Skip to content
patchdrift.
snapshot 2026-09-07

Vendors whose records changed

as of the 2026-09-07 snapshot

How this is measured →Check my CVEs

1,243 vendors

named in a CVE or CISA KEV record edited after publication. Most records changed under Red Hat: 505.

Records, never added across vendors: a record naming two belongs to both. 829 of the 1,243 vendors have one changed record.

Ranked by records changed

301 to 350 of 1,243 vendors
Top 25 only
Vendors by records that changedrecords, never rows

Ranked by count, not rate; a vendor with more records has more that can change.

The 12 drawn here are 12 of 1,243 vendors. 829 of the other 1,231 have one changed record each; none of their records are added together here. For a rate by publisher, see the scorecard.

VendorRecords (sorted, highest first; activate to reverse), Distinct CVE records naming this vendor that changed after publication, across every kind of change. Records do not add up down this column: a record naming two vendors belongs to both.Rows, One row for each record, kind of change and product, so a record whose fix version moved for four operating systems is one record and four rows. Rows do add up down this column.Products, Distinct products named across this vendor's changed records.Most common kind, The kind of change with the most rows for this vendor, and how many kinds there are.Last change, The most recent day a change to one of this vendor's records was carried by a commit we read. That is the day the record changed, not the day the vendor decided to change it.
Goodlayers222Affected range extended2026-04-08
Gstreamer221Product added2026-08-12
Gutentor221Affected range extended2026-04-01
Happydevs221Product added2026-04-08
Highwarden221Affected range extended · 2 kinds2026-04-01
Hivesupport221Product added2026-04-08
home-assistant222Fix version moved · 2 kinds2026-07-21
HP Inc.222Product added2026-08-31
Hyperview221Affected range extended2024-09-06
Jenkins222Added to CISA KEV · 2 kinds2025-12-12
JFrog221Added to CISA KEV2026-09-02
Juniper222Added to CISA KEV2025-10-02
Keyence Corporation221Product added2024-09-25
Kludex222Added to CISA KEV · 2 kinds2026-09-02
Kodezen222Product added2026-04-08
Krasenslavov221Product added2026-04-08
Krishaweb222Product added2026-04-08
Lambertgroup222Affected range extended2026-04-01
Libssh221Product added2025-12-19
Limesurvey221Product added2025-09-11
LiteSpeed221Added to CISA KEV2026-06-15
Logitec Corporation221Product added2023-08-18
Logoninc221Product added2026-04-08
m-files Corporation222Fix version moved2025-12-19
Magicimport221Affected range extended2026-04-08
Magnigenie221Affected range extended2026-04-01
Malcure221Product added2026-04-08
Mattermost221Fix version moved2025-10-29
mobi-com Polska Sp. z o.o.221Product added2026-08-06
Multivendorx221Product added2026-04-23
Nasatheme221Affected range extended2026-04-01
Nerdpress221Product added2026-04-23
Nodemailer221Product added2025-12-22
Nootheme222Affected range extended2026-04-01
Odude221Affected range extended2026-04-08
Ogun Labs221Affected range extended2026-04-01
Olaf Lederer222Affected range extended2026-04-01
Omnipressteam221Affected range extended2026-04-08
Ontraport221Affected range extended2026-04-01
OpenPLC221Added to CISA KEV2025-12-03
Originalityai221Affected range extended2026-04-08
Ovatheme222Affected range extended2026-04-01
Paessler222Added to CISA KEV2025-02-04
Palantir222Product added2025-02-18
Pencilwp221Affected range extended2026-04-08
Photoweblog221Affected range extended2026-04-08
Pixelgrade221Affected range extended2026-04-01
Planex Communications Inc.221Product added2025-02-26
Posimyth221Product added2026-04-01
Progress222Added to CISA KEV2026-08-07
Counting & vendor names

Names follow the source record and may use different spellings. Only counted changes are included. 9,647 rows name a vendor; 2,352 have no vendor, for 11,999 total rows.

Every change, one row each →The rate, by publisher →Data & API →
Data sources and quality

Counts cover 15 change types. They measure record revisions, not vendor vulnerability rates. Publisher rates →

CVE publication comparisons cover 2023 onward; KEV changes begin with the first mirrored catalog snapshot. What each catalog cannot see →

Shipped snapshot computed 2026-09-07 from catalog commit f3250c735415. Real findings, not live ones: records amended since are not reflected. A later fix version is evidence that the record changed, not evidence that the first fix was incomplete.