Automatically updated
Exploited vulnerabilities by vendor
For each vendor, the vulnerabilities in its products that attackers are confirmed to exploit (CISA catalog), the CERT-FR alerts and notices that concern it, and our articles. 92 vendors, 1,504 exploited vulnerabilities.
Most targeted in the last 12 months
Number of vulnerabilities added to the exploited catalog in 12 months.
All vendors
- Accellion4 vulnerabilities · latest Nov 3 2021
- Adobe82 vulnerabilities · latest Sep 24
- Android17 vulnerabilities · latest Jun 2
- Apache41 vulnerabilities · latest Oct 8
- Apple95 vulnerabilities · latest Sep 29
- Arista3 vulnerabilities · latest Sep 22
- Arm9 vulnerabilities · latest Jun 12 2024
- ASUS3 vulnerabilities · latest Dec 17 2025
- Atlassian13 vulnerabilities · latest Nov 12 2024
- BerriAI3 vulnerabilities · latest Sep 2
- BeyondTrust3 vulnerabilities · latest Feb 13
- Broadcom5 vulnerabilities · latest Aug 18
- Check Point5 vulnerabilities · latest Sep 22
- Cisco100 vulnerabilities · latest Sep 30
- Citrix27 vulnerabilities · latest Oct 4
- ConnectWise4 vulnerabilities · latest Sep 11
- Craft CMS4 vulnerabilities · latest Mar 20
- CrushFTP3 vulnerabilities · latest Jul 22 2025
- D-Link27 vulnerabilities · latest Apr 24
- Dassault Systèmes3 vulnerabilities · latest Oct 28 2025
- DotNetNuke (DNN)3 vulnerabilities · latest Nov 3 2021
- DrayTek5 vulnerabilities · latest May 15 2025
- Drupal5 vulnerabilities · latest May 22
- Elastic3 vulnerabilities · latest Mar 25 2022
- Exim5 vulnerabilities · latest Mar 25 2022
- F58 vulnerabilities · latest Sep 22
- Fortinet31 vulnerabilities · latest Oct 1
- Fortra4 vulnerabilities · latest Sep 29 2025
- GIGABYTE4 vulnerabilities · latest Oct 24 2022
- GitLab5 vulnerabilities · latest Sep 11
- Gladinet4 vulnerabilities · latest Dec 15 2025
- GNU5 vulnerabilities · latest Jan 26
- Google75 vulnerabilities · latest Sep 16
- IBM8 vulnerabilities · latest Aug 4
- ImageMagick3 vulnerabilities · latest Sep 9 2024
- Ivanti36 vulnerabilities · latest Oct 13
- Jenkins6 vulnerabilities · latest Oct 2 2025
- JetBrains4 vulnerabilities · latest Aug 5
- JFrog4 vulnerabilities · latest Sep 11
- Juniper8 vulnerabilities · latest Oct 2 2025
- Kaseya3 vulnerabilities · latest May 24 2022
- Kentico4 vulnerabilities · latest Apr 20
- Langflow5 vulnerabilities · latest Jul 21
- Laravel3 vulnerabilities · latest Mar 20
- Linux31 vulnerabilities · latest Sep 18
- Meta4 vulnerabilities · latest Dec 5 2025
- Microsoft390 vulnerabilities · latest Oct 13
- MikroTik5 vulnerabilities · latest Sep 25
- Mitel7 vulnerabilities · latest Feb 12 2025
- Mozilla13 vulnerabilities · latest Oct 6 2025
- N-able5 vulnerabilities · latest Sep 8
- Nagios4 vulnerabilities · latest Jan 18 2022
- NETGEAR8 vulnerabilities · latest Sep 8 2022
- Oracle46 vulnerabilities · latest Aug 24
- OSGeo3 vulnerabilities · latest Dec 11 2025
- Palo Alto Networks15 vulnerabilities · latest May 29
- PaperCut5 vulnerabilities · latest Aug 31
- PHP4 vulnerabilities · latest Jul 7 2025
- Progress9 vulnerabilities · latest Aug 7
- Qlik3 vulnerabilities · latest Jan 13 2025
- QNAP12 vulnerabilities · latest Dec 21 2023
- Qualcomm12 vulnerabilities · latest Mar 3
- Rails3 vulnerabilities · latest Jul 7 2025
- RARLAB5 vulnerabilities · latest Dec 9 2025
- Realtek3 vulnerabilities · latest Sep 18 2023
- Red Hat9 vulnerabilities · latest Aug 26
- Roundcube11 vulnerabilities · latest Feb 20
- SaltStack3 vulnerabilities · latest Nov 3 2021
- Samsung15 vulnerabilities · latest Apr 24
- Sangoma4 vulnerabilities · latest Sep 2
- SAP14 vulnerabilities · latest May 15 2025
- SimpleHelp4 vulnerabilities · latest Jun 29
- Sitecore4 vulnerabilities · latest Sep 4 2025
- SmarterTools3 vulnerabilities · latest Feb 5
- SolarWinds11 vulnerabilities · latest Jun 5
- SonicWall19 vulnerabilities · latest Sep 2
- Sophos7 vulnerabilities · latest Feb 6 2025
- Synacor19 vulnerabilities · latest Aug 21
- SysAid3 vulnerabilities · latest Jul 22 2025
- TeleMessage3 vulnerabilities · latest Jul 1 2025
- Tenda3 vulnerabilities · latest Nov 3 2021
- TP-Link6 vulnerabilities · latest Sep 3 2025
- Trend Micro12 vulnerabilities · latest May 21
- TrueConf3 vulnerabilities · latest Aug 20
- Ubiquiti4 vulnerabilities · latest Jun 23
- Veeam4 vulnerabilities · latest Oct 17 2024
- Veritas3 vulnerabilities · latest Apr 7 2023
- VMware29 vulnerabilities · latest Mar 4 2025
- WatchGuard4 vulnerabilities · latest Dec 19 2025
- WordPress6 vulnerabilities · latest Sep 25
- Zoho9 vulnerabilities · latest Mar 7 2023
- Zyxel13 vulnerabilities · latest Sep 21
Only vendors with at least three exploited vulnerabilities have a page. Recent vulnerabilities from other vendors appear in the exploited vulnerabilities list.