MEIFP – Most Exploited Internet-Facing Products

Vendor score = sum of Active CVE scores · Each CVE: 10 pts base, boosted by:

KEV×2.0AC: Low×1.2PR: None×1.3PR: Low×1.1Auto×1.3

Vendor Risk Ranking

Ranked by cumulative score from Active CVEs in the selected period · AV:Network only · Click vendor name for CVE details

126 vendors

#	Vendor	Score(hover for detail)	Active CVEs	Products
1	Cisco	801.4	23	20
2	Microsoft	733.4	20	20
3	Ivanti	697.7	20	11
4	Fortinet	634.5	17	19
5	Palo Alto Networks	406.1	11	4
6	Oracle	350.9	9	11
7	Apache Software Foundation	335.3	9	16
8	SolarWinds	269.4	7	2
9	Apple	243.4	6	9
10	Adobe	236.6	6	6
11	SonicWall	230.2	7	5
12	Citrix	173.7	5	2
13	JetBrains	162.2	4	1
14	Progress Software Corporation	152.9	4	3
15	Atlassian	121.7	3	2
16	checkpoint	121.7	3	5
17	SmarterTools	121.7	3	1
18	Ubiquiti Inc	121.7	3	20
19	N-able	120.4	4	1
20	D-Link	112.3	3	20
21	F5	107.5	3	1
22	CrushFTP	107.1	3	1
23	Kentico	105.1	3	1
24	langflow-ai	103.1	3	1
25	BeyondTrust	101.1	3	4
26	VMware	97.8	3	9
27	Zyxel	93.4	3	9
28	BerriAI	93.4	3	1
29	Gladinet	92.6	3	3
30	Dassault Systèmes	86.6	3	1
31	craftcms	81.1	2	2
32	Arista Networks	81.1	2	7
33	geoserver	81.1	2	1
34	GeoVision	81.1	2	20
35	ServiceNow	81.1	2	1
36	WatchGuard	81.1	2	1
37	SysAid	81.1	2	1
38	Roundcube	67.0	2	2
39	ASUS	67.0	2	2
40	Advantive	67.0	2	1
41	Samsung Electronics	67.0	2	1
42	wftpserver	67.0	2	1
43	Commvault	67.0	2	2
44	ConnectWise	66.6	2	1
45	WordPress	66.6	2	1
46	TrueConf	66.6	2	1
47	Trend Micro, Inc.	64.6	2	3
48	SAP_SE	64.6	2	3
49	FreePBX	64.6	2	5
50	PTZOptics	64.6	2	2
51	LiteSpeed Technologies	62.6	2	3
52	Versa	60.6	2	2
53	Zimbra	57.2	2	2
54	Langflow	40.6	1	1
55	GitLab	40.6	1	1
56	IBM	40.6	1	6
57	Mozilla	40.6	1	5
58	Juniper Networks	40.6	1	2
59	xwiki	40.6	1	3
60	Acronis	40.6	1	1
61	North Grid Corporation	40.6	1	3
62	Splunk	40.6	1	4
63	GNU	40.6	1	5
64	KNX Association	40.6	1	1
65	tj-actions	40.6	1	2
66	projectSend	40.6	1	1
67	Meta	40.6	1	4
68	mlflow	40.6	1	2
69	Unitronics	40.6	1	1
70	Cloud Software Group	40.6	1	1
71	PHP Group	40.6	1	1
72	DrayTek	40.6	1	3
73	Progress Software	40.6	1	2
74	Rejetto	40.6	1	1
75	Jenkins Project	40.6	1	1
76	Fortra	40.6	1	3
77	Veeam	40.6	1	2
78	NAKIVO	40.6	1	1
79	Aviatrix	40.6	1	1
80	Hewlett Packard Enterprise (HPE)	40.6	1	3
81	erlang	40.6	1	1
82	AMI	40.6	1	1
83	ScienceLogic	40.6	1	1
84	TrioFox	40.6	1	1
85	Edimax	40.6	1	13
86	MongoDB Inc.	40.6	1	1
87	Srimax	40.6	1	1
88	reviewdog	40.6	1	1
89	Craft	40.6	1	1
90	Dell	40.6	1	2
91	QUALITIA CO., LTD.	40.6	1	1
92	TeleMessage	40.6	1	1
93	MOTEX Inc.	40.6	1	1
94	Drupal	40.6	1	4
95	PTC	40.6	1	2
96	marimo-team	40.6	1	1
97	WebPros	40.6	1	3
98	Mirasvit	40.6	1	1
99	nrwl	40.6	1	1
100	SimpleHelp	40.6	1	1
101	joomlacontenteditor.net	40.6	1	1
102	joomshaper.net	40.6	1	1
103	icagenda.com	40.6	1	1
104	joomlack.fr	40.6	1	1
105	balbooa.com	40.6	1	1
106	Metabase	40.6	1	1
107	AVB Disc Soft	40.6	1	1
108	wazuh	26.4	1	7
109	FXC Inc.	26.4	1	2
110	gogs	26.4	1	1
111	Facebook	26.4	1	3
112	n8n-io	26.4	1	1
113	Soliton Systems K.K.	26.4	1	1
114	aquasecurity	26.4	1	3
115	team-telnyx	26.4	1	1
116	Google	26.0	1	8
117	livewire	26.0	1	1
118	yiiframework	26.0	1	1
119	FreeType	26.0	1	1
120	Sitecore	26.0	1	6
121	centos-webpanel	26.0	1	1
122	prettier	26.0	1	1
123	TeamT5	24.0	1	1
124	Trimble	24.0	1	3
125	Array Networks	24.0	1	1
126	TP-Link Systems Inc.	24.0	1	6

Recently Active CVEs

Newest 89 CVEs sorted by SSVC Active timestamp · NEW = Active from day one · NONE→ACT / POC→ACT = confirmed upgrade (git diff)

89 entries

Active Date	Published	Days	Status	CVE ID	Vendor	Product	CVSS	AC	PR	Auto	Score
2026-08-24	2026-01-20	+216d	NONE→ACT	CVE-2026-21962	Oracle	Oracle HTTP Server, Oracle Weblogic Server Proxy Plug-in	10.0v3.1	Low	None	YES	40.6
2026-08-21	2026-08-13	+8d	NONE→ACT	CVE-2026-73570	Zimbra	Collaboration	8.9v3.1	High	None	—	26.0
2026-08-20	2026-08-19	+1d	NONE→ACT	CVE-2026-72529	TrueConf	TrueConf Server	9.3v4.0	Low	None	YES	40.6
2026-08-20	2026-08-19	+1d	NONE→ACT	CVE-2026-72530	TrueConf	TrueConf Server	9.5v4.0	High	None	—	26.0
2026-08-19	2026-08-17	+2d	NONE→ACT	CVE-2026-64849	mlflow	MLflow	9.3v3.1	Low	None	YES	40.6
2026-08-18	2026-08-06	+12d	NONE→ACT	CVE-2026-65400	Apple	macOS	9.8v3.1	Low	None	YES	40.6
2026-08-18	2026-07-14	+35d	POC→ACT	CVE-2026-55040	Microsoft	Microsoft SharePoint Enterprise Server 2016	9.1v3.1	Low	None	YES	40.6
2026-08-18	2026-07-30	+19d	NONE→ACT	CVE-2026-59310	VMware	Cloud Foundation	9.8v3.1	Low	None	YES	40.6
2026-08-18	2026-04-14	+126d	NONE→ACT	CVE-2026-33824	Microsoft	Windows 10 Version 1607	9.8v3.1	Low	None	YES	40.6
2026-08-12	2026-08-10	+2d	NONE→ACT	CVE-2026-72898	Metabase	Metabase	10.0v4.0	Low	None	YES	40.6
2026-08-11	2026-08-11	+0d	NONE→ACT	CVE-2026-20349	Cisco	Cisco Secure Firewall Adaptive Security Appliance (ASA) Software	8.6v3.1	Low	None	YES	40.6
2026-08-05	2026-07-27	+9d	NONE→ACT	CVE-2026-63077	JetBrains	TeamCity	9.8v3.1	Low	None	YES	40.6
2026-08-04	2026-07-17	+18d	NONE→ACT	CVE-2026-9198	IBM	Langflow OSS	9.8v3.1	Low	None	YES	40.6
2026-08-04	2026-04-09	+117d	NONE→ACT	CVE-2026-34486	Apache Software Foundation	Apache Tomcat	7.5v3.1	Low	None	YES	40.6
2026-08-04	2026-08-01	+3d	NONE→ACT	CVE-2026-18556	N-able	N-central	8.2v4.0	High	None	YES	33.8
2026-08-03	2026-08-02	+1d	NONE→ACT	CVE-2026-18577	N-able	N-central	8.2v4.0	High	None	YES	33.8
2026-07-29	2026-07-29	+0d	NONE→ACT	CVE-2026-20316	Cisco	Cisco Secure Firewall Management Center (FMC)	5.3v3.1	Low	None	YES	40.6
2026-07-27	2026-07-27	+0d	NONE→ACT	CVE-2026-16812	Arista Networks	VeloCloud Orchestrator On-Prem	10.0v4.0	Low	None	YES	40.6
2026-07-27	2026-02-10	+167d	NONE→ACT	CVE-2025-68686	Fortinet	FortiOS	5.3v3.1	High	None	—	26.0
2026-07-22	2026-07-14	+8d	NONE→ACT	CVE-2026-50522	Microsoft	Microsoft SharePoint Enterprise Server 2016	9.8v3.1	Low	None	YES	40.6
2026-07-22	2026-07-22	+0d	NONE→ACT	CVE-2026-16232	checkpoint	Multi-Domain Security Management	9.3v4.0	Low	None	YES	40.6
2026-07-21	2026-01-23	+179d	NONE→ACT	CVE-2026-0770	Langflow	Langflow	9.8v3.0	Low	None	YES	40.6
2026-07-21	2026-07-17	+4d	NONE→ACT	CVE-2026-63030	WordPress	WordPress	9.8v3.1	Low	None	YES	40.6
2026-07-21	2026-07-17	+4d	NONE→ACT	CVE-2026-60137	WordPress	WordPress	5.9v3.1	High	None	—	26.0
2026-07-16	2026-04-14	+93d	POC→ACT	CVE-2026-39808	Fortinet	FortiSandbox	9.1v3.1	Low	None	YES	40.6
2026-07-16	2026-06-09	+37d	NONE→ACT	CVE-2026-25089	Fortinet	FortiSandbox	9.1v3.1	Low	None	YES	40.6
2026-07-16	2026-07-14	+2d	NONE→ACT	CVE-2026-58644	Microsoft	Microsoft SharePoint Enterprise Server 2016	9.8v3.1	Low	None	YES	40.6
2026-07-15	2023-08-29	+1051d	NONE→ACT	CVE-2023-4346	KNX Association	KNX Protocol Connection Authorization Option 1	7.5v3.1	Low	None	YES	40.6
2026-07-15	2026-05-28	+48d	NONE→ACT	CVE-2026-46817	Oracle	Oracle Payments	9.8v3.1	Low	None	YES	40.6
2026-07-14	2026-07-14	+0d	NEW	CVE-2026-15410	SonicWall	SMA1000	7.2v3.1	Low	High	—	24.0
2026-07-14	2026-07-14	+0d	NEW	CVE-2026-15409	SonicWall	SMA1000	10.0v3.1	Low	None	YES	40.6
2026-07-14	2026-07-14	+0d	NEW	CVE-2026-56164	Microsoft	Microsoft SharePoint Enterprise Server 2016	5.3v3.1	Low	None	YES	40.6
2026-07-10	2026-06-20	+20d	POC→ACT	CVE-2026-48939	icagenda.com	iCagenda extension for Joomla	10.0v4.0	Low	None	YES	40.6
2026-07-10	2026-07-09	+1d	NONE→ACT	CVE-2026-56291	balbooa.com	balbooa.com Balbooa Forms extension for Joomla	10.0v4.0	Low	None	YES	40.6
2026-07-07	2026-06-30	+7d	NONE→ACT	CVE-2026-48282	Adobe	ColdFusion 2023	10.0v3.1	Low	None	YES	40.6
2026-07-07	2026-06-29	+8d	NONE→ACT	CVE-2026-56290	joomlack.fr	JoomlaCK.fr Page Builder CK extension for Joomla	10.0v4.0	Low	None	YES	40.6
2026-07-07	2026-06-23	+14d	POC→ACT	CVE-2026-55255	langflow-ai	langflow	8.4v3.1	High	Low	—	22.0
2026-07-07	2026-06-20	+17d	NONE→ACT	CVE-2026-48908	joomshaper.net	SP Page Builder extension for Joomla	10.0v4.0	Low	None	YES	40.6
2026-07-01	2026-05-22	+40d	NONE→ACT	CVE-2026-45659	Microsoft	Microsoft SharePoint Enterprise Server 2016	8.8v3.1	Low	Low	—	26.4
2026-06-29	2026-06-12	+17d	NONE→ACT	CVE-2026-48558	SimpleHelp	SimpleHelp	9.5v4.0	Low	None	YES	40.6
2026-06-25	2026-06-03	+22d	POC→ACT	CVE-2026-20230	Cisco	Cisco Unified Communications Manager	8.6v3.1	Low	None	—	31.2
2026-06-25	2026-06-18	+7d	NONE→ACT	CVE-2026-12569	PTC	FlexPLM	9.3v4.0	Low	None	YES	40.6
2026-06-23	2026-05-22	+32d	NONE→ACT	CVE-2026-34908	Ubiquiti Inc	EFG	10.0v3.1	Low	None	YES	40.6
2026-06-23	2026-05-22	+32d	NONE→ACT	CVE-2026-34909	Ubiquiti Inc	EFG	10.0v3.1	Low	None	YES	40.6
2026-06-23	2026-05-22	+32d	NONE→ACT	CVE-2026-34910	Ubiquiti Inc	EFG	10.0v3.1	Low	None	YES	40.6
2026-06-18	2026-06-10	+8d	POC→ACT	CVE-2026-20253	Splunk	Splunk Enterprise	9.8v3.1	Low	None	YES	40.6
2026-06-16	2026-06-05	+11d	NONE→ACT	CVE-2026-48907	joomlacontenteditor.net	Joomla Content Editor (JCE) extension for Joomla	10.0v4.0	Low	None	YES	40.6
2026-06-15	2026-06-15	+0d	NEW	CVE-2026-20262	Cisco	Cisco Catalyst SD-WAN Manager	6.5v3.1	Low	Low	—	26.4
2026-06-15	2026-06-14	+1d	NONE→ACT	CVE-2026-54420	LiteSpeed Technologies	cPanel Plugin	8.5v3.1	High	Low	—	22.0
2026-06-12	2026-06-11	+1d	NONE→ACT	CVE-2026-35273	Oracle	PeopleSoft Enterprise PeopleTools	9.8v3.1	Low	None	YES	40.6
2026-06-11	2026-06-09	+2d	POC→ACT	CVE-2026-10520	Ivanti	Sentry	10.0v3.1	Low	None	YES	40.6
2026-06-09	2026-06-05	+4d	NONE→ACT	CVE-2026-7473	Arista Networks	EOS	6.9v4.0	Low	None	YES	40.6
2026-06-08	2026-06-08	+0d	NONE→ACT	CVE-2026-50751	checkpoint	Quantum Security Gateway	9.3v3.1	Low	None	YES	40.6
2026-06-08	2026-05-08	+31d	NONE→ACT	CVE-2026-42271	BerriAI	litellm	8.7v4.0	Low	Low	—	26.4
2026-06-05	2026-06-04	+1d	NONE→ACT	CVE-2026-28318	SolarWinds	Serv-U	7.5v3.1	Low	None	YES	40.6
2026-06-03	2026-05-26	+8d	NONE→ACT	CVE-2026-45247	Mirasvit	Full Page Cache Warmer for Magento 2	9.3v4.0	Low	None	YES	40.6
2026-06-01	2024-07-16	+685d	NONE→ACT	CVE-2024-21182	Oracle	WebLogic Server	7.5v3.1	Low	None	YES	40.6
2026-05-29	2026-05-13	+16d	NONE→ACT	CVE-2026-0257	Palo Alto Networks	Cloud NGFW	7.8v4.0	Low	None	—	31.2
2026-05-27	2026-05-15	+12d	NONE→ACT	CVE-2026-8398	AVB Disc Soft	DAEMON Tools Lite	9.3v4.0	Low	None	YES	40.6
2026-05-27	2026-05-27	+0d	NEW	CVE-2026-48027	nrwl	nx-console	9.3v4.0	Low	None	YES	40.6
2026-05-26	2026-05-21	+5d	NONE→ACT	CVE-2026-48172	LiteSpeed Technologies	cPanel Plugin	10.0v4.0	Low	None	YES	40.6
2026-05-22	2026-05-20	+2d	NONE→ACT	CVE-2026-9082	Drupal	Drupal core	6.5v3.1	Low	None	YES	40.6
2026-05-14	2026-05-14	+0d	NEW	CVE-2026-20182	Cisco	Cisco Catalyst SD-WAN Controller	10.0v3.1	Low	None	YES	40.6
2026-05-08	2026-05-08	+0d	NONE→ACT	CVE-2026-42208	BerriAI	litellm	9.3v4.0	Low	None	YES	40.6
2026-05-07	2026-05-07	+0d	NEW	CVE-2026-6973	Ivanti	Endpoint Manager Mobile	7.2v3.1	Low	High	—	24.0
2026-05-06	2026-05-06	+0d	NEW	CVE-2026-0300	Palo Alto Networks	Cloud NGFW	9.3v4.0	Low	None	YES	40.6
2026-04-30	2026-04-29	+1d	POC→ACT	CVE-2026-41940	WebPros	cPanel	9.3v4.0	Low	None	YES	40.6
2026-04-24	2024-08-09	+623d	NONE→ACT	CVE-2024-7399	Samsung Electronics	MagicINFO 9 Server	8.8v3.1	Low	Low	—	26.4
2026-04-23	2026-04-09	+14d	NONE→ACT	CVE-2026-39987	marimo-team	marimo	9.3v4.0	Low	None	YES	40.6
2026-04-20	2026-02-25	+54d	NONE→ACT	CVE-2026-20122	Cisco	Cisco Catalyst SD-WAN Manager	5.4v3.1	Low	Low	—	26.4
2026-04-20	2026-02-25	+54d	NONE→ACT	CVE-2026-20133	Cisco	Cisco Catalyst SD-WAN Manager	6.5v3.1	Low	Low	—	26.4
2026-04-20	2025-03-24	+392d	NONE→ACT	CVE-2025-2749	Kentico	Xperience	7.2v3.1	Low	High	—	24.0
2026-04-20	2024-03-04	+777d	POC→ACT	CVE-2024-27199	JetBrains	TeamCity	7.3v3.1	Low	None	YES	40.6
2026-04-16	2026-04-07	+9d	NONE→ACT	CVE-2026-34197	Apache Software Foundation	Apache ActiveMQ	8.8v3.1	Low	Low	—	26.4
2026-04-14	2026-04-14	+0d	NEW	CVE-2026-32201	Microsoft	Microsoft SharePoint Enterprise Server 2016	6.5v3.1	Low	None	YES	40.6
2026-04-13	2026-02-06	+66d	POC→ACT	CVE-2026-21643	Fortinet	FortiClientEMS	9.1v3.1	Low	None	YES	40.6
2026-04-08	2026-01-29	+69d	NONE→ACT	CVE-2026-1340	Ivanti	Endpoint Manager Mobile	9.8v3.1	Low	None	YES	40.6
2026-04-06	2026-04-04	+2d	NONE→ACT	CVE-2026-35616	Fortinet	FortiClientEMS	9.1v3.1	Low	None	YES	40.6
2026-03-30	2026-03-23	+7d	NONE→ACT	CVE-2026-3055	Citrix	NetScaler ADC	9.3v4.0	Low	None	YES	40.6
2026-03-27	2025-10-15	+163d	NONE→ACT	CVE-2025-53521	F5	BIG-IP	9.3v4.0	Low	None	YES	40.6
2026-03-26	2026-03-23	+3d	POC→ACT	CVE-2026-33634	BerriAI	litellm	9.4v4.0	Low	Low	—	26.4
2026-03-25	2026-03-20	+5d	POC→ACT	CVE-2026-33017	langflow-ai	langflow	9.3v4.0	Low	None	YES	40.6
2026-03-21	2025-07-17	+247d	NONE→ACT	CVE-2025-54068	livewire	livewire	9.2v4.0	High	None	—	26.0
2026-03-20	2025-04-25	+329d	POC→ACT	CVE-2025-32432	craftcms	cms	10.0v3.1	Low	None	YES	40.6
2026-03-19	2026-03-04	+15d	NONE→ACT	CVE-2026-20131	Cisco	Cisco Secure Firewall Management Center (FMC)	10.0v3.1	Low	None	YES	40.6
2026-03-18	2026-01-13	+64d	NONE→ACT	CVE-2026-20963	Microsoft	Microsoft SharePoint Enterprise Server 2016	9.8v3.1	Low	None	YES	40.6
2026-03-18	2026-01-05	+72d	NONE→ACT	CVE-2025-66376	Zimbra	Collaboration	7.2v3.1	Low	None	—	31.2
2026-03-16	2025-07-10	+249d	POC→ACT	CVE-2025-47813	wftpserver	Wing FTP Server	4.3v3.1	Low	Low	—	26.4
2026-03-11	2025-12-19	+82d	NONE→ACT	CVE-2025-68613	n8n-io	n8n	10.0v3.1	Low	Low	—	26.4

Monthly Risk Score TrendAug 2023 – Aug 2026

Rolling 36-month cumulative score — CVEs older than 3 years expire · hover for breakdown

Cisco

Microsoft

Ivanti

Fortinet

Palo Alto Networks

Oracle

Apache Software Foundation

SolarWinds

Apple

Adobe

SonicWall

Citrix

JetBrains

Progress Software Corporation

Atlassian