Vendors whose records changed
as of the 2026-09-07 snapshot
1,243 vendors
named in a CVE or CISA KEV record edited after publication. Most records changed under Red Hat: 505.
Records, never added across vendors: a record naming two belongs to both. 829 of the 1,243 vendors have one changed record.
Ranked by count, not rate; a vendor with more records has more that can change.
The 12 drawn here are 12 of 1,243 vendors. 829 of the other 1,231 have one changed record each; none of their records are added together here. For a rate by publisher, see the scorecard.
| Vendor | Records (sorted, lowest first; activate to reverse), Distinct CVE records naming this vendor that changed after publication, across every kind of change. Records do not add up down this column: a record naming two vendors belongs to both. | Rows, One row for each record, kind of change and product, so a record whose fix version moved for four operating systems is one record and four rows. Rows do add up down this column. | Products, Distinct products named across this vendor's changed records. | Mostly, The kind of change with the most rows for this vendor, and how many kinds there are. | Last change, The most recent day a change to one of this vendor's records was carried by a commit we read. That is the day the record changed, not the day the vendor decided to change it. |
|---|---|---|---|---|---|
| 文派翻译（wp Chinese translation） | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Zookatron | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Zoho Mail | 1 | 1 | 1 | Product added | 2026-05-21 |
| ZKTeco | 1 | 1 | 1 | Added to CISA KEV | 2025-05-19 |
| Zhuyi | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Zamartz | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Yuri Baranov | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| ytdl-org | 1 | 1 | 1 | Product added | 2024-07-03 |
| Yotpo | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Yoohw Studio | 1 | 1 | 1 | Affected range extended | 2026-04-28 |
| Yocoadmin | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Ylianst | 1 | 1 | 1 | Product added | 2026-07-31 |
| Yiiframework | 1 | 1 | 1 | Added to CISA KEV | 2025-05-02 |
| Yealink | 1 | 1 | 1 | Product added | 2025-07-28 |
| XWiki | 1 | 1 | 1 | Added to CISA KEV | 2025-10-30 |
| Xtreeme | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Xpoda türkiye Information Technology Inc. | 1 | 1 | 1 | Product added | 2026-02-11 |
| Xjb | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| Xfinitysoft | 1 | 1 | 1 | Affected range extended | 2026-04-08 |
| Xdg | 1 | 1 | 1 | Product added | 2026-07-21 |
| Xcitium | 1 | 1 | 1 | Product added | 2026-06-23 |
| Xavi Ivars | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| www.15.to | 1 | 1 | 1 | Affected range extended | 2026-04-01 |
| wssoffice21 | 1 | 1 | 1 | Product added | 2026-04-08 |
| Ws Form | 1 | 1 | 1 | Product added | 2026-04-08 |
| vendor not named in the record | no vendor | 2,352 | no vendor | See the rows → |
Ranked by change count. A CVE can appear under multiple vendors.
Counting & vendor names
Names follow the source record and may use different spellings. Only counted changes are included. 9,647 rows name a vendor; 2,352 have no vendor, for 11,999 total rows.
Data coverage & methodology
Counts cover 15 change types. They measure record revisions, not vendor vulnerability rates. Publisher rates ↗
CVE publication comparisons cover 2023 onward. KEV changes begin with the first mirrored catalog snapshot.
Shipped snapshot computed 2026-09-07 from catalog commit f5f9fc6fd7dc. Real findings, not live ones: records amended since are not reflected. A later fix version is evidence that the record changed, not evidence that the first fix was incomplete.