Vendor vulnerability hubs · updated on every deploy
Exploited vulnerabilities by vendor
For each vendor we cover: every CVE in the CISA Known Exploited Vulnerabilities catalog, newest first, with the federal due date and ransomware use, next to every analysis Zero Hunt Research has published on its products.
CISA catalog version 2026.10.21, released 2026-10-21 14:04 UTC.
| Vendor | CVEs in CISA KEV | Added, last 12 months | Known ransomware use | Our analyses |
|---|---|---|---|---|
| Cisco vulnerabilities | 101 | 20 | 7 | 11 |
| Microsoft vulnerabilities | 390 | 43 | 117 | 10 |
| Fortinet vulnerabilities | 32 | 12 | 14 | 6 |
| Linux kernel vulnerabilities | 31 | 8 | 2 | 5 |
| Citrix vulnerabilities | 27 | 6 | 7 | 5 |
| GitLab vulnerabilities | 5 | 3 | 1 | 4 |
| Adobe vulnerabilities | 82 | 7 | 11 | 3 |
| Palo Alto Networks vulnerabilities | 16 | 3 | 6 | 3 |
| Check Point vulnerabilities | 5 | 4 | 2 | 3 |
| Langflow vulnerabilities | 5 | 4 | 1 | 3 |
| Arista vulnerabilities | 3 | 3 | 0 | 3 |
| Oracle vulnerabilities | 46 | 5 | 13 | 2 |
| SonicWall vulnerabilities | 19 | 5 | 13 | 2 |
| Ivanti vulnerabilities | 37 | 6 | 12 | 1 |
| VMware vulnerabilities | 31 | 4 | 10 | 1 |
| Zimbra vulnerabilities | 19 | 5 | 6 | 1 |
| SAP vulnerabilities | 14 | 0 | 3 | 1 |
| Atlassian vulnerabilities | 14 | 1 | 8 | 1 |
| Zyxel vulnerabilities | 13 | 1 | 2 | 1 |
| Progress vulnerabilities | 9 | 1 | 4 | 1 |
| F5 vulnerabilities | 8 | 2 | 4 | 1 |
Source: CISA Known Exploited Vulnerabilities catalog (public data). Descriptions are CISA's, shortened. Always check the vendor advisory before acting. cisa.gov