Vendors whose records changed
as of the 2026-09-07 snapshot
1,243 vendors
named in a CVE or CISA KEV record edited after publication. Most records changed under Red Hat: 505.
Records, never added across vendors: a record naming two belongs to both. 829 of the 1,243 vendors have one changed record.
Ranked by count, not rate; a vendor with more records has more that can change.
The 12 drawn here are 12 of 1,243 vendors. 829 of the other 1,231 have one changed record each; none of their records are added together here. For a rate by publisher, see the scorecard.
| Vendor | Records (sorted, lowest first; activate to reverse), Distinct CVE records naming this vendor that changed after publication, across every kind of change. Records do not add up down this column: a record naming two vendors belongs to both. | Rows, One row for each record, kind of change and product, so a record whose fix version moved for four operating systems is one record and four rows. Rows do add up down this column. | Products, Distinct products named across this vendor's changed records. | Most common kind, The kind of change with the most rows for this vendor, and how many kinds there are. | Last change, The most recent day a change to one of this vendor's records was carried by a commit we read. That is the day the record changed, not the day the vendor decided to change it. |
|---|---|---|---|---|---|
| Renzo Tejada | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Renzo Johnson | 1 | 1 | 1 | Product added | 2026-04-01 |
| Rejetto | 1 | 1 | 1 | Ransomware use confirmed | 2026-08-06 |
| Reimund | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Redis | 1 | 1 | 1 | Product added | 2026-08-31 |
| redhat-developer | 1 | 1 | 1 | Product added | 2025-12-24 |
| realmag777 | 1 | 1 | 1 | Product added | 2026-04-01 |
| reader87 | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| React Native Community | 1 | 1 | 1 | Added to CISA KEV | 2026-02-05 |
| Rayhanduitku | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Ray-Project | 1 | 1 | 1 | Added to CISA KEV | 2026-08-17 |
| rameez_iqbal | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Rajkakadiya | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Rainbowlink Inc. | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Rainafarai | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Rahalaboulfeth | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Quomodosoft | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Quest | 1 | 1 | 1 | Added to CISA KEV | 2026-04-20 |
| Quarkus | 1 | 1 | 1 | Product added | 2026-09-04 |
| Quarka | 1 | 1 | 1 | Product added | 2026-04-08 |
| Qualitia | 1 | 1 | 1 | Added to CISA KEV | 2025-04-29 |
| Qriouslad | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| qos.ch Sarl | 1 | 1 | 1 | Fix version moved | 2026-07-01 |
| Qlik | 1 | 1 | 1 | Ransomware use confirmed | 2025-03-18 |
| Puneethreddyhc | 1 | 1 | 1 | Product added | 2023-06-19 |
| pubudu-malalasekara | 1 | 1 | 1 | Product added | 2026-04-08 |
| Publitio | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Proxymis | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Prowcplugins | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Provesource Ltd | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Promolayerpopupbuilder | 1 | 1 | 1 | Product added | 2026-04-08 |
| Projectopia | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Productive Minds | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Prodigycommerce | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Prismitsystems | 1 | 1 | 1 | Product added | 2026-04-08 |
| Prettier | 1 | 1 | 1 | Added to CISA KEV | 2026-01-22 |
| Pressforward | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Premila | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Prem Tiwari | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Portone | 1 | 1 | 1 | Product added | 2026-04-01 |
| Portabilis | 1 | 1 | 1 | Product added | 2025-08-25 |
| Popupbuilder | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Popup Maker | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Poptin | 1 | 1 | 1 | Product added | 2026-04-08 |
| Pluginops | 1 | 1 | 1 | Affected range extended | 2024-11-19 |
| Pluginly | 1 | 1 | 1 | Product added | 2026-04-08 |
| Plugin Devs | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Plugify | 1 | 1 | 1 | Product added | 2026-04-01 |
| Planet Fitness | 1 | 1 | 1 | Fix version moved | 2025-02-28 |
| Plainware | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
Counting & vendor names
Names follow the source record and may use different spellings. Only counted changes are included. 9,647 rows name a vendor; 2,352 have no vendor, for 11,999 total rows.
Data sources and quality
Counts cover 15 change types. They measure record revisions, not vendor vulnerability rates. Publisher rates →
CVE publication comparisons cover 2023 onward; KEV changes begin with the first mirrored catalog snapshot. What each catalog cannot see →
Shipped snapshot computed 2026-09-07 from catalog commit f3250c735415. Real findings, not live ones: records amended since are not reflected. A later fix version is evidence that the record changed, not evidence that the first fix was incomplete.