{
  "source": {
    "catalogVersion": "2026.11.10",
    "dateReleased": "2026-11-10T19:03:29.8375Z",
    "totalEntries": 1779
  },
  "window": {
    "start": "2023-01-01",
    "end": "2026-11-10",
    "entries": 913,
    "edge": 196,
    "other": 717
  },
  "edgeByYear": {
    "2023": 30,
    "2024": 42,
    "2025": 52,
    "2026": 72
  },
  "deviceClass": {
    "enterprise": 174,
    "soho": 22
  },
  "recurrence": {
    "episodeGapDays": 30,
    "families": 69,
    "familiesWith2PlusEntries": 38,
    "familiesWith3PlusEntries": 27,
    "recurringFamilies": 31,
    "entriesInRecurringFamilies": {
      "n": 148,
      "of": 196,
      "pct": 75.5
    },
    "medianGapBetweenEpisodesDays": 216,
    "topFamilies": [
      {
        "family": "Citrix NetScaler ADC and Gateway",
        "entries": 13,
        "episodes": 7,
        "first": "2023-07-19",
        "last": "2026-10-04",
        "ransomware": 3
      },
      {
        "family": "Cisco ASA and FTD",
        "entries": 10,
        "episodes": 7,
        "first": "2023-09-13",
        "last": "2026-10-29",
        "ransomware": 2
      },
      {
        "family": "Cisco IOS, IOS XE, IOS XR and NX-OS",
        "entries": 9,
        "episodes": 5,
        "first": "2023-04-19",
        "last": "2026-07-13",
        "ransomware": 0
      },
      {
        "family": "Cisco SD-WAN",
        "entries": 9,
        "episodes": 3,
        "first": "2026-02-25",
        "last": "2026-09-30",
        "ransomware": 0
      },
      {
        "family": "Palo Alto Networks PAN-OS",
        "entries": 9,
        "episodes": 6,
        "first": "2024-04-12",
        "last": "2026-10-14",
        "ransomware": 4
      },
      {
        "family": "Ivanti Connect Secure and Policy Secure",
        "entries": 8,
        "episodes": 4,
        "first": "2024-01-10",
        "last": "2026-10-30",
        "ransomware": 5
      },
      {
        "family": "Fortinet FortiOS and FortiProxy",
        "entries": 7,
        "episodes": 7,
        "first": "2023-03-14",
        "last": "2026-07-27",
        "ransomware": 5
      },
      {
        "family": "Fortinet Multiple Products",
        "entries": 6,
        "episodes": 6,
        "first": "2024-10-09",
        "last": "2026-10-16",
        "ransomware": 0
      },
      {
        "family": "Juniper Junos OS",
        "entries": 6,
        "episodes": 2,
        "first": "2023-11-13",
        "last": "2025-03-13",
        "ransomware": 0
      },
      {
        "family": "SonicWall SMA1000",
        "entries": 6,
        "episodes": 4,
        "first": "2025-01-24",
        "last": "2026-09-02",
        "ransomware": 3
      },
      {
        "family": "Ivanti Cloud Services Appliance",
        "entries": 5,
        "episodes": 2,
        "first": "2024-03-25",
        "last": "2024-10-09",
        "ransomware": 1
      },
      {
        "family": "BeyondTrust Remote Support and PRA",
        "entries": 4,
        "episodes": 3,
        "first": "2024-12-19",
        "last": "2026-10-16",
        "ransomware": 1
      }
    ],
    "familiesByVendorTop6": {
      "Cisco": [
        "Cisco ASA and FTD",
        "Cisco IOS, IOS XE, IOS XR and NX-OS",
        "Cisco SD-WAN",
        "Cisco Firewall Management Center",
        "Cisco Identity Services Engine",
        "Cisco Secure Email Gateway",
        "Cisco Small Business RV Series Routers"
      ],
      "Fortinet": [
        "Fortinet FortiOS and FortiProxy",
        "Fortinet Multiple Products",
        "Fortinet FortiWeb",
        "Fortinet FortiSandbox",
        "Fortinet FortiMail",
        "Fortinet FortiManager"
      ],
      "Ivanti": [
        "Ivanti Connect Secure and Policy Secure",
        "Ivanti Cloud Services Appliance",
        "Ivanti Sentry",
        "Ivanti Virtual Traffic Manager"
      ],
      "Citrix": [
        "Citrix NetScaler ADC and Gateway"
      ],
      "Palo Alto Networks": [
        "Palo Alto Networks PAN-OS",
        "Palo Alto Networks Expedition"
      ],
      "SonicWall": [
        "SonicWall SMA1000",
        "SonicWall SonicOS",
        "SonicWall SMA100"
      ]
    }
  },
  "clusters": {
    "count": 31,
    "entries": 67,
    "entriesPct": 34.2,
    "chainMentioned": {
      "edge": {
        "n": 12,
        "of": 196,
        "pct": 6.1
      },
      "other": {
        "n": 31,
        "of": 717,
        "pct": 4.3
      }
    },
    "largest": [
      {
        "vendor": "Juniper",
        "dateAdded": "2023-11-13",
        "n": 5,
        "cves": [
          "CVE-2023-36844",
          "CVE-2023-36845",
          "CVE-2023-36846",
          "CVE-2023-36847",
          "CVE-2023-36851"
        ]
      },
      {
        "vendor": "Ubiquiti",
        "dateAdded": "2026-06-23",
        "n": 3,
        "cves": [
          "CVE-2026-34910",
          "CVE-2026-34909",
          "CVE-2026-34908"
        ]
      },
      {
        "vendor": "Cisco",
        "dateAdded": "2026-04-20",
        "n": 3,
        "cves": [
          "CVE-2026-20122",
          "CVE-2026-20133",
          "CVE-2026-20128"
        ]
      },
      {
        "vendor": "Barracuda Networks",
        "dateAdded": "2026-11-10",
        "n": 2,
        "cves": [
          "CVE-2026-111560",
          "CVE-2026-116606"
        ]
      },
      {
        "vendor": "Ivanti",
        "dateAdded": "2026-10-30",
        "n": 2,
        "cves": [
          "CVE-2026-118527",
          "CVE-2026-111357"
        ]
      },
      {
        "vendor": "Citrix",
        "dateAdded": "2026-09-27",
        "n": 2,
        "cves": [
          "CVE-2026-88772",
          "CVE-2026-88771"
        ]
      },
      {
        "vendor": "Check Point",
        "dateAdded": "2026-09-22",
        "n": 2,
        "cves": [
          "CVE-2026-93616",
          "CVE-2026-85102"
        ]
      },
      {
        "vendor": "MikroTik",
        "dateAdded": "2026-09-10",
        "n": 2,
        "cves": [
          "CVE-2026-86060",
          "CVE-2026-67277"
        ]
      }
    ]
  },
  "beyondPatching": {
    "triageTemplateStart": "2026-06-11",
    "triageTemplateCoverage": {
      "edge": {
        "n": 51,
        "of": 51,
        "pct": 100
      },
      "other": {
        "n": 111,
        "of": 111,
        "pct": 100
      }
    },
    "forensicTriageFlagSinceStart": {
      "edge": {
        "n": 35,
        "of": 51,
        "pct": 68.6
      },
      "other": {
        "n": 68,
        "of": 111,
        "pct": 61.3
      }
    },
    "forensicTriageFlagWindow": {
      "edge": {
        "n": 35,
        "of": 196,
        "pct": 17.9
      },
      "other": {
        "n": 68,
        "of": 717,
        "pct": 9.5
      }
    },
    "entryGuidance": {
      "compromiseCheck": {
        "edge": {
          "n": 16,
          "of": 196,
          "pct": 8.2
        },
        "other": {
          "n": 6,
          "of": 717,
          "pct": 0.8
        }
      },
      "cisaInstructions": {
        "edge": {
          "n": 11,
          "of": 196,
          "pct": 5.6
        },
        "other": {
          "n": 5,
          "of": 717,
          "pct": 0.7
        }
      },
      "either": {
        "edge": {
          "n": 18,
          "of": 196,
          "pct": 9.2
        },
        "other": {
          "n": 11,
          "of": 717,
          "pct": 1.5
        }
      },
      "edgeShareOfAll": {
        "n": 18,
        "of": 29,
        "pct": 62.1
      },
      "edgeByYear": {
        "2023": 2,
        "2024": 0,
        "2025": 7,
        "2026": 9
      },
      "entries": [
        {
          "cve": "CVE-2026-20182",
          "vendor": "Cisco",
          "product": "Catalyst SD-WAN",
          "dateAdded": "2026-05-14",
          "edge": true,
          "compromiseCheck": true,
          "cisaInstructions": true
        },
        {
          "cve": "CVE-2026-20122",
          "vendor": "Cisco",
          "product": "Catalyst SD-WAN Manger",
          "dateAdded": "2026-04-20",
          "edge": true,
          "compromiseCheck": true,
          "cisaInstructions": true
        },
        {
          "cve": "CVE-2026-20133",
          "vendor": "Cisco",
          "product": "Catalyst SD-WAN Manager",
          "dateAdded": "2026-04-20",
          "edge": true,
          "compromiseCheck": true,
          "cisaInstructions": true
        },
        {
          "cve": "CVE-2026-20128",
          "vendor": "Cisco",
          "product": "Catalyst SD-WAN Manager",
          "dateAdded": "2026-04-20",
          "edge": true,
          "compromiseCheck": true,
          "cisaInstructions": true
        },
        {
          "cve": "CVE-2026-1340",
          "vendor": "Ivanti",
          "product": "Endpoint Manager Mobile (EPMM)",
          "dateAdded": "2026-04-08",
          "edge": false,
          "compromiseCheck": true,
          "cisaInstructions": false
        },
        {
          "cve": "CVE-2026-35616",
          "vendor": "Fortinet",
          "product": "FortiClient EMS",
          "dateAdded": "2026-04-06",
          "edge": false,
          "compromiseCheck": true,
          "cisaInstructions": false
        },
        {
          "cve": "CVE-2025-53521",
          "vendor": "F5",
          "product": "BIG-IP",
          "dateAdded": "2026-03-27",
          "edge": true,
          "compromiseCheck": true,
          "cisaInstructions": false
        },
        {
          "cve": "CVE-2022-20775",
          "vendor": "Cisco",
          "product": "SD-WAN",
          "dateAdded": "2026-02-25",
          "edge": true,
          "compromiseCheck": true,
          "cisaInstructions": true
        },
        {
          "cve": "CVE-2026-20127",
          "vendor": "Cisco",
          "product": "Catalyst SD-WAN Controller and Manager",
          "dateAdded": "2026-02-25",
          "edge": true,
          "compromiseCheck": true,
          "cisaInstructions": true
        },
        {
          "cve": "CVE-2026-1731",
          "vendor": "BeyondTrust",
          "product": "Remote Support (RS) and Privileged Remote Access (PRA)",
          "dateAdded": "2026-02-13",
          "edge": true,
          "compromiseCheck": true,
          "cisaInstructions": false
        },
        {
          "cve": "CVE-2026-1281",
          "vendor": "Ivanti",
          "product": "Endpoint Manager Mobile (EPMM)",
          "dateAdded": "2026-01-29",
          "edge": false,
          "compromiseCheck": true,
          "cisaInstructions": false
        },
        {
          "cve": "CVE-2026-24858",
          "vendor": "Fortinet",
          "product": "Multiple Products",
          "dateAdded": "2026-01-27",
          "edge": true,
          "compromiseCheck": true,
          "cisaInstructions": false
        },
        {
          "cve": "CVE-2025-14733",
          "vendor": "WatchGuard",
          "product": "Firebox",
          "dateAdded": "2025-12-19",
          "edge": true,
          "compromiseCheck": true,
          "cisaInstructions": false
        },
        {
          "cve": "CVE-2025-40602",
          "vendor": "SonicWall",
          "product": "SMA1000 appliance",
          "dateAdded": "2025-12-17",
          "edge": true,
          "compromiseCheck": true,
          "cisaInstructions": false
        },
        {
          "cve": "CVE-2025-20393",
          "vendor": "Cisco",
          "product": "Multiple Products",
          "dateAdded": "2025-12-17",
          "edge": false,
          "compromiseCheck": true,
          "cisaInstructions": false
        },
        {
          "cve": "CVE-2025-55182",
          "vendor": "Meta",
          "product": "React Server Components",
          "dateAdded": "2025-12-05",
          "edge": false,
          "compromiseCheck": true,
          "cisaInstructions": false
        },
        {
          "cve": "CVE-2025-20362",
          "vendor": "Cisco",
          "product": "Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense",
          "dateAdded": "2025-09-25",
          "edge": true,
          "compromiseCheck": true,
          "cisaInstructions": true
        },
        {
          "cve": "CVE-2025-20333",
          "vendor": "Cisco",
          "product": "Secure Firewall Adaptive Security Appliance and Secure Firewall Threat Defense",
          "dateAdded": "2025-09-25",
          "edge": true,
          "compromiseCheck": true,
          "cisaInstructions": true
        },
        {
          "cve": "CVE-2025-49704",
          "vendor": "Microsoft",
          "product": "SharePoint",
          "dateAdded": "2025-07-22",
          "edge": false,
          "compromiseCheck": false,
          "cisaInstructions": true
        },
        {
          "cve": "CVE-2025-49706",
          "vendor": "Microsoft",
          "product": "SharePoint",
          "dateAdded": "2025-07-22",
          "edge": false,
          "compromiseCheck": false,
          "cisaInstructions": true
        },
        {
          "cve": "CVE-2025-53770",
          "vendor": "Microsoft",
          "product": "SharePoint",
          "dateAdded": "2025-07-20",
          "edge": false,
          "compromiseCheck": false,
          "cisaInstructions": true
        },
        {
          "cve": "CVE-2025-22457",
          "vendor": "Ivanti",
          "product": "Connect Secure, Policy Secure, and ZTA Gateways",
          "dateAdded": "2025-04-04",
          "edge": true,
          "compromiseCheck": false,
          "cisaInstructions": true
        },
        {
          "cve": "CVE-2025-30154",
          "vendor": "reviewdog",
          "product": "action-setup GitHub Action",
          "dateAdded": "2025-03-24",
          "edge": false,
          "compromiseCheck": false,
          "cisaInstructions": true
        },
        {
          "cve": "CVE-2025-30066",
          "vendor": "tj-actions",
          "product": "changed-files GitHub Action",
          "dateAdded": "2025-03-18",
          "edge": false,
          "compromiseCheck": false,
          "cisaInstructions": true
        },
        {
          "cve": "CVE-2024-57727",
          "vendor": "SimpleHelp",
          "product": "SimpleHelp",
          "dateAdded": "2025-02-13",
          "edge": true,
          "compromiseCheck": false,
          "cisaInstructions": true
        },
        {
          "cve": "CVE-2025-0282",
          "vendor": "Ivanti",
          "product": "Connect Secure, Policy Secure, and ZTA Gateways",
          "dateAdded": "2025-01-08",
          "edge": true,
          "compromiseCheck": true,
          "cisaInstructions": true
        },
        {
          "cve": "CVE-2023-20273",
          "vendor": "Cisco",
          "product": "Cisco IOS XE Web UI",
          "dateAdded": "2023-10-23",
          "edge": true,
          "compromiseCheck": true,
          "cisaInstructions": false
        },
        {
          "cve": "CVE-2023-20198",
          "vendor": "Cisco",
          "product": "IOS XE Web UI",
          "dateAdded": "2023-10-16",
          "edge": true,
          "compromiseCheck": true,
          "cisaInstructions": false
        },
        {
          "cve": "CVE-2023-22515",
          "vendor": "Atlassian",
          "product": "Confluence Data Center and Server",
          "dateAdded": "2023-10-05",
          "edge": false,
          "compromiseCheck": true,
          "cisaInstructions": false
        }
      ]
    }
  },
  "endOfLife": {
    "edge": {
      "n": 21,
      "of": 196,
      "pct": 10.7
    },
    "other": {
      "n": 36,
      "of": 717,
      "pct": 5
    },
    "edgeDefinite": {
      "n": 11,
      "of": 196,
      "pct": 5.6
    },
    "edgeBySoho": {
      "soho": {
        "n": 14,
        "of": 22,
        "pct": 63.6
      },
      "enterprise": {
        "n": 7,
        "of": 174,
        "pct": 4
      }
    },
    "byVendor": [
      [
        "D-Link",
        6
      ],
      [
        "Ivanti",
        4
      ],
      [
        "TP-Link",
        4
      ],
      [
        "Zyxel",
        3
      ],
      [
        "ASUS",
        1
      ],
      [
        "Ruckus Wireless",
        1
      ],
      [
        "Sierra Wireless",
        1
      ],
      [
        "Sophos",
        1
      ]
    ],
    "cveOlderThan3YearsAtAddition": {
      "n": 6,
      "of": 21,
      "pct": 28.6
    },
    "entries": [
      {
        "cve": "CVE-2025-29635",
        "vendor": "D-Link",
        "product": "DIR-823X",
        "dateAdded": "2026-04-24"
      },
      {
        "cve": "CVE-2018-4063",
        "vendor": "Sierra Wireless",
        "product": "AirLink ALEOS",
        "dateAdded": "2025-12-12"
      },
      {
        "cve": "CVE-2022-37055",
        "vendor": "D-Link",
        "product": "Routers",
        "dateAdded": "2025-12-08"
      },
      {
        "cve": "CVE-2023-50224",
        "vendor": "TP-Link",
        "product": "TL-WR841N",
        "dateAdded": "2025-09-03"
      },
      {
        "cve": "CVE-2025-9377",
        "vendor": "TP-Link",
        "product": "Multiple Routers",
        "dateAdded": "2025-09-03"
      },
      {
        "cve": "CVE-2020-24363",
        "vendor": "TP-Link",
        "product": "TL-WA855RE",
        "dateAdded": "2025-09-02"
      },
      {
        "cve": "CVE-2024-0769",
        "vendor": "D-Link",
        "product": "DIR-859 Router",
        "dateAdded": "2025-06-25"
      },
      {
        "cve": "CVE-2023-33538",
        "vendor": "TP-Link",
        "product": "Multiple Routers",
        "dateAdded": "2025-06-16"
      },
      {
        "cve": "CVE-2021-32030",
        "vendor": "ASUS",
        "product": "Routers",
        "dateAdded": "2025-06-02"
      },
      {
        "cve": "CVE-2024-40891",
        "vendor": "Zyxel",
        "product": "DSL CPE Devices",
        "dateAdded": "2025-02-11"
      },
      {
        "cve": "CVE-2024-40890",
        "vendor": "Zyxel",
        "product": "DSL CPE Devices",
        "dateAdded": "2025-02-11"
      },
      {
        "cve": "CVE-2020-29574",
        "vendor": "Sophos",
        "product": "CyberoamOS",
        "dateAdded": "2025-02-06"
      },
      {
        "cve": "CVE-2024-9380",
        "vendor": "Ivanti",
        "product": "Cloud Services Appliance (CSA)",
        "dateAdded": "2024-10-09"
      },
      {
        "cve": "CVE-2024-9379",
        "vendor": "Ivanti",
        "product": "Cloud Services Appliance (CSA)",
        "dateAdded": "2024-10-09"
      },
      {
        "cve": "CVE-2023-25280",
        "vendor": "D-Link",
        "product": "DIR-820 Router",
        "dateAdded": "2024-09-30"
      },
      {
        "cve": "CVE-2024-8963",
        "vendor": "Ivanti",
        "product": "Cloud Services Appliance (CSA)",
        "dateAdded": "2024-09-19"
      },
      {
        "cve": "CVE-2024-8190",
        "vendor": "Ivanti",
        "product": "Cloud Services Appliance",
        "dateAdded": "2024-09-13"
      },
      {
        "cve": "CVE-2021-40655",
        "vendor": "D-Link",
        "product": "DIR-605 Router",
        "dateAdded": "2024-05-16"
      },
      {
        "cve": "CVE-2014-100005",
        "vendor": "D-Link",
        "product": "DIR-600 Router",
        "dateAdded": "2024-05-16"
      },
      {
        "cve": "CVE-2017-6884",
        "vendor": "Zyxel",
        "product": "EMG2926 Routers",
        "dateAdded": "2023-09-18"
      },
      {
        "cve": "CVE-2023-25717",
        "vendor": "Ruckus Wireless",
        "product": "Multiple Products",
        "dateAdded": "2023-05-12"
      }
    ]
  },
  "access": {
    "auth": {
      "edge": {
        "post": 25,
        "pre": 98,
        "unclear": 73
      },
      "other": {
        "pre": 182,
        "post": 50,
        "unclear": 485
      }
    },
    "preAuthOfCoded": {
      "edge": {
        "n": 98,
        "of": 123,
        "pct": 79.7
      },
      "other": {
        "n": 182,
        "of": 232,
        "pct": 78.4
      }
    },
    "managementPlane": {
      "n": 27,
      "of": 196,
      "pct": 13.8
    }
  },
  "ransomware": {
    "edge": {
      "n": 42,
      "of": 196,
      "pct": 21.4
    },
    "recurringFamilies": {
      "n": 40,
      "of": 148,
      "pct": 27
    },
    "nonRecurringFamilies": {
      "n": 2,
      "of": 48,
      "pct": 4.2
    }
  },
  "advisories": null
}