CISA KEV, by vendor
Known exploited vulnerabilities by vendor
93 vendors have at least 3 vulnerabilities in CISA's Known Exploited Vulnerabilities catalog, out of 1,760 catalog entries in KEVWire. Each page lists every entry with severity, exploitation probability, CISA's due date and sources.
| Vendor | KEV entries | Added in the last 365 days | Most recent |
|---|---|---|---|
| Microsoft | 390 | 42 | 2026-10-13 |
| Cisco | 101 | 20 | 2026-10-14 |
| apple | 95 | 10 | 2026-09-29 |
| adobe | 83 | 7 | 2026-10-27 |
| 76 | 11 | 2026-10-27 | |
| Oracle | 46 | 5 | 2026-08-24 |
| Apache | 41 | 3 | 2026-10-08 |
| Ivanti | 36 | 6 | 2026-10-13 |
| Fortinet | 32 | 12 | 2026-10-16 |
| Linux | 31 | 8 | 2026-09-18 |
| Citrix | 27 | 6 | 2026-10-04 |
| D-Link | 26 | 2 | 2026-04-24 |
| VMware | 26 | 0 | 2025-03-04 |
| SonicWall | 19 | 5 | 2026-09-02 |
| Synacor | 19 | 5 | 2026-08-21 |
| Android | 17 | 3 | 2026-06-02 |
| Samsung | 15 | 2 | 2026-04-24 |
| Atlassian | 14 | 1 | 2026-10-15 |
| Palo Alto Networks | 14 | 1 | 2026-10-14 |
| SAP | 14 | 0 | 2025-05-15 |
| Mozilla | 13 | 0 | 2025-10-06 |
| Zyxel | 13 | 1 | 2026-09-21 |
| Qualcomm | 12 | 1 | 2026-03-03 |
| Trend Micro | 12 | 1 | 2026-05-21 |
| QNAP | 11 | 0 | 2023-12-21 |
| Roundcube | 11 | 2 | 2026-02-20 |
| SolarWinds | 11 | 4 | 2026-06-05 |
| Arm | 9 | 0 | 2024-06-12 |
| Progress | 9 | 1 | 2026-08-07 |
| Red Hat | 9 | 2 | 2026-08-26 |
| Zoho | 9 | 0 | 2023-03-07 |
| F5 | 8 | 2 | 2026-09-22 |
| IBM | 8 | 1 | 2026-08-04 |
| Juniper | 8 | 0 | 2025-10-02 |
| NETGEAR | 8 | 0 | 2022-09-08 |
| Mitel | 7 | 0 | 2025-02-12 |
| Sophos | 7 | 0 | 2025-02-06 |
| Jenkins | 6 | 0 | 2025-10-02 |
| TP-Link | 6 | 0 | 2025-09-03 |
| WordPress | 6 | 3 | 2026-09-25 |
| Broadcom | 5 | 4 | 2026-08-18 |
| Check Point | 5 | 4 | 2026-09-22 |
| DrayTek | 5 | 0 | 2025-05-15 |
| Drupal | 5 | 1 | 2026-05-22 |
| Exim | 5 | 0 | 2022-03-25 |
| GitLab | 5 | 3 | 2026-09-11 |
| GNU | 5 | 1 | 2026-01-26 |
| Langflow | 5 | 4 | 2026-07-21 |
| MikroTik | 5 | 3 | 2026-09-25 |
| N-able | 5 | 3 | 2026-09-08 |
| PaperCut | 5 | 3 | 2026-08-31 |
| php | 5 | 2 | 2026-10-26 |
| Plex | 5 | 4 | 2026-10-20 |
| RARLAB | 5 | 1 | 2025-12-09 |
| Accellion | 4 | 0 | 2021-11-03 |
| arista | 4 | 4 | 2026-10-23 |
| BeyondTrust | 4 | 2 | 2026-10-16 |
| ConnectWise | 4 | 2 | 2026-09-11 |
| Craft CMS | 4 | 1 | 2026-03-20 |
| Fortra | 4 | 0 | 2025-09-29 |
| GIGABYTE | 4 | 0 | 2022-10-24 |
| Gladinet | 4 | 3 | 2025-12-15 |
| JetBrains | 4 | 2 | 2026-08-05 |
| JFrog | 4 | 4 | 2026-09-11 |
| Kentico | 4 | 1 | 2026-04-20 |
| Nagios | 4 | 0 | 2022-01-18 |
| Sangoma | 4 | 3 | 2026-09-02 |
| SimpleHelp | 4 | 3 | 2026-06-29 |
| Sitecore | 4 | 0 | 2025-09-04 |
| Ubiquiti | 4 | 3 | 2026-06-23 |
| Veeam | 4 | 0 | 2024-10-17 |
| WatchGuard | 4 | 2 | 2025-12-19 |
| ASUS | 3 | 1 | 2025-12-17 |
| CrushFTP | 3 | 0 | 2025-07-22 |
| Dassault Systèmes | 3 | 0 | 2025-10-28 |
| DotNetNuke (DNN) | 3 | 0 | 2021-11-03 |
| Elastic | 3 | 0 | 2022-03-25 |
| ImageMagick | 3 | 0 | 2024-09-09 |
| Kaseya | 3 | 0 | 2022-05-24 |
| Laravel | 3 | 1 | 2026-03-20 |
| Meta Platforms | 3 | 0 | 2025-09-02 |
| OSGeo | 3 | 1 | 2025-12-11 |
| Qlik | 3 | 0 | 2025-01-13 |
| Rails | 3 | 0 | 2025-07-07 |
| Realtek | 3 | 0 | 2023-09-18 |
| SaltStack | 3 | 0 | 2021-11-03 |
| SmarterTools | 3 | 3 | 2026-02-05 |
| SysAid | 3 | 0 | 2025-07-22 |
| TeleMessage | 3 | 0 | 2025-07-01 |
| Tenda | 3 | 0 | 2021-11-03 |
| TrueConf | 3 | 3 | 2026-08-20 |
| Veritas | 3 | 0 | 2023-04-07 |
| VMware Tanzu | 3 | 0 | 2022-08-25 |