Vendors whose records changed
as of the 2026-09-07 snapshot
1,243 vendors
named in a CVE or CISA KEV record edited after publication. Most records changed under Red Hat: 505.
Records, never added across vendors: a record naming two belongs to both. 829 of the 1,243 vendors have one changed record.
Ranked by count, not rate; a vendor with more records has more that can change.
The 12 drawn here are 12 of 1,243 vendors. 829 of the other 1,231 have one changed record each; none of their records are added together here. For a rate by publisher, see the scorecard.
| Vendor | Records (sorted, highest first; activate to reverse), Distinct CVE records naming this vendor that changed after publication, across every kind of change. Records do not add up down this column: a record naming two vendors belongs to both. | Rows, One row for each record, kind of change and product, so a record whose fix version moved for four operating systems is one record and four rows. Rows do add up down this column. | Products, Distinct products named across this vendor's changed records. | Most common kind, The kind of change with the most rows for this vendor, and how many kinds there are. | Last change, The most recent day a change to one of this vendor's records was carried by a commit we read. That is the day the record changed, not the day the vendor decided to change it. |
|---|---|---|---|---|---|
| x.org | 9 | 9 | 1 | Product added | 2025-12-22 |
| Brother Industries, Ltd | 8 | 358 | 92 | Product added · 2 kinds | 2026-04-07 |
| Dell | 8 | 111 | 110 | Product added · 3 kinds | 2026-07-03 |
| Konica Minolta, Inc. | 8 | 39 | 7 | Product added | 2025-06-25 |
| D-Link | 8 | 20 | 19 | Product added · 2 kinds | 2026-04-24 |
| Wago | 8 | 19 | 3 | Product added | 2025-01-30 |
| Campcodes | 8 | 8 | 3 | Product added | 2025-09-01 |
| Fooplugins | 8 | 8 | 1 | Product added | 2026-04-08 |
| GNU | 8 | 8 | 3 | Product added · 2 kinds | 2026-01-26 |
| SOPlanning | 8 | 8 | 1 | Fix version moved | 2025-11-20 |
| Stylemix | 8 | 8 | 4 | Affected range extended | 2026-04-08 |
| Vcita | 8 | 8 | 3 | Affected range extended | 2026-04-08 |
| Wpbakery | 8 | 8 | 1 | Product added | 2026-04-08 |
| Wpcodefactory | 8 | 8 | 6 | Product added · 2 kinds | 2026-04-08 |
| GitLab | 7 | 10 | 2 | Fix version moved · 3 kinds | 2026-03-30 |
| Citrix | 7 | 8 | 4 | Added to CISA KEV · 2 kinds | 2026-08-26 |
| Relevanssi | 7 | 7 | 1 | Product added | 2026-04-08 |
| Rometheme | 7 | 7 | 2 | Product added | 2026-04-08 |
| TP-Link | 6 | 27 | 25 | Product added · 2 kinds | 2026-09-02 |
| VMware | 6 | 10 | 9 | Product added · 3 kinds | 2026-04-14 |
| PaperCut | 6 | 7 | 2 | Added to CISA KEV · 4 kinds | 2026-08-31 |
| Apache | 6 | 6 | 5 | Added to CISA KEV · 2 kinds | 2026-08-04 |
| Ays Pro | 6 | 6 | 5 | Affected range extended | 2026-04-01 |
| Premio | 6 | 6 | 4 | Product added | 2026-04-08 |
| Quantumcloud | 6 | 6 | 4 | Affected range extended | 2026-04-08 |
| Ultimateblocks | 6 | 6 | 1 | Product added | 2026-04-08 |
| Uxper | 6 | 6 | 3 | Product added · 2 kinds | 2026-04-01 |
| Videowhisper | 6 | 6 | 5 | Affected range extended · 2 kinds | 2026-04-08 |
| Wedevs | 6 | 6 | 3 | Product added · 2 kinds | 2026-04-08 |
| Paragon Software | 5 | 25 | 6 | Product added | 2025-04-14 |
| Legion Of The Bouncy Castle Inc. | 5 | 8 | 7 | Product added | 2026-05-18 |
| Schneider Electric | 5 | 8 | 7 | Product added | 2025-09-09 |
| NETGEAR | 5 | 7 | 4 | Product added | 2026-06-10 |
| Langflow | 5 | 6 | 1 | Added to CISA KEV · 2 kinds | 2026-07-21 |
| QNAP Systems Inc. | 5 | 6 | 4 | Product added · 2 kinds | 2026-06-17 |
| Gestsup | 5 | 5 | 1 | Affected range extended | 2026-01-14 |
| Hive Support | 5 | 5 | 1 | Affected range extended | 2026-04-01 |
| Imithemes | 5 | 5 | 2 | Affected range extended | 2026-04-08 |
| Infility | 5 | 5 | 1 | Affected range extended | 2026-04-08 |
| Kubernetes | 5 | 5 | 2 | Fix version moved · 2 kinds | 2026-02-18 |
| Pluginbuilders | 5 | 5 | 1 | Affected range extended | 2026-04-08 |
| Rails | 5 | 5 | 4 | Product added · 2 kinds | 2026-03-23 |
| rustdesk-client | 5 | 5 | 1 | Affected range extended · 2 kinds | 2026-06-22 |
| Shinetheme | 5 | 5 | 2 | Affected range extended | 2026-04-08 |
| Simopro Technology | 5 | 5 | 2 | Affected range extended | 2025-07-21 |
| Tbc | 5 | 5 | 1 | Product added | 2026-07-31 |
| Webcodingplace | 5 | 5 | 2 | Affected range extended · 2 kinds | 2026-04-08 |
| Wp Messiah | 5 | 5 | 3 | Affected range extended | 2026-04-01 |
| Yaycommerce | 5 | 5 | 5 | Affected range extended · 2 kinds | 2026-04-08 |
| Zyxel | 5 | 5 | 3 | Added to CISA KEV · 3 kinds | 2025-05-12 |
Counting & vendor names
Names follow the source record and may use different spellings. Only counted changes are included. 9,647 rows name a vendor; 2,352 have no vendor, for 11,999 total rows.
Data sources and quality
Counts cover 15 change types. They measure record revisions, not vendor vulnerability rates. Publisher rates →
CVE publication comparisons cover 2023 onward; KEV changes begin with the first mirrored catalog snapshot. What each catalog cannot see →
Shipped snapshot computed 2026-09-07 from catalog commit ed5547afbae2. Real findings, not live ones: records amended since are not reflected. A later fix version is evidence that the record changed, not evidence that the first fix was incomplete.