CyberMax
Home
Known exploited vulnerabilities by vendor (CISA KEV + EPSS)

Known exploited vulnerabilities by vendor

CISA KEV catalog 2026.10.02: 1,733 CVEs from 284 vendors. EPSS scores from 2026-10-03.

Every vendor with 5 or more CVEs in CISA's Known Exploited Vulnerabilities catalog, with how many were added in the last 12 months and how many are used in ransomware.

Vendors with the most CVEs in CISA KEV
Microsoft: 389Microsoft389Cisco: 100Cisco100Apple: 95Apple95Adobe: 82Adobe82Google: 75Google75Oracle: 46Oracle46Apache: 40Apache40Ivanti: 35Ivanti35Fortinet: 31Fortinet31Linux: 31Linux31
VendorKEV CVEsLast 12 monthsRansomwareLatest added
Microsoft389491172026-09-25
Cisco1001972026-09-30
Apple951102026-09-29
Adobe828112026-09-24
Google751002026-09-16
Oracle467132026-08-24
Apache40282026-08-04
Ivanti355122026-06-11
Fortinet3111142026-10-01
Linux31922026-09-18
Citrix26572026-09-27
D-Link26222026-04-24
VMware26092025-03-04
SonicWall195132026-09-02
Synacor19662026-08-21
Android17302026-06-02
Palo Alto Networks15262026-05-29
Samsung15202026-04-24
SAP14032025-05-15
Zyxel13122026-09-21
Mozilla13112025-10-06
Atlassian13082024-11-12
Trend Micro12102026-05-21
Qualcomm12102026-03-03
SolarWinds11422026-06-05
Roundcube11202026-02-20
QNAP11092023-12-21
Red Hat9242026-08-26
Progress9142026-08-07
Arm9002024-06-12
Zoho9022023-03-07
F58242026-09-22
IBM8122026-08-04
Juniper8002025-10-02
NETGEAR8002022-09-08
Mitel7052025-02-12
Sophos7022025-02-06
WordPress6302026-09-25
Jenkins6012025-10-02
TP-Link6002025-09-03
MikroTik5302026-09-25
Check Point5422026-09-22
GitLab5312026-09-11
N-able5302026-09-08
PaperCut5322026-08-31
Broadcom5412026-08-18
Langflow5412026-07-21
Drupal5122026-05-22
GNU5102026-01-26
RARLAB5142025-12-09
DrayTek5002025-05-15
Exim5012022-03-25