Vendors whose records changed
as of the 2026-09-07 snapshot
1,243 vendors
named in a CVE or CISA KEV record edited after publication. Most records changed under Red Hat: 505.
Records, never added across vendors: a record naming two belongs to both. 829 of the 1,243 vendors have one changed record.
Ranked by count, not rate; a vendor with more records has more that can change.
The 12 drawn here are 12 of 1,243 vendors. 829 of the other 1,231 have one changed record each; none of their records are added together here. For a rate by publisher, see the scorecard.
| Vendor | Records (sorted, highest first; activate to reverse), Distinct CVE records naming this vendor that changed after publication, across every kind of change. Records do not add up down this column: a record naming two vendors belongs to both. | Rows, One row for each record, kind of change and product, so a record whose fix version moved for four operating systems is one record and four rows. Rows do add up down this column. | Products, Distinct products named across this vendor's changed records. | Most common kind, The kind of change with the most rows for this vendor, and how many kinds there are. | Last change, The most recent day a change to one of this vendor's records was carried by a commit we read. That is the day the record changed, not the day the vendor decided to change it. |
|---|---|---|---|---|---|
| Roundcube | 3 | 3 | 1 | Added to CISA KEV | 2026-02-20 |
| Rustaurius | 3 | 3 | 2 | Affected range extended | 2026-04-01 |
| Sitecore | 3 | 3 | 2 | Added to CISA KEV | 2025-09-04 |
| Sminozzi | 3 | 3 | 1 | Product added | 2026-04-08 |
| Stephan Muelle | 3 | 3 | 1 | Product added | 2026-08-10 |
| Swarminteractive | 3 | 3 | 1 | Affected range extended | 2026-04-08 |
| Syed Balkhi | 3 | 3 | 2 | Affected range extended | 2026-04-01 |
| Tatvic | 3 | 3 | 1 | Product added | 2026-04-08 |
| TeleMessage | 3 | 3 | 1 | Added to CISA KEV | 2025-07-01 |
| The Webkitgtk Team | 3 | 3 | 1 | Product added | 2025-12-22 |
| Themehunk | 3 | 3 | 3 | Affected range extended | 2026-04-08 |
| Themepassion | 3 | 3 | 2 | Product added | 2026-04-01 |
| Themeum | 3 | 3 | 1 | Affected range extended | 2026-04-08 |
| Thimpress | 3 | 3 | 3 | Affected range extended · 2 kinds | 2026-04-08 |
| Tickera | 3 | 3 | 1 | Product added | 2026-04-08 |
| TrueConf | 3 | 3 | 2 | Added to CISA KEV | 2026-08-20 |
| Ubiquiti | 3 | 3 | 1 | Added to CISA KEV | 2026-06-23 |
| Valvepress | 3 | 3 | 3 | Affected range extended | 2026-04-01 |
| Vaultdweller | 3 | 3 | 1 | Affected range extended | 2026-04-08 |
| Webangon | 3 | 3 | 3 | Affected range extended | 2026-04-01 |
| Wpdive | 3 | 3 | 2 | Affected range extended · 2 kinds | 2026-04-08 |
| Wplegalpages | 3 | 3 | 2 | Product added | 2026-04-08 |
| Xpro | 3 | 3 | 2 | Affected range extended | 2026-04-01 |
| SUSE Linux | 2 | 14 | 14 | Product added | 2026-06-10 |
| ashlar-vellum | 2 | 10 | 5 | Affected range extended | 2026-05-12 |
| Themeisle | 2 | 9 | 9 | Product added | 2026-04-08 |
| emarket-design | 2 | 7 | 7 | Product added | 2026-04-08 |
| Hikvision | 2 | 5 | 5 | Product added · 2 kinds | 2026-07-31 |
| Johnson Controls | 2 | 5 | 5 | Product added | 2026-08-06 |
| Arm | 2 | 4 | 4 | Product added | 2025-11-18 |
| GeoVision | 2 | 4 | 3 | Added to CISA KEV · 2 kinds | 2025-05-07 |
| Splunk | 2 | 4 | 3 | Fix version moved · 3 kinds | 2026-06-18 |
| Commvault | 2 | 3 | 2 | Added to CISA KEV · 2 kinds | 2025-05-02 |
| ConnectWise | 2 | 3 | 1 | Added to CISA KEV · 2 kinds | 2026-05-14 |
| CrushFTP | 2 | 3 | 1 | Added to CISA KEV · 2 kinds | 2025-07-22 |
| Elastic | 2 | 3 | 2 | Affected range extended · 2 kinds | 2026-09-04 |
| Flexense | 2 | 3 | 2 | Product added | 2025-05-21 |
| MongoDB | 2 | 3 | 3 | Product added · 2 kinds | 2026-08-27 |
| Optimole | 2 | 3 | 2 | Product added | 2026-04-08 |
| Oracle Corporation | 2 | 3 | 3 | Product added | 2026-06-09 |
| Schneider Eelctric | 2 | 3 | 2 | Product added | 2025-09-09 |
| Sophos | 2 | 3 | 2 | Added to CISA KEV · 2 kinds | 2026-08-14 |
| 6storage | 2 | 2 | 1 | Affected range extended | 2026-04-01 |
| Activewebsight | 2 | 2 | 1 | Affected range extended | 2026-04-01 |
| add-ons.org | 2 | 2 | 1 | Product added | 2026-04-01 |
| Advantive | 2 | 2 | 1 | Added to CISA KEV | 2025-03-10 |
| Aitool | 2 | 2 | 1 | Affected range extended | 2026-04-01 |
| Alekv | 2 | 2 | 1 | Product added | 2026-04-08 |
| Amelia | 2 | 2 | 1 | Product added | 2026-04-08 |
| Anantaddons | 2 | 2 | 1 | Affected range extended | 2026-04-01 |
Counting & vendor names
Names follow the source record and may use different spellings. Only counted changes are included. 9,647 rows name a vendor; 2,352 have no vendor, for 11,999 total rows.
Data sources and quality
Counts cover 15 change types. They measure record revisions, not vendor vulnerability rates. Publisher rates →
CVE publication comparisons cover 2023 onward; KEV changes begin with the first mirrored catalog snapshot. What each catalog cannot see →
Shipped snapshot computed 2026-09-07 from catalog commit ed5547afbae2. Real findings, not live ones: records amended since are not reflected. A later fix version is evidence that the record changed, not evidence that the first fix was incomplete.