Product categories
The comparison that matters is like-for-like: firewall CVEs against firewall CVEs. Categories marked non-security cover routing, collaboration and other lines outside a vendor's security portfolio, and are excluded from risk rankings.
| Category | Risk | CVEs (2026) | Exploited | Scope |
|---|---|---|---|---|
| Firewall / NGFW | 678.0 | 130 | 8 | Security |
| Endpoint / EDR | 245.8 | 35 | 2 | Security |
| SASE / SSE / Secure Web | 213.9 | 50 | 2 | Security |
| VPN & Remote Access | 20.0 | 10 | 0 | Security |
| Email Security | 144.4 | 11 | 2 | Security |
| Identity / IAM / MFA | 477.9 | 84 | 2 | Security |
| SIEM & Log Management | 706.2 | 176 | 2 | Security |
| Threat Detection & Sandbox | 216.1 | 32 | 2 | Security |
| Web & Application Security | 101.5 | 12 | 1 | Security |
| Cloud Security | 57.3 | 8 | 0 | Security |
| OT / IoT Security | 12.1 | 6 | 0 | Security |
| Network & Security Management | 1078.2 | 113 | 14 | Security |
| Routing & Switching | 277.8 | 63 | 1 | Non-security |
| Other Products | 244.4 | 59 | 2 | Non-security |