Product categories
The comparison that matters is like-for-like: firewall CVEs against firewall CVEs. Categories marked non-security cover routing, collaboration and other lines outside a vendor's security portfolio, and are excluded from risk rankings.
| Category | Risk | CVEs (2026) | Exploited | Scope |
|---|---|---|---|---|
| Firewall / NGFW | 874.2 | 159 | 11 | Security |
| Endpoint / EDR | 281.4 | 35 | 2 | Security |
| SASE / SSE / Secure Web | 225.2 | 53 | 3 | Security |
| VPN & Remote Access | 26.1 | 13 | 0 | Security |
| Email Security | 197.8 | 13 | 3 | Security |
| Identity / IAM / MFA | 509.1 | 84 | 3 | Security |
| SIEM & Log Management | 974.2 | 237 | 2 | Security |
| Threat Detection & Sandbox | 290.0 | 46 | 2 | Security |
| Web & Application Security | 101.9 | 12 | 1 | Security |
| Cloud Security | 60.3 | 10 | 0 | Security |
| OT / IoT Security | 39.2 | 11 | 0 | Security |
| Network & Security Management | 1161.4 | 126 | 15 | Security |
| Routing & Switching | 386.7 | 79 | 2 | Non-security |
| Other Products | 413.5 | 88 | 2 | Non-security |