Vendors
420 vendors: the most active publishers of the last three years and every vendor with an entry in CISA's KEV catalog.
#
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| 1000 Projects | 87 | 0 | 0 |
| 1Panel-dev | 78 | 0 | 0 |
| 7-Zip | 14 | 1 | 0 |
A
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| ABB | 125 | 0 | 0 |
| AcademySoftwareFoundation | 80 | 0 | 0 |
| Accellion | 0 | 4 | 4 |
| Acclaim Systems | 0 | 1 | 0 |
| Acronis | 104 | 2 | 0 |
| Adminer | 4 | 1 | 0 |
| Adobe | 2,889 | 83 | 11 |
| Advantech | 137 | 0 | 0 |
| Advantive | 2 | 2 | 0 |
| Ahsay | 2 | 2 | 0 |
| Ajax.NET Professional | 0 | 1 | 0 |
| Alcatel | 0 | 1 | 0 |
| Amcrest | 1 | 1 | 0 |
| AMD | 276 | 0 | 0 |
| AMI | 39 | 1 | 0 |
| AncoraThemes | 140 | 0 | 0 |
| Android | 12 | 17 | 0 |
| Apache | 1,763 | 41 | 8 |
| Apple | 2,529 | 95 | 0 |
| Aquasecurity | 7 | 1 | 0 |
| Arcadyan | 0 | 1 | 0 |
| Arcserve | 11 | 1 | 0 |
| Arista | 138 | 4 | 0 |
| Arm | 57 | 9 | 0 |
| Array Networks | 2 | 2 | 1 |
| Artifex | 21 | 1 | 0 |
| ash-project | 91 | 0 | 0 |
| Ashlar-Vellum | 103 | 0 | 0 |
| ASUS | 117 | 3 | 0 |
| Atlassian | 55 | 14 | 8 |
| Audinate | 0 | 1 | 0 |
| Autodesk | 224 | 0 | 0 |
| Aviatrix | 3 | 2 | 0 |
| AWS | 168 | 0 | 0 |
| axiomthemes | 109 | 0 | 0 |
| Ays Pro | 91 | 0 | 0 |
B
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| Balbooa | 2 | 1 | 0 |
| Barracuda Networks | 7 | 1 | 0 |
| bdthemes | 102 | 0 | 0 |
| BerriAI | 46 | 3 | 0 |
| BeyondTrust | 26 | 4 | 1 |
| bPlugins | 107 | 0 | 0 |
| BQE | 0 | 1 | 1 |
| Brainstorm Force | 146 | 0 | 0 |
| Broadcom | 75 | 5 | 1 |
| Brocade | 129 | 0 | 0 |
| Budibase | 89 | 0 | 0 |
C
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| Cacti | 49 | 1 | 0 |
| Campcodes | 553 | 0 | 0 |
| Canonical | 135 | 0 | 0 |
| Capgo | 125 | 0 | 0 |
| ChakraCore | 0 | 1 | 0 |
| chamilo | 96 | 0 | 0 |
| Check Point | 34 | 5 | 2 |
| Checkbox | 0 | 1 | 0 |
| Checkmk | 92 | 0 | 0 |
| ChurchCRM | 84 | 0 | 0 |
| Cisco | 1,032 | 101 | 7 |
| Citrix | 36 | 27 | 7 |
| Cleo | 4 | 2 | 2 |
| Code Aurora | 0 | 1 | 0 |
| code-projects | 1,406 | 0 | 0 |
| CodeAstro | 178 | 0 | 0 |
| codepeople | 83 | 0 | 0 |
| Collabora | 2 | 1 | 0 |
| Commvault | 34 | 2 | 0 |
| Concrete CMS | 139 | 0 | 0 |
| ConnectWise | 16 | 4 | 2 |
| Craft CMS | 157 | 4 | 0 |
| Crestron | 9 | 1 | 0 |
| Crocoblock | 131 | 0 | 0 |
| CrushFTP | 6 | 3 | 1 |
| curl | 92 | 0 | 0 |
| CWP | 1 | 2 | 0 |
| CyberPersons | 2 | 2 | 2 |
D
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| D-Link | 850 | 26 | 2 |
| D-Link and TRENDnet | 0 | 1 | 0 |
| Daemon | 1 | 1 | 0 |
| Dahua | 15 | 2 | 0 |
| Dasan | 0 | 2 | 1 |
| Dassault Systèmes | 102 | 3 | 0 |
| dataease | 94 | 0 | 0 |
| DD-WRT | 1 | 1 | 0 |
| Dell | 1,098 | 2 | 0 |
| Delta Electronics | 101 | 1 | 0 |
| Devolutions | 161 | 0 | 0 |
| Digiever | 3 | 1 | 0 |
| discourse | 211 | 0 | 0 |
| Docker | 42 | 1 | 0 |
| dotCMS | 8 | 1 | 1 |
| DotNetNuke (DNN) | 0 | 3 | 1 |
| DrayTek | 102 | 5 | 0 |
| Drupal | 427 | 5 | 2 |
E
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| Eclipse Foundation | 265 | 0 | 0 |
| Edimax | 107 | 1 | 0 |
| EG Secure Solutions | 2 | 1 | 0 |
| Elastic | 261 | 3 | 0 |
| Embedthis | 4 | 1 | 0 |
| Erlang | 67 | 1 | 0 |
| Esri | 110 | 0 | 0 |
| Exim | 22 | 5 | 1 |
| EyesOfNetwork | 0 | 2 | 0 |
F
G
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| GeoVision | 89 | 2 | 0 |
| getgrav | 191 | 0 | 0 |
| GIGABYTE | 10 | 4 | 4 |
| Git | 12 | 1 | 0 |
| Gitea | 188 | 1 | 0 |
| GitHub | 110 | 0 | 0 |
| GitLab | 590 | 5 | 1 |
| Gladinet | 17 | 4 | 0 |
| glpi-project | 99 | 0 | 0 |
| GNU | 137 | 5 | 0 |
| Go standard library | 94 | 0 | 0 |
| Gogs | 52 | 1 | 0 |
| 5,615 | 76 | 0 | |
| Grafana | 95 | 2 | 0 |
| Grandstream | 5 | 1 | 0 |
| grokability | 91 | 0 | 0 |
| GTKWave | 82 | 0 | 0 |
H
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| HashiCorp | 105 | 0 | 0 |
| HCL | 81 | 0 | 0 |
| HCL Software | 394 | 0 | 0 |
| Hewlett Packard (HP) | 0 | 2 | 0 |
| Hewlett Packard Enterprise | 625 | 1 | 0 |
| Hikvision | 41 | 2 | 0 |
| Hitachi Vantara | 35 | 2 | 0 |
| HP | 126 | 0 | 0 |
| Huawei | 621 | 0 | 0 |
I
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| IBM | 2,678 | 8 | 2 |
| iCagenda | 1 | 1 | 0 |
| IETF | 8 | 2 | 0 |
| IGEL | 3 | 1 | 0 |
| Ignite Realtime | 4 | 1 | 0 |
| ImageMagick | 255 | 3 | 0 |
| Imagination Technologies | 87 | 0 | 0 |
| InduSoft | 0 | 1 | 0 |
| Intel | 846 | 2 | 1 |
| InternationalColorConsortium | 105 | 0 | 0 |
| IrfanView | 184 | 0 | 0 |
| ISC | 63 | 1 | 0 |
| itsourcecode | 706 | 0 | 0 |
| Ivanti | 365 | 36 | 12 |
J
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| jeecgboot | 112 | 0 | 0 |
| Jenkins | 311 | 6 | 1 |
| JetBrains | 355 | 4 | 4 |
| JFrog | 53 | 4 | 0 |
| Joomla | 91 | 1 | 0 |
| Joomlack | 1 | 1 | 0 |
| JoomShaper | 2 | 1 | 0 |
| JQuery | 0 | 1 | 0 |
| Juniper | 453 | 8 | 0 |
| Justice AV Solutions | 1 | 1 | 0 |
K
L
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| LabRedesCefetRJ | 187 | 0 | 0 |
| Langflow | 50 | 5 | 1 |
| Lantronix | 28 | 1 | 0 |
| Laravel | 15 | 3 | 1 |
| Legion of the Bouncy Castle | 85 | 0 | 0 |
| Lenovo | 199 | 0 | 0 |
| LG | 31 | 1 | 0 |
| Libraesva | 1 | 1 | 0 |
| Liferay | 186 | 1 | 0 |
| Linksys | 105 | 0 | 0 |
| Linux | 18,075 | 31 | 2 |
| LiteSpeed | 2 | 2 | 0 |
| Looking Glass | 0 | 1 | 0 |
M
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| ManageEngine | 81 | 0 | 0 |
| Marimo | 1 | 1 | 0 |
| Mattermost | 424 | 0 | 0 |
| McAfee | 2 | 1 | 0 |
| MDaemon | 2 | 1 | 0 |
| MediaTek | 527 | 1 | 0 |
| MervinPraison | 180 | 0 | 0 |
| Meta | 26 | 4 | 1 |
| Metabase | 17 | 2 | 0 |
| metagauss | 110 | 0 | 0 |
| Micro Focus | 2 | 2 | 0 |
| Microsoft | 6,950 | 390 | 117 |
| Mikado-Themes | 88 | 0 | 0 |
| MikroTik | 24 | 5 | 0 |
| MinIO | 16 | 2 | 0 |
| Mirasvit | 1 | 1 | 0 |
| MISP | 186 | 0 | 0 |
| Mitel | 33 | 7 | 5 |
| MLflow | 73 | 1 | 0 |
| MongoDB | 295 | 2 | 0 |
| Motex | 3 | 1 | 0 |
| Mozilla | 1,130 | 13 | 1 |
N
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| N-able | 21 | 5 | 0 |
| n8n | 23 | 1 | 0 |
| n8n-io | 188 | 0 | 0 |
| Nagios | 114 | 4 | 0 |
| NAKIVO | 2 | 1 | 0 |
| NETGEAR | 204 | 8 | 0 |
| Netis | 24 | 1 | 0 |
| netty | 95 | 0 | 0 |
| Netwrix | 5 | 1 | 1 |
| nextcloud | 111 | 0 | 0 |
| NextGen Healthcare | 3 | 1 | 1 |
| NI | 82 | 0 | 0 |
| Nice | 1 | 1 | 0 |
| NLnet Labs | 81 | 0 | 0 |
| nodejs | 92 | 0 | 0 |
| North Grid | 0 | 1 | 0 |
| Nostromo | 0 | 1 | 0 |
| Notepad++ | 22 | 1 | 0 |
| Novi Survey | 0 | 1 | 0 |
| Npm package | 0 | 1 | 0 |
| NUUO | 3 | 2 | 0 |
| NVIDIA | 655 | 0 | 0 |
| Nx | 2 | 1 | 1 |
O
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| October CMS | 20 | 1 | 0 |
| OISF | 90 | 0 | 0 |
| Omnissa | 10 | 1 | 0 |
| ONLYOFFICE | 11 | 1 | 0 |
| open-webui | 175 | 0 | 0 |
| OpenBSD | 49 | 1 | 0 |
| OpenClaw | 672 | 0 | 0 |
| openemr | 96 | 0 | 0 |
| OpenHarmony | 151 | 0 | 0 |
| OpenPLC | 8 | 2 | 0 |
| OpenSSL | 79 | 1 | 0 |
| OpenText | 159 | 0 | 0 |
| Oracle | 4,839 | 46 | 13 |
| OSGeo | 9 | 3 | 0 |
| ownCloud | 9 | 2 | 0 |
P
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| Paessler | 8 | 2 | 0 |
| Palo Alto Networks | 215 | 16 | 6 |
| PaperCut | 30 | 5 | 2 |
| parisneo | 84 | 0 | 0 |
| parse-community | 119 | 0 | 0 |
| PDF-XChange | 191 | 0 | 0 |
| PEAR | 9 | 2 | 0 |
| Perl | 6 | 1 | 0 |
| Phoenix Contact | 131 | 0 | 0 |
| PHP | 12 | 3 | 1 |
| PHP Group | 56 | 3 | 1 |
| PHPGurukul | 763 | 0 | 0 |
| phpMyAdmin | 2 | 1 | 0 |
| PHPUnit | 0 | 1 | 0 |
| Pi-hole | 24 | 1 | 0 |
| PlaySMS | 4 | 1 | 0 |
| Plex | 10 | 5 | 0 |
| Portabilis | 107 | 0 | 0 |
| Prettier | 1 | 1 | 0 |
| Primetek | 0 | 1 | 0 |
| ProFTPD | 6 | 1 | 0 |
| Progress | 294 | 9 | 4 |
| ProjectSend | 12 | 1 | 0 |
| Projectworlds | 198 | 0 | 0 |
| PTC | 14 | 1 | 1 |
| PTZOptics | 5 | 2 | 0 |
| Pulse Secure | 1 | 1 | 0 |
| Python Software Foundation | 79 | 0 | 0 |
Q
R
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| rabbitmq | 95 | 0 | 0 |
| Rails | 35 | 3 | 0 |
| RARLAB | 10 | 5 | 4 |
| Ray-Project | 7 | 1 | 0 |
| rConfig | 4 | 1 | 0 |
| React Native Community | 1 | 1 | 0 |
| realmag777 | 105 | 0 | 0 |
| Realtek | 35 | 3 | 0 |
| Red Hat | 1,915 | 9 | 4 |
| Redis | 22 | 1 | 0 |
| Rejetto | 13 | 2 | 1 |
| Reolink | 2 | 2 | 0 |
| reviewdog | 1 | 1 | 0 |
| Rockwell Automation | 203 | 1 | 0 |
| Roundcube | 63 | 11 | 0 |
| Ruckus Wireless | 1 | 1 | 0 |
S
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| saadiqbal | 97 | 0 | 0 |
| SaltStack | 0 | 3 | 0 |
| Samba | 2 | 1 | 1 |
| Samsung | 837 | 15 | 0 |
| Sangoma | 10 | 4 | 0 |
| SAP | 567 | 14 | 3 |
| Schneider Electric | 159 | 1 | 0 |
| ScienceLogic | 2 | 1 | 0 |
| ServiceNow | 23 | 2 | 0 |
| SICK | 81 | 0 | 0 |
| Siemens | 744 | 2 | 0 |
| Sierra Wireless | 11 | 1 | 0 |
| SIMalliance | 0 | 1 | 0 |
| SimpleHelp | 6 | 4 | 3 |
| Sitecore | 13 | 4 | 1 |
| siyuan-note | 218 | 0 | 0 |
| SKYSEA | 0 | 1 | 0 |
| Smartbedded | 1 | 1 | 0 |
| SmarterTools | 11 | 3 | 3 |
| smub | 102 | 0 | 0 |
| SolarView | 0 | 1 | 0 |
| SolarWinds | 114 | 11 | 2 |
| Soliton Systems K.K | 2 | 1 | 0 |
| Sonatype | 42 | 2 | 0 |
| SonicWall | 94 | 19 | 13 |
| Sophos | 16 | 7 | 2 |
| SourceCodester | 1,479 | 0 | 0 |
| Splunk | 278 | 1 | 0 |
| Spreadsheet::ParseExcel | 1 | 1 | 0 |
| Spring | 231 | 0 | 0 |
| Srimax | 1 | 1 | 0 |
| stellarwp | 133 | 0 | 0 |
| Strapi | 18 | 1 | 0 |
| StylemixThemes | 130 | 0 | 0 |
| Sudo | 1 | 2 | 0 |
| SugarCRM | 2 | 1 | 0 |
| Sumavision | 0 | 1 | 0 |
| Sunhillo | 1 | 1 | 0 |
| SUSE | 124 | 0 | 0 |
| Symantec | 9 | 1 | 0 |
| Synacor | 8 | 19 | 6 |
| Synology | 125 | 0 | 0 |
| SysAid | 7 | 3 | 1 |
T
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| Tanium | 86 | 0 | 0 |
| TanStack | 5 | 1 | 1 |
| TeamT5 | 5 | 1 | 0 |
| TeamViewer | 44 | 1 | 0 |
| Teclib | 0 | 1 | 0 |
| TeleMessage | 9 | 3 | 0 |
| Telerik | 0 | 2 | 1 |
| Tenda | 1,034 | 3 | 0 |
| TerraMaster | 1 | 1 | 1 |
| themeisle | 110 | 0 | 0 |
| ThemeREX | 241 | 0 | 0 |
| themeum | 137 | 0 | 0 |
| thimpress | 123 | 0 | 0 |
| ThinkPHP | 4 | 2 | 0 |
| thorsten | 114 | 0 | 0 |
| TIBCO | 14 | 2 | 0 |
| tj-actions | 5 | 1 | 0 |
| Toshiba Tec | 80 | 0 | 0 |
| totolink | 676 | 0 | 0 |
| TP-Link | 286 | 6 | 0 |
| Treck TCP/IP stack | 0 | 1 | 0 |
| Trend Micro | 125 | 12 | 0 |
| TRENDnet | 102 | 0 | 0 |
| Trihedral | 0 | 1 | 0 |
| Trimble | 41 | 1 | 0 |
| TrueConf | 3 | 3 | 0 |
| TryGhost | 82 | 0 | 0 |
| TVT | 1 | 1 | 0 |
| Twilio | 1 | 1 | 0 |
| TYPO3 | 135 | 0 | 0 |
U
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| Ubiquiti | 121 | 4 | 0 |
| Unisoc | 224 | 0 | 0 |
| Unitronics | 16 | 1 | 0 |
| Unraid | 5 | 2 | 0 |
| UTT | 107 | 0 | 0 |
V
W
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| WatchGuard | 116 | 4 | 1 |
| Wavlink | 144 | 0 | 0 |
| Wazuh | 87 | 1 | 0 |
| WebKitGTK | 2 | 1 | 0 |
| Webmin | 16 | 1 | 1 |
| WebPros | 48 | 1 | 1 |
| WebRTC | 0 | 1 | 1 |
| wedevs | 109 | 0 | 0 |
| Widget Factory | 1 | 1 | 0 |
| Wikimedia Foundation | 246 | 0 | 0 |
| Wing FTP Server | 5 | 2 | 0 |
| Wireshark Foundation | 135 | 0 | 0 |
| wolfSSL | 115 | 0 | 0 |
| WordPress | 21 | 6 | 0 |
| wpchill | 108 | 0 | 0 |
| wpdevteam | 100 | 0 | 0 |
| wpmudev | 85 | 0 | 0 |
| wproyal | 80 | 0 | 0 |
| WSO2 | 109 | 2 | 1 |
| WWBN | 306 | 0 | 0 |
X
Y
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| Yealink | 21 | 1 | 0 |
| YesWiki | 82 | 0 | 0 |
| Yiiframework | 1 | 1 | 0 |
Z
| Vendor | CVE records, last 3 years | KEV entries | Tied to ransomware |
|---|---|---|---|
| Zabbix | 70 | 2 | 0 |
| Zammad | 49 | 2 | 0 |
| Zephyr Project | 242 | 0 | 0 |
| ZK Framework | 0 | 1 | 1 |
| ZKTeco | 47 | 1 | 0 |
| Zoho | 78 | 9 | 2 |
| Zoom Communications | 108 | 0 | 0 |
| ZTE | 85 | 0 | 0 |
| Zyxel | 94 | 13 | 2 |
Source: CVE List V5 (CVE Program), cve_2026-10-28_0000Z, as of 28 Oct 2026; CISA Known Exploited Vulnerabilities (KEV) catalog, 2026.10.27, as of 27 Oct 2026. About the data.