Counts cover the high and critical CVEs CVE Brief has published, not every CVE a vendor has ever received. Exploitation rate is the share of those CVEs later listed in CISA KEV. Sorted by volume.

VendorCVEsCriticalActively exploitedExploitation rateLatest
WordPress 1159 344 2 0.2% 2026-09-05
Google 1016 117 11 1.1% 2026-09-05
Linux 759 142 7 0.9% 2026-09-04
HP 738 101 0 0% 2026-08-25
Microsoft 503 135 40 8% 2026-09-04
Tenda 465 46 0 0% 2026-09-04
Oracle 455 144 7 1.5% 2026-08-19
Apache 284 94 1 0.4% 2026-08-28
IBM 272 65 1 0.4% 2026-09-05
D-Link 224 55 6 2.7% 2026-09-03
Infor 219 24 0 0% 2026-05-22
TOTOLINK 212 113 0 0% 2026-09-03
Arch 165 46 0 0% 2026-05-29
OpenClaw 163 18 0 0% 2026-07-18
NVIDIA 158 16 0 0% 2026-08-26
Dell 136 9 1 0.7% 2026-09-02
Cisco 117 40 20 17.1% 2026-09-04
Apple 108 44 8 7.4% 2026-08-31
Red Hat 97 18 2 2.1% 2026-09-02
Adobe 96 52 5 5.2% 2026-08-25
Joomla 91 36 1 1.1% 2026-09-03
Intel 80 5 0 0% 2026-08-12
GitLab 69 4 2 2.9% 2026-08-28
Mozilla 64 46 1 1.6% 2026-09-02
SAP 57 28 0 0% 2026-08-25
UTT 51 4 0 0% 2026-08-24
Kubernetes 49 14 0 0% 2026-09-05
SourceCodester 48 0 0 0% 2026-08-24
Edimax 46 3 0 0% 2026-08-18
Linksys 46 2 0 0% 2026-04-26
Docker 44 14 0 0% 2026-08-20
Ruijie 44 1 0 0% 2026-07-06
GitHub 42 13 1 2.4% 2026-09-01
Dokploy 41 31 0 0% 2026-08-31
AWS 41 17 0 0% 2026-08-22
Ubiquiti 41 28 3 7.3% 2026-08-28
GeoVision 40 19 0 0% 2026-08-04
Fortinet 40 17 11 27.5% 2026-08-13
TRENDnet 39 10 0 0% 2026-08-23
Samsung 38 17 1 2.6% 2026-08-10
Gitea 36 14 1 2.8% 2026-08-25
Teams 36 15 0 0% 2026-05-10
Azure 35 14 0 0% 2026-05-27
Jenkins 34 2 1 2.9% 2026-09-03
JetBrains 33 11 2 6.1% 2026-08-18
Spring 32 8 0 0% 2026-08-28
PostgreSQL 31 4 0 0% 2026-08-14
SiYuan 30 17 0 0% 2026-08-31
HPE 29 9 1 3.4% 2026-09-02
Foxit 27 0 0 0% 2026-08-06
Capgo 27 1 0 0% 2026-07-13
F5 25 1 0 0% 2026-09-04
MongoDB 25 3 0 0% 2026-08-30
VMware 25 6 3 12% 2026-08-28
Budibase 24 7 0 0% 2026-08-30
FreeRDP 24 5 0 0% 2026-08-21
Concurrent 24 0 0 0% 2026-04-15
TP-Link 23 3 3 13% 2026-08-29
Drupal 23 12 1 4.3% 2026-09-02
Grav 23 2 0 0% 2026-09-05
Flowise 23 10 0 0% 2026-07-12
Pro 23 0 0 0% 2026-04-06
Picklescan 23 0 0 0% 2026-07-04
Nginx 22 4 0 0% 2026-05-20
WatchGuard 22 2 1 4.5% 2026-08-28
LG 22 5 0 0% 2026-05-22
MervinPraison 22 5 0 0% 2026-08-26
Combodo 22 1 0 0% 2026-08-25
Zoom 21 5 0 0% 2026-07-18
NSM 21 0 0 0% 2026-04-03
GL.iNet 21 12 0 0% 2026-08-18
Mattermost 20 0 0 0% 2026-08-18
Progress 20 5 1 5% 2026-09-04
Windows 20 0 0 0% 2026-05-09
Delta 20 7 0 0% 2026-08-25
Guardian 20 20 0 0% 2026-07-01
Yonyou 20 0 0 0% 2026-01-20
H3C 19 2 0 0% 2026-08-04
WWBN 19 7 0 0% 2026-09-04
HTTP 18 0 0 0% 2026-07-12
Rockwell Automation 17 2 0 0% 2026-09-03
Concrete CMS 17 0 0 0% 2026-05-27
Splunk 17 1 1 5.9% 2026-08-20
Juniper 17 4 1 5.9% 2026-04-11
MISP 16 5 0 0% 2026-09-05
AMD 16 0 0 0% 2026-08-17
SUSE 16 4 0 0% 2026-09-02
Devolutions 16 1 0 0% 2026-08-16
Untrusted 16 0 0 0% 2026-04-15
Quest 15 4 1 6.7% 2026-07-27
Privilege 15 1 0 0% 2026-05-21
Wavlink 15 7 0 0% 2026-08-17
GIMP 15 0 0 0% 2026-08-11
CoolLabs 15 0 0 0% 2026-07-07
Trend Micro 15 3 1 6.7% 2026-05-23
ALGO 15 0 0 0% 2026-01-24
Tencent 14 1 0 0% 2026-08-10
FontForge 13 0 0 0% 2025-12-31
SOLIDWORKS 12 0 0 0% 2026-02-17
LambertGroup 12 0 0 0% 2025-12-17
Tracking 11 0 0 0% 2026-03-07
Endpoint 10 0 1 10% 2026-05-13
ChurchCRM 10 2 0 0% 2026-07-13
Cursor 10 2 0 0% 2026-06-25
RealDefense 10 0 0 0% 2025-12-24
ImageMagick 8 0 0 0% 2026-01-20
Donation 8 0 0 0% 2025-07-21
Control 8 0 0 0% 2026-01-22