Product categories
The comparison that matters is like-for-like: firewall CVEs against firewall CVEs. Categories marked non-security cover routing, collaboration and other lines outside a vendor's security portfolio, and are excluded from risk rankings.
| Category | CVEs (2026) | Exploited | Scope |
|---|---|---|---|
| Firewall / NGFW | 99 | 6 | Security |
| Endpoint / EDR | 21 | 2 | Security |
| SASE / SSE / Secure Web | 53 | 3 | Security |
| VPN & Remote Access | 4 | 0 | Security |
| Email Security | 2 | 0 | Security |
| Identity / IAM / MFA | 26 | 1 | Security |
| SIEM & Log Management | 26 | 1 | Security |
| Threat Detection & Sandbox | 29 | 2 | Security |
| Web & Application Security | 10 | 1 | Security |
| Cloud Security | 1 | 0 | Security |
| OT / IoT Security | 6 | 0 | Security |
| Network & Security Management | 47 | 8 | Security |
| Routing & Switching | 39 | 0 | Non-security |
| Other Products | 51 | 2 | Non-security |