Tracked vendors, 2026
Distinct CVEs affecting security products. Routing, collaboration and other non-security lines are excluded — see methodology.
2026 to date
843
2025 same date
509
Pace
+65.6%
Known exploited
33
Severity, 2026
How serious this year's disclosures are.
- Critical 125 14.8%
- High 249 29.5%
- Medium 423 50.2%
- Low 44 5.2%
- Unscored 2 0.2%
Table view
| Vendor | Critical | High | Medium | Low | Unscored | Total |
|---|---|---|---|---|---|---|
| Cisco | 94 | 198 | 282 | 7 | 2 | 583 |
| Fortinet | 14 | 19 | 75 | 16 | 0 | 124 |
| Palo Alto Networks | 2 | 21 | 58 | 21 | 0 | 102 |
| Check Point | 8 | 7 | 3 | 0 | 0 | 18 |
| All | 125 | 249 | 423 | 44 | 2 | 843 |
A CVE affecting two vendors counts once under each, so the rows sum to more than the total.
Recently exploited in the wild
Added to the CISA KEV catalog — confirmed exploitation, not just severity.
| CVE | Published | Severity | Vendor | Products | EPSS |
|---|---|---|---|---|---|
| CVE-2026-76418 KEV | Oct 28, 2026 | High 8.6 Remote · no auth | cisco | cisco-asa, cisco-ftd | 0.008 |
| CVE-2025-61624 KEV | Apr 14, 2026 | Medium 5.4 | fortinet | fortinet-fortios, fortinet-fortipam, fortinet-fortiproxy +1 | 0.013 |
| CVE-2026-76519 KEV | Oct 14, 2026 | Critical 9.8 Remote · no auth | cisco | cisco-secure-email | 0.062 |
| CVE-2026-0322 KEV | Oct 14, 2026 | High 8.6 | palo-alto | palo-alto-pan-os, palo-alto-panorama | 0.017 |
| CVE-2026-104286 KEV | Oct 1, 2026 | Critical 9.8 Remote · no auth | fortinet | fortinet-fortimail | 0.046 |
Latest disclosures
Newest CVEs affecting tracked vendors.
| CVE | Published | Severity | Vendor | Products | EPSS |
|---|---|---|---|---|---|
| CVE-2026-20241 | Nov 4, 2026 | Medium 5.3 Remote · no auth | cisco | cisco-ise, cisco-ise-pic | 0.002 |
| CVE-2026-76419 | Nov 4, 2026 | Medium 6.1 | cisco | cisco-ucm | 0.003 |
| CVE-2026-76506 | Nov 4, 2026 | High 7.6 | cisco | cisco-ucs | 0.014 |
| CVE-2026-76418 KEV | Oct 28, 2026 | High 8.6 Remote · no auth | cisco | cisco-asa, cisco-ftd | 0.008 |
| CVE-2026-106174 | Oct 27, 2026 | Medium 6.7 Remote · no auth | fortinet | fortinet-fortios | 0.003 |
| CVE-2026-107656 | Oct 26, 2026 | Critical 9.6 Remote · no auth | fortinet | fortinet-fortisandbox | 0.009 |
| CVE-2026-76531 | Oct 21, 2026 | Critical 9.9 | cisco | splunk-soar | 0.004 |
| CVE-2026-76530 | Oct 21, 2026 | High 8.8 | cisco | splunk-soar | 0.003 |
| CVE-2026-76529 | Oct 21, 2026 | Critical 9.8 Remote · no auth | cisco | splunk-soar | 0.004 |
| CVE-2026-76528 | Oct 21, 2026 | Critical 9.8 Remote · no auth | cisco | splunk-soar | 0.004 |
| CVE-2026-76527 | Oct 21, 2026 | Critical 9.8 Remote · no auth | cisco | splunk-soar | 0.004 |
| CVE-2026-76526 | Oct 21, 2026 | High 8.8 | cisco | splunk-soar | 0.004 |
| CVE-2026-76408 | Oct 21, 2026 | Critical 9.8 Remote · no auth | cisco | splunk-soar | 0.004 |
| CVE-2026-76407 | Oct 21, 2026 | Critical 9.8 Remote · no auth | cisco | splunk-soar | 0.004 |
| CVE-2026-76406 | Oct 21, 2026 | Medium 5.9 Remote · no auth | cisco | splunk-soar | 0.003 |