Vendors whose records changed
as of the 2026-09-07 snapshot
1,243 vendors
named in a CVE or CISA KEV record edited after publication. Most records changed under Red Hat: 505.
Records, never added across vendors: a record naming two belongs to both. 829 of the 1,243 vendors have one changed record.
Ranked by count, not rate; a vendor with more records has more that can change.
The 12 drawn here are 12 of 1,243 vendors. 829 of the other 1,231 have one changed record each; none of their records are added together here. For a rate by publisher, see the scorecard.
| Vendor | Records (sorted, highest first; activate to reverse), Distinct CVE records naming this vendor that changed after publication, across every kind of change. Records do not add up down this column: a record naming two vendors belongs to both. | Rows, One row for each record, kind of change and product, so a record whose fix version moved for four operating systems is one record and four rows. Rows do add up down this column. | Products, Distinct products named across this vendor's changed records. | Most common kind, The kind of change with the most rows for this vendor, and how many kinds there are. | Last change, The most recent day a change to one of this vendor's records was carried by a commit we read. That is the day the record changed, not the day the vendor decided to change it. |
|---|---|---|---|---|---|
| Aharonyan | 3 | 3 | 2 | Affected range extended · 2 kinds | 2026-04-08 |
| Aman | 3 | 3 | 1 | Product added | 2026-04-01 |
| Apustheme | 3 | 3 | 3 | Affected range extended | 2026-04-08 |
| Ateeq Rafeeq | 3 | 3 | 1 | Product added · 2 kinds | 2026-04-01 |
| Axiomthemes | 3 | 3 | 3 | Product added | 2026-04-01 |
| Azzaroco | 3 | 3 | 1 | Affected range extended | 2026-04-01 |
| Brainstorm Force | 3 | 3 | 2 | Product added | 2026-04-08 |
| Bzotheme | 3 | 3 | 3 | Affected range extended | 2026-03-18 |
| Codexpert, Inc | 3 | 3 | 3 | Affected range extended | 2026-04-01 |
| Commotion | 3 | 3 | 1 | Affected range extended | 2026-04-01 |
| Control System | 3 | 3 | 1 | Product added | 2026-08-13 |
| Creedally | 3 | 3 | 1 | Affected range extended | 2026-04-01 |
| Dassault Systèmes | 3 | 3 | 1 | Added to CISA KEV | 2025-10-28 |
| Dcooney | 3 | 3 | 1 | Product added | 2026-04-08 |
| Designthemes | 3 | 3 | 2 | Affected range extended | 2026-04-01 |
| Devsoftbaltic | 3 | 3 | 1 | Affected range extended | 2026-04-08 |
| Drupal | 3 | 3 | 3 | Added to CISA KEV · 3 kinds | 2026-05-22 |
| Easynolo | 3 | 3 | 1 | Product added | 2026-04-08 |
| Eclipse Foundation | 3 | 3 | 2 | Affected range extended · 3 kinds | 2026-08-17 |
| Elextensions | 3 | 3 | 3 | Affected range extended | 2026-04-01 |
| Envothemes | 3 | 3 | 1 | Product added | 2026-04-08 |
| Esri | 3 | 3 | 1 | Product added | 2024-10-08 |
| Fedora | 3 | 3 | 1 | Product added | 2023-07-24 |
| Fromdoppler | 3 | 3 | 1 | Affected range extended | 2026-04-01 |
| Funnelcockpit | 3 | 3 | 1 | Affected range extended | 2026-04-08 |
| g5theme | 3 | 3 | 2 | Affected range extended | 2026-04-08 |
| Galaxy Weblinks | 3 | 3 | 2 | Affected range extended | 2026-04-01 |
| Gfi Software | 3 | 3 | 1 | Product added | 2026-09-04 |
| Hitachi Vantara | 3 | 3 | 2 | Added to CISA KEV · 2 kinds | 2025-03-03 |
| Irmau | 3 | 3 | 1 | Affected range extended | 2026-04-08 |
| Kentico | 3 | 3 | 2 | Added to CISA KEV | 2026-04-20 |
| Konica Minolta Japan, Inc. | 3 | 3 | 2 | Product added | 2026-08-31 |
| Latchset | 3 | 3 | 2 | Product added | 2025-12-22 |
| Livemesh | 3 | 3 | 2 | Product added · 2 kinds | 2026-04-08 |
| Lvaudore | 3 | 3 | 1 | Affected range extended | 2026-04-08 |
| Magepeopleteam | 3 | 3 | 2 | Affected range extended · 2 kinds | 2026-04-01 |
| Markkinchin | 3 | 3 | 1 | Affected range extended | 2026-04-08 |
| Matthewrubin | 3 | 3 | 2 | Affected range extended | 2026-04-01 |
| Maxfoundry | 3 | 3 | 1 | Product added | 2026-04-08 |
| Mdjm | 3 | 3 | 1 | Product added · 2 kinds | 2026-04-01 |
| Membership Software | 3 | 3 | 1 | Affected range extended | 2024-06-28 |
| Mitel | 3 | 3 | 2 | Ransomware use confirmed · 2 kinds | 2025-05-12 |
| Netgsm | 3 | 3 | 1 | Affected range extended | 2026-04-01 |
| Opacewebdesign | 3 | 3 | 1 | Product added | 2026-04-08 |
| Phpgurukul | 3 | 3 | 2 | Product added | 2025-09-02 |
| Piotnetdotcom | 3 | 3 | 2 | Affected range extended | 2026-04-08 |
| Posimyththemes | 3 | 3 | 2 | Product added · 2 kinds | 2026-04-08 |
| Printcart | 3 | 3 | 1 | Affected range extended | 2026-04-01 |
| Quadlayers | 3 | 3 | 3 | Affected range extended | 2026-04-01 |
| Reichertbrothers | 3 | 3 | 1 | Affected range extended | 2026-04-08 |
Counting & vendor names
Names follow the source record and may use different spellings. Only counted changes are included. 9,647 rows name a vendor; 2,352 have no vendor, for 11,999 total rows.
Data sources and quality
Counts cover 15 change types. They measure record revisions, not vendor vulnerability rates. Publisher rates →
CVE publication comparisons cover 2023 onward; KEV changes begin with the first mirrored catalog snapshot. What each catalog cannot see →
Shipped snapshot computed 2026-09-07 from catalog commit ed5547afbae2. Real findings, not live ones: records amended since are not reflected. A later fix version is evidence that the record changed, not evidence that the first fix was incomplete.