Product categories
The comparison that matters is like-for-like: firewall CVEs against firewall CVEs. Categories marked non-security cover routing, collaboration and other lines outside a vendor's security portfolio, and are excluded from risk rankings.
| Category | Risk | CVEs (2026) | Exploited | Scope |
|---|---|---|---|---|
| Firewall / NGFW | 922.7 | 148 | 11 | Security |
| Endpoint / EDR | 278.6 | 35 | 2 | Security |
| SASE / SSE / Secure Web | 213.7 | 50 | 2 | Security |
| VPN & Remote Access | 20.0 | 10 | 0 | Security |
| Email Security | 93.0 | 10 | 1 | Security |
| Identity / IAM / MFA | 472.6 | 84 | 2 | Security |
| SIEM & Log Management | 706.2 | 176 | 2 | Security |
| Threat Detection & Sandbox | 236.5 | 32 | 2 | Security |
| Web & Application Security | 101.7 | 12 | 1 | Security |
| Cloud Security | 57.3 | 8 | 0 | Security |
| OT / IoT Security | 12.1 | 6 | 0 | Security |
| Network & Security Management | 733.4 | 84 | 10 | Security |
| Routing & Switching | 277.3 | 63 | 1 | Non-security |
| Other Products | 244.6 | 59 | 2 | Non-security |