Tracked vendors, 2026
Distinct CVEs affecting security products. Routing, collaboration and other non-security lines are excluded — see methodology.
2026 to date
549
2025 same date
391
Pace
+40.4%
Known exploited
19
Severity, 2026
How serious this year's disclosures are.
- Critical 45 8.2%
- High 157 28.6%
- Medium 313 57.0%
- Low 33 6.0%
- Unscored 1 0.2%
Table view
| Vendor | Critical | High | Medium | Low | Unscored | Total |
|---|---|---|---|---|---|---|
| Cisco | 32 | 123 | 204 | 6 | 1 | 366 |
| Fortinet | 10 | 15 | 63 | 12 | 0 | 100 |
| Palo Alto Networks | 2 | 19 | 45 | 15 | 0 | 81 |
| All | 45 | 157 | 313 | 33 | 1 | 549 |
A CVE affecting two vendors counts once under each, so the rows sum to more than the total.
Recently exploited in the wild
Added to the CISA KEV catalog — confirmed exploitation, not just severity.
| CVE | Published | Severity | Vendor | Products | EPSS |
|---|---|---|---|---|---|
| CVE-2026-20349 KEV | Aug 11, 2026 | High 8.6 | cisco | cisco-asa, cisco-secure-firewall | 0.009 |
| CVE-2026-20316 KEV | Jul 29, 2026 | Medium 5.3 | cisco | cisco-secure-firewall | 0.008 |
| CVE-2025-68686 KEV | Feb 10, 2026 | Medium 5.3 | fortinet | fortinet-fortios | 0.013 |
| CVE-2026-39808 KEV | Apr 14, 2026 | Critical 9.1 | fortinet | fortinet-fortisandbox | 0.912 |
| CVE-2026-25089 KEV | Jun 9, 2026 | Critical 9.1 | fortinet | fortinet-fortisandbox | 0.736 |
Latest disclosures
Newest CVEs affecting tracked vendors.
| CVE | Published | Severity | Vendor | Products | EPSS |
|---|---|---|---|---|---|
| CVE-2026-76405 | Aug 19, 2026 | Medium 4.3 | cisco | splunk-apps | 0.001 |
| CVE-2026-76404 | Aug 19, 2026 | Critical 9.1 | cisco | splunk-apps | 0.006 |
| CVE-2026-76403 | Aug 19, 2026 | High 7.4 | cisco | splunk-apps | 0.002 |
| CVE-2026-76402 | Aug 19, 2026 | High 8.2 | cisco | splunk-apps | 0.003 |
| CVE-2026-76401 | Aug 19, 2026 | Medium 5.9 | cisco | splunk-apps | 0.003 |
| CVE-2026-76400 | Aug 19, 2026 | Medium 5.9 | cisco | splunk-apps | 0.003 |
| CVE-2026-76399 | Aug 19, 2026 | High 8.1 | cisco | splunk-apps | 0.002 |
| CVE-2026-76398 | Aug 19, 2026 | Medium 4.3 | cisco | splunk-apps | 0.002 |
| CVE-2026-76397 | Aug 19, 2026 | High 8.1 | cisco | splunk-apps | 0.003 |
| CVE-2026-76396 | Aug 19, 2026 | High 7.5 | cisco | splunk-apps | 0.002 |
| CVE-2026-76395 | Aug 19, 2026 | High 8.8 | cisco | splunk-apps | 0.005 |
| CVE-2026-76394 | Aug 19, 2026 | High 8.3 | cisco | splunk-apps | 0.003 |
| CVE-2026-76393 | Aug 19, 2026 | Medium 5.9 | cisco | splunk-apps | 0.001 |
| CVE-2026-76392 | Aug 19, 2026 | Medium 5.4 | cisco | splunk-apps | 0.002 |
| CVE-2026-76391 | Aug 19, 2026 | High 8.3 | cisco | splunk-apps | 0.003 |