Tracked vendors, 2026
Distinct CVEs affecting security products. Routing, collaboration and other non-security lines are excluded — see methodology.
2026 to date
685
2025 same date
428
Pace
+60.0%
Known exploited
27
Severity, 2026
How serious this year's disclosures are.
- Critical 87 12.7%
- High 201 29.3%
- Medium 357 52.1%
- Low 39 5.7%
- Unscored 1 0.1%
Table view
| Vendor | Critical | High | Medium | Low | Unscored | Total |
|---|---|---|---|---|---|---|
| Cisco | 64 | 156 | 235 | 7 | 1 | 463 |
| Fortinet | 11 | 17 | 68 | 14 | 0 | 110 |
| Palo Alto Networks | 2 | 20 | 50 | 18 | 0 | 90 |
| Check Point | 8 | 7 | 3 | 0 | 0 | 18 |
| All | 87 | 201 | 357 | 39 | 1 | 685 |
A CVE affecting two vendors counts once under each, so the rows sum to more than the total.
Recently exploited in the wild
Added to the CISA KEV catalog — confirmed exploitation, not just severity.
| CVE | Published | Severity | Vendor | Products | EPSS |
|---|---|---|---|---|---|
| CVE-2026-93616 KEV | Sep 22, 2026 | Critical 9.8 | check-point | check-point-security-management | 0.024 |
| CVE-2026-85102 KEV | Sep 9, 2026 | Critical 9.8 | check-point | check-point-quantum-gateway | 0.007 |
| CVE-2026-76460 KEV | Sep 16, 2026 | Critical 10 | cisco | cisco-ise, cisco-ise-pic | 0.008 |
| CVE-2026-76461 KEV | Sep 14, 2026 | Critical 9.8 | cisco | cisco-secure-email | 0.020 |
| CVE-2026-20079 KEV | Mar 4, 2026 | Critical 10 | cisco | cisco-secure-firewall | 0.758 |
Latest disclosures
Newest CVEs affecting tracked vendors.
| CVE | Published | Severity | Vendor | Products | EPSS |
|---|---|---|---|---|---|
| CVE-2026-84388 | Sep 22, 2026 | Critical 9.1 | fortinet | fortinet-fortipam | 0.004 |
| CVE-2026-93616 KEV | Sep 22, 2026 | Critical 9.8 | check-point | check-point-security-management | 0.024 |
| CVE-2026-76426 | Sep 16, 2026 | Medium 4.9 | cisco | cisco-ise, cisco-ise-pic | 0.003 |
| CVE-2026-20121 | Sep 16, 2026 | Medium 5.3 | cisco | cisco-asa, cisco-secure-firewall | 0.005 |
| CVE-2026-76431 | Sep 16, 2026 | Medium 4.9 | cisco | cisco-ise, cisco-ise-pic | 0.011 |
| CVE-2026-76427 | Sep 16, 2026 | Medium 4.9 | cisco | cisco-ise, cisco-ise-pic | 0.003 |
| CVE-2026-76447 | Sep 16, 2026 | Medium 5.3 | cisco | cisco-ise, cisco-ise-pic | 0.003 |
| CVE-2026-20285 | Sep 16, 2026 | Medium 4.3 | cisco | cisco-ise, cisco-ise-pic | 0.004 |
| CVE-2026-20287 | Sep 16, 2026 | Medium 6.5 | cisco | cisco-ise, cisco-ise-pic | 0.002 |
| CVE-2026-20286 | Sep 16, 2026 | Medium 4.3 | cisco | cisco-ise | 0.004 |
| CVE-2026-76438 | Sep 16, 2026 | Medium 6.5 | cisco | cisco-broadworks | 0.003 |
| CVE-2026-20072 | Sep 16, 2026 | Medium 4.9 | cisco | cisco-ise | 0.004 |
| CVE-2026-76446 | Sep 16, 2026 | Medium 4.9 | cisco | cisco-ise, cisco-ise-pic | 0.003 |
| CVE-2026-20071 | Sep 16, 2026 | Low 3.8 | cisco | cisco-ise | 0.001 |
| CVE-2026-20300 | Sep 16, 2026 | High 7.1 | cisco | cisco-ise | 0.003 |