · ChakraCore (1) · Checkbox (1) · Code Aurora (1) · Crestron (1) · D-Link and TRENDnet (1) · Daemon (1) · DD-WRT (1) · Delta Electronics (1) · Digiever (1) · Docker (1) · dotCMS (1) · Edimax (1) · Embedthis (1) · Erlang (1) · FatPipe (1) · ForgeRock (1) · FreeType (1) · Fuel CMS (1) · FXC (1) · Git (1) · Gitea (1) · Gogs (1) · Grandstream (1) · Hewlett Packard Enterprise (HPE) (1) · iCagenda (1) · IGEL (1) · Ignite Realtime (1) · InduSoft (1) · ISC (1) · Joomla! (1) · Joomlack (1) · JoomShaper (1) · JQuery (1) · Justice AV Solutions (1) · Kestra (1) · Kingsoft (1) · Kludex (1) · KNX Association (1) · Lantronix (1) · LG (1) · Libraesva (1) · Liferay (1) · Looking Glass (1) · Marimo (1) · McAfee (1) · MDaemon (1) · MediaTek (1) · Meta (1) · Mirasvit (1) · MLflow (1) · Motex (1) · n8n (1) · NAKIVO (1) · Netis (1) · Netwrix (1) · NextGen Healthcare (1) · Nice (1) · North Grid (1) · Nostromo (1) · Notepad++ (1) · Novi Survey (1) · Npm package (1) · Nx (1) · October CMS (1) · Omnissa (1) · ONLYOFFICE (1) · OpenBSD (1) · OpenSSL (1) · Perl (1) · PHP Group (1) · phpMyAdmin (1) · PHPUnit (1) · Pi-hole (1) · PlaySMS (1) · Plex (1) · Prettier (1) · Primetek (1) · ProFTPD (1) · ProjectSend (1) · PTC (1) · Pulse Secure (1) · QNAP Systems (1) · Qualitia (1) · Ray-Project (1) · rConfig (1) · React Native Community (1) · Redis (1) · reviewdog (1) · Rockwell (1) · Ruckus Wireless (1) · Samba (1) · Schneider Electric (1) · ScienceLogic (1) · Siemens (1) · Sierra Wireless (1) · SIMalliance (1) · SKYSEA (1) · Smartbedded (1) · SolarView (1) · Soliton Systems K.K (1) · Splunk (1) · Spreadsheet::ParseExcel (1) · Srimax (1) · Strapi (1) · SugarCRM (1) · Sumavision (1) · Sunhillo (1) · Symantec (1) · TanStack (1) · TeamT5 (1) · TeamViewer (1) · Teclib (1) · TerraMaster (1) · tj-actions (1) · Treck TCP/IP stack (1) · Trihedral (1) · Trimble (1) · TVT (1) · Twilio (1) · Unitronics (1) · Vite (1) · Wazuh (1) · WebKitGTK (1) · Webmin (1) · WebPros (1) · WebRTC (1) · Widget Factory (1) · XStream (1) · XWiki (1) · Yealink (1) · Yiiframework (1) · ZK Framework (1) · ZKTeco (1)
Source: CISA Known Exploited Vulnerabilities catalog. Vendor names are normalized across spellings used in the catalog.