MEIFP – Most Exploited Internet-Facing Products

Vendor score = sum of Active CVE scores · Each CVE: 10 pts base, boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3

Vendor Risk Ranking

Ranked by cumulative score from Active CVEs in the selected period · AV:Network only · Click vendor name for CVE details

137 vendors

#	Vendor	Score(hover for detail)	Active CVEs	Products
1	Cisco	893.3	24	20
2	Ivanti	730.5	21	11
3	Microsoft	719.3	20	20
4	Fortinet	701.0	19	19
5	Palo Alto Networks	430.1	12	4
6	Oracle	350.9	9	11
7	Apache Software Foundation	294.7	8	15
8	Adobe	277.2	7	8
9	SonicWall	270.8	8	5
10	SolarWinds	269.4	7	2
11	Citrix	254.8	7	2
12	Apple	243.4	6	9
13	checkpoint	202.8	5	5
14	N-able	161.0	5	2
15	BeyondTrust	141.7	4	4
16	Arista Networks	141.3	4	9
17	BerriAI	133.9	4	1
18	jfrog	129.5	4	1
19	JetBrains	121.7	3	1
20	Mikrotik	121.7	3	1
21	SmarterTools	121.7	3	1
22	Ubiquiti Inc	121.7	3	20
23	Plex	117.4	4	2
24	Atlassian	112.3	3	9
25	D-Link	112.3	3	20
26	Progress Software Corporation	112.3	3	2
27	CrushFTP	107.1	3	1
28	Kentico	105.1	3	1
29	langflow-ai	103.1	3	2
30	Zyxel	93.4	3	9
31	ConnectWise	93.0	3	1
32	PHP Group	92.6	3	1
33	Gladinet	92.6	3	3
34	WordPress	92.6	3	1
35	Dassault Systèmes	86.6	3	1
36	craftcms	81.1	2	2
37	GitLab	81.1	2	2
38	geoserver	81.1	2	1
39	GeoVision	81.1	2	20
40	F5	81.1	2	1
41	ServiceNow	81.1	2	1
42	WatchGuard	81.1	2	1
43	SysAid	81.1	2	1
44	Ahsay	81.1	2	1
45	Samsung Electronics	74.9	2	1
46	Advantive	67.0	2	1
47	wftpserver	67.0	2	1
48	Commvault	67.0	2	2
49	Roundcube	67.0	2	1
50	VMware	66.6	2	7
51	TrueConf	66.6	2	1
52	Citrix NetScaler	66.6	2	2
53	SAP_SE	64.6	2	3
54	FreePBX	64.6	2	5
55	PTZOptics	64.6	2	2
56	PaperCut	64.6	2	1
57	LiteSpeed Technologies	62.6	2	3
58	Versa	60.6	2	2
59	Zimbra	57.2	2	2
60	Langflow	40.6	1	1
61	IBM	40.6	1	8
62	Mozilla	40.6	1	4
63	Acronis	40.6	1	1
64	Splunk	40.6	1	4
65	xwiki	40.6	1	3
66	tj-actions	40.6	1	2
67	Linux	40.6	1	1
68	ProjectSend	40.6	1	1
69	mlflow	40.6	1	2
70	Unitronics	40.6	1	1
71	Cloud Software Group	40.6	1	1
72	DrayTek	40.6	1	3
73	Progress Software	40.6	1	2
74	rejetto	40.6	1	2
75	Jenkins Project	40.6	1	1
76	Kludex	40.6	1	2
77	Fortra	40.6	1	3
78	Veeam	40.6	1	2
79	NAKIVO	40.6	1	1
80	Aviatrix	40.6	1	1
81	Hewlett Packard Enterprise (HPE)	40.6	1	3
82	erlang	40.6	1	2
83	AMI	40.6	1	1
84	ScienceLogic	40.6	1	1
85	TrioFox	40.6	1	1
86	Edimax	40.6	1	14
87	MongoDB Inc.	40.6	1	1
88	GNU	40.6	1	5
89	Srimax	40.6	1	1
90	reviewdog	40.6	1	1
91	Craft	40.6	1	1
92	Dell	40.6	1	2
93	QUALITIA CO., LTD.	40.6	1	1
94	TeleMessage	40.6	1	1
95	Trend Micro, Inc.	40.6	1	1
96	Meta	40.6	1	3
97	ASUS	40.6	1	1
98	MOTEX Inc.	40.6	1	1
99	Lantronix	40.6	1	5
100	Drupal	40.6	1	4
101	Collabora	40.6	1	1
102	PTC	40.6	1	2
103	Gitea	40.6	1	3
104	kestra-io	40.6	1	1
105	marimo-team	40.6	1	1
106	WebPros	40.6	1	3
107	Mirasvit	40.6	1	1
108	nrwl	40.6	1	1
109	SimpleHelp	40.6	1	1
110	joomlacontenteditor.net	40.6	1	1
111	joomshaper.net	40.6	1	1
112	icagenda.com	40.6	1	1
113	joomlack.fr	40.6	1	1
114	balbooa.com	40.6	1	1
115	WSO2	40.6	1	5
116	metabase	40.6	1	1
117	AVB Disc Soft	40.6	1	1
118	Sangoma	40.6	1	1
119	wazuh	26.4	1	7
120	FXC Inc.	26.4	1	2
121	gogs	26.4	1	1
122	Facebook	26.4	1	3
123	n8n-io	26.4	1	1
124	Soliton Systems K.K.	26.4	1	1
125	aquasecurity	26.4	1	3
126	team-telnyx	26.4	1	1
127	Google	26.0	1	10
128	livewire	26.0	1	1
129	yiiframework	26.0	1	1
130	FreeType	26.0	1	1
131	Sitecore	26.0	1	6
132	centos-webpanel	26.0	1	1
133	prettier	26.0	1	1
134	TeamT5	24.0	1	1
135	Trimble	24.0	1	3
136	Array Networks	24.0	1	1
137	TP-Link Systems Inc.	24.0	1	6

Recently Active CVEs

Newest 94 CVEs sorted by SSVC Active timestamp · NEW = Active from day one · NONE→ACT / POC→ACT = confirmed upgrade (git diff)

94 entries

Active Date	Published	Days	Status	CVE ID	Vendor	Product	CVSS	AC	PR	Auto	Score
2026-10-23	2026-10-14	+9d	NONE→ACT	CVE-2026-110447	Collabora	Collabora Online - Built-in CODE Server	9.2v4.0	Low	None	YES	40.6
2026-10-23	2026-10-22	+1d	NONE→ACT	CVE-2026-114625	Arista Networks	VeloCloud Orchestrator	9.4v4.0	Low	Low	—	26.4
2026-10-21	2026-10-21	+0d	NONE→ACT	CVE-2026-109619	PHP Group	PHP	9.2v4.0	High	None	—	26.0
2026-10-21	2026-10-21	+0d	NONE→ACT	CVE-2026-109618	PHP Group	PHP	9.2v4.0	High	None	—	26.0
2026-10-20	2026-09-23	+27d	NONE→ACT	CVE-2026-96652	Plex	Media Server	5.3v4.0	Low	Low	—	26.4
2026-10-20	2026-09-23	+27d	NONE→ACT	CVE-2026-96654	Plex	Media Server	6.9v4.0	Low	None	YES	40.6
2026-10-20	2026-09-23	+27d	NONE→ACT	CVE-2026-96655	Plex	Media Server	5.3v4.0	Low	Low	—	26.4
2026-10-20	2026-09-23	+27d	NONE→ACT	CVE-2026-96656	Plex	Media Server	8.6v4.0	Low	High	—	24.0
2026-10-16	2026-10-15	+1d	NEW	CVE-2026-102764	BeyondTrust	Remote Support	9.3v4.0	Low	None	YES	40.6
2026-10-15	2026-10-05	+10d	NONE→ACT	CVE-2026-21589	Atlassian	Bamboo Data Center	9.3v4.0	Low	None	—	31.2
2026-10-14	2026-10-14	+0d	NEW	CVE-2026-0322	Palo Alto Networks	Cloud NGFW	8.6v4.0	Low	High	—	24.0
2026-10-14	2026-10-04	+10d	NONE→ACT	CVE-2026-105133	Ahsay	AhsayCBS	6.9v4.0	Low	None	YES	40.6
2026-10-14	2026-10-14	+0d	NEW	CVE-2026-76519	Cisco	Cisco Secure Email	9.8v3.1	Low	None	YES	40.6
2026-10-14	2026-10-04	+10d	NONE→ACT	CVE-2026-105134	Ahsay	AhsayCBS	10.0v4.0	Low	None	YES	40.6
2026-10-13	2026-10-13	+0d	NEW	CVE-2026-104935	Ivanti	Connect Secure	8.6v3.1	Low	None	YES	40.6
2026-10-04	2026-10-04	+0d	NONE→ACT	CVE-2026-88779	Citrix	NetScaler ADC	8.7v4.0	Low	None	YES	40.6
2026-10-01	2026-10-01	+0d	NONE→ACT	CVE-2026-104286	Fortinet	FortiMail	9.8v3.1	Low	None	YES	40.6
2026-10-01	2026-08-12	+50d	NONE→ACT	CVE-2026-42018	jfrog	artifactory	7.5v3.1	Low	None	YES	40.6
2026-09-30	2026-09-30	+0d	NEW	CVE-2026-76504	Cisco	Cisco Catalyst SD-WAN Manager	9.8v3.1	Low	None	YES	40.6
2026-09-27	2026-09-27	+0d	NEW	CVE-2026-88771	Citrix NetScaler	NetScaler ADC	9.5v4.0	Low	None	YES	40.6
2026-09-27	2026-09-27	+0d	NEW	CVE-2026-88772	Citrix NetScaler	NetScaler ADC	9.5v4.0	High	None	—	26.0
2026-09-25	2026-09-22	+3d	NONE→ACT	CVE-2026-87902	WordPress	WordPress	8.1v3.1	High	None	—	26.0
2026-09-25	2026-08-11	+45d	NONE→ACT	CVE-2026-65660	Microsoft	Microsoft SharePoint Enterprise Server 2016	8.8v3.1	Low	Low	—	26.4
2026-09-25	2026-09-05	+20d	POC→ACT	CVE-2026-67279	Mikrotik	RouterOS	6.9v4.0	Low	None	YES	40.6
2026-09-24	2026-08-11	+44d	NONE→ACT	CVE-2026-71362	Adobe	Adobe Commerce	9.1v3.1	Low	None	YES	40.6
2026-09-24	2026-08-06	+49d	NONE→ACT	CVE-2026-5430	WSO2	WSO2 API Control Plane	10.0v3.1	Low	None	YES	40.6
2026-09-22	2026-09-09	+13d	NONE→ACT	CVE-2026-85102	checkpoint	Quantum Security Gateway	9.8v3.1	Low	None	YES	40.6
2026-09-22	2026-09-22	+0d	NONE→ACT	CVE-2026-93616	checkpoint	Quantum Security Management	9.8v3.1	Low	None	YES	40.6
2026-09-22	2026-09-22	+0d	NEW	CVE-2026-94127	F5	BIG-IP	9.3v4.0	Low	None	YES	40.6
2026-09-22	2026-09-22	+0d	NONE→ACT	CVE-2026-93952	Arista Networks	VeloCloud Orchestrator (VCO) On-Prem	9.5v4.0	High	None	YES	33.8
2026-09-18	2025-09-05	+378d	NONE→ACT	CVE-2025-39682	Linux	Linux	9.8v3.1	Low	None	YES	40.6
2026-09-16	2026-09-16	+0d	NEW	CVE-2026-76460	Cisco	Cisco Identity Services Engine Software	10.0v3.1	Low	None	YES	40.6
2026-09-14	2026-09-14	+0d	NONE→ACT	CVE-2026-76461	Cisco	Cisco Secure Email	9.8v3.1	Low	None	YES	40.6
2026-09-12	2026-09-12	+0d	NEW	CVE-2026-85706	GitLab	GitLab	10.0v3.1	Low	None	YES	40.6
2026-09-11	2026-07-27	+46d	NONE→ACT	CVE-2026-42016	jfrog	artifactory	8.1v3.1	Low	Low	—	26.4
2026-09-11	2026-09-08	+3d	NONE→ACT	CVE-2026-84869	ConnectWise	ScreenConnect	9.9v3.1	Low	Low	—	26.4
2026-09-10	2026-09-05	+5d	NONE→ACT	CVE-2026-67277	Mikrotik	RouterOS	8.8v4.0	Low	None	YES	40.6
2026-09-10	2026-09-05	+5d	NONE→ACT	CVE-2026-86060	Mikrotik	RouterOS	9.2v4.0	Low	None	YES	40.6
2026-09-09	2026-03-04	+189d	NONE→ACT	CVE-2026-20079	Cisco	Cisco Secure Firewall Management Center (FMC)	10.0v3.1	Low	None	YES	40.6
2026-09-09	2026-01-13	+239d	NONE→ACT	CVE-2025-25249	Fortinet	FortiOS	7.4v3.1	High	None	—	26.0
2026-09-09	2026-08-19	+21d	NONE→ACT	CVE-2026-19490	Citrix	NetScaler ADC	9.3v4.0	Low	None	YES	40.6
2026-09-08	2026-09-06	+2d	NONE→ACT	CVE-2026-86218	N-able	N-central	10.0v4.0	Low	None	YES	40.6
2026-09-08	2026-09-07	+1d	NONE→ACT	CVE-2026-75650	Adobe	Adobe Commerce	10.0v3.1	Low	None	YES	40.6
2026-09-02	2026-09-01	+1d	NONE→ACT	CVE-2026-83548	SonicWall	SMA1000	10.0v3.1	Low	None	YES	40.6
2026-09-02	2026-07-17	+47d	NONE→ACT	CVE-2026-9586	Sangoma	Switchvox SMB Edition	9.3v4.0	Low	None	YES	40.6
2026-09-02	2026-08-28	+5d	NONE→ACT	CVE-2026-82329	jfrog	artifactory	9.8v3.1	Low	None	YES	40.6
2026-09-02	2026-06-26	+68d	POC→ACT	CVE-2026-49869	kestra-io	kestra	10.0v3.1	Low	None	YES	40.6
2026-09-02	2026-05-26	+99d	NONE→ACT	CVE-2026-48710	Kludex	starlette	6.5v3.1	Low	None	YES	40.6
2026-09-02	2026-07-08	+56d	NONE→ACT	CVE-2026-59822	BerriAI	litellm	8.8v4.0	Low	None	YES	40.6
2026-08-31	2026-08-28	+3d	POC→ACT	CVE-2026-81578	PaperCut	PaperCut MF/NG	8.8v4.0	Low	None	YES	40.6
2026-08-31	2026-08-28	+3d	POC→ACT	CVE-2026-82078	PaperCut	PaperCut MF/NG	9.4v4.0	Low	High	—	24.0
2026-08-27	2026-08-12	+15d	NONE→ACT	CVE-2026-66384	jfrog	artifactory	5.3v3.1	High	Low	—	22.0
2026-08-26	2026-08-26	+0d	NEW	CVE-2026-60004	Gitea	Gitea	9.8v3.1	Low	None	YES	40.6
2026-08-26	2026-06-30	+57d	NONE→ACT	CVE-2026-8452	Citrix	NetScaler ADC	8.8v4.0	Low	None	YES	40.6
2026-08-24	2026-01-20	+216d	NONE→ACT	CVE-2026-21962	Oracle	Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in	10.0v3.1	Low	None	YES	40.6
2026-08-21	2026-08-13	+8d	NONE→ACT	CVE-2026-73570	Zimbra	Collaboration	8.9v3.1	High	None	—	26.0
2026-08-20	2026-08-19	+1d	NONE→ACT	CVE-2026-72529	TrueConf	TrueConf Server	9.3v4.0	Low	None	YES	40.6
2026-08-20	2026-08-19	+1d	NONE→ACT	CVE-2026-72530	TrueConf	TrueConf Server	9.5v4.0	High	None	—	26.0
2026-08-19	2026-08-17	+2d	NONE→ACT	CVE-2026-64849	mlflow	mlflow	9.3v3.1	Low	None	YES	40.6
2026-08-18	2026-08-06	+12d	NONE→ACT	CVE-2026-65400	Apple	macOS	9.8v3.1	Low	None	YES	40.6
2026-08-18	2026-07-14	+35d	POC→ACT	CVE-2026-55040	Microsoft	Microsoft SharePoint Enterprise Server 2016	9.1v3.1	Low	None	YES	40.6
2026-08-18	2026-07-30	+19d	NONE→ACT	CVE-2026-59310	VMware	Cloud Foundation	9.8v3.1	Low	None	YES	40.6
2026-08-18	2026-04-14	+126d	NONE→ACT	CVE-2026-33824	Microsoft	Windows 10 Version 1607	9.8v3.1	Low	None	YES	40.6
2026-08-12	2026-08-10	+2d	NONE→ACT	CVE-2026-72898	metabase	Metabase	10.0v4.0	Low	None	YES	40.6
2026-08-11	2026-08-11	+0d	NONE→ACT	CVE-2026-20349	Cisco	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software	8.6v3.1	Low	None	YES	40.6
2026-08-05	2026-07-27	+9d	NONE→ACT	CVE-2026-63077	JetBrains	TeamCity	9.8v3.1	Low	None	YES	40.6
2026-08-04	2026-07-17	+18d	NONE→ACT	CVE-2026-9198	IBM	Langflow OSS	9.8v3.1	Low	None	YES	40.6
2026-08-04	2026-04-09	+117d	NONE→ACT	CVE-2026-34486	Apache Software Foundation	Apache Tomcat	7.5v3.1	Low	None	YES	40.6
2026-08-04	2026-08-01	+3d	NONE→ACT	CVE-2026-18556	N-able	N-central	8.2v4.0	High	None	YES	33.8
2026-08-03	2026-08-02	+1d	NONE→ACT	CVE-2026-18577	N-able	N-central	8.2v4.0	High	None	YES	33.8
2026-07-29	2026-07-29	+0d	NONE→ACT	CVE-2026-20316	Cisco	Cisco Secure Firewall Management Center (FMC)	5.3v3.1	Low	None	YES	40.6
2026-07-27	2026-07-27	+0d	NONE→ACT	CVE-2026-16812	Arista Networks	VeloCloud Orchestrator On-Prem	10.0v4.0	Low	None	YES	40.6
2026-07-27	2026-02-10	+167d	NONE→ACT	CVE-2025-68686	Fortinet	FortiOS	5.3v3.1	High	None	—	26.0
2026-07-22	2026-07-14	+8d	NONE→ACT	CVE-2026-50522	Microsoft	Microsoft SharePoint Enterprise Server 2016	9.8v3.1	Low	None	YES	40.6
2026-07-22	2026-07-22	+0d	NONE→ACT	CVE-2026-16232	checkpoint	Multi-Domain Security Management	9.3v4.0	Low	None	YES	40.6
2026-07-21	2026-01-23	+179d	NONE→ACT	CVE-2026-0770	Langflow	Langflow	9.8v3.0	Low	None	YES	40.6
2026-07-21	2026-07-17	+4d	NONE→ACT	CVE-2026-63030	WordPress	WordPress	9.8v3.1	Low	None	YES	40.6
2026-07-21	2026-07-17	+4d	NONE→ACT	CVE-2026-60137	WordPress	WordPress	5.9v3.1	High	None	—	26.0
2026-07-16	2026-04-14	+93d	POC→ACT	CVE-2026-39808	Fortinet	FortiSandbox	9.1v3.1	Low	None	YES	40.6
2026-07-16	2026-06-09	+37d	NONE→ACT	CVE-2026-25089	Fortinet	FortiSandbox	9.1v3.1	Low	None	YES	40.6
2026-07-16	2026-07-14	+2d	NONE→ACT	CVE-2026-58644	Microsoft	Microsoft SharePoint Enterprise Server 2016	9.8v3.1	Low	None	YES	40.6
2026-07-15	2026-05-28	+48d	NONE→ACT	CVE-2026-46817	Oracle	Oracle Payments	9.8v3.1	Low	None	YES	40.6
2026-07-14	2026-07-14	+0d	NEW	CVE-2026-15410	SonicWall	SMA1000	7.2v3.1	Low	High	—	24.0
2026-07-14	2026-07-14	+0d	NEW	CVE-2026-15409	SonicWall	SMA1000	10.0v3.1	Low	None	YES	40.6
2026-07-14	2026-07-14	+0d	NEW	CVE-2026-56164	Microsoft	Microsoft SharePoint Enterprise Server 2016	5.3v3.1	Low	None	YES	40.6
2026-07-10	2026-06-20	+20d	POC→ACT	CVE-2026-48939	icagenda.com	iCagenda extension for Joomla	10.0v4.0	Low	None	YES	40.6
2026-07-10	2026-07-09	+1d	NONE→ACT	CVE-2026-56291	balbooa.com	balbooa.com Balbooa Forms extension for Joomla	10.0v4.0	Low	None	YES	40.6
2026-07-07	2026-06-30	+7d	NONE→ACT	CVE-2026-48282	Adobe	ColdFusion 2023	10.0v3.1	Low	None	YES	40.6
2026-07-07	2026-06-29	+8d	NONE→ACT	CVE-2026-56290	joomlack.fr	JoomlaCK.fr Page Builder CK extension for Joomla	10.0v4.0	Low	None	YES	40.6
2026-07-07	2026-06-23	+14d	POC→ACT	CVE-2026-55255	langflow-ai	langflow	8.4v3.1	High	Low	—	22.0
2026-07-07	2026-06-20	+17d	NONE→ACT	CVE-2026-48908	joomshaper.net	SP Page Builder extension for Joomla	10.0v4.0	Low	None	YES	40.6
2026-07-01	2026-05-22	+40d	NONE→ACT	CVE-2026-45659	Microsoft	Microsoft SharePoint Enterprise Server 2016	8.8v3.1	Low	Low	—	26.4
2026-06-29	2026-06-12	+17d	NONE→ACT	CVE-2026-48558	SimpleHelp	SimpleHelp	9.5v4.0	Low	None	YES	40.6
2026-06-25	2026-06-03	+22d	POC→ACT	CVE-2026-20230	Cisco	Cisco Unified Communications Manager	8.6v3.1	Low	None	—	31.2

Monthly Risk Score TrendOct 2023 – Oct 2026

Rolling 36-month cumulative score — CVEs older than 3 years expire · hover for breakdown

Cisco

Ivanti

Microsoft

Fortinet

Palo Alto Networks

Oracle

Apache Software Foundation

Adobe

SonicWall

SolarWinds

Citrix

Apple

checkpoint

N-able

BeyondTrust