Router CVE Report CardEOL products excluded
Security grades, trend indicators, and CVE counts by manufacturer. Click any non-zero count to see the CVEs. Last updated: Sep 8, 2026 7:40 AM CDT
A 90–100
B 70–89
C 60–69
D 50–59
F <50
NR Too New to Rate
↑ Getting Better shifts grade up (B → B+)
– Stable no change
↓ Getting Worse shifts grade down (A+ → A)
Popular
| Grade | Manufacturer | Trend | 30 Days | 12 Months | 24 Months | Total | |
|---|---|---|---|---|---|---|---|
| A+ | Peplink | – Stable | 0 | 1 | 1 | 19 | |
| A+ | Cradlepoint | – Stable | 0 | 0 | 0 | 1 | |
| A+ | Digi | ↑ Getting Better | 0 | 2 | 9 | 34 | |
| A | Teltonika | ↓ Getting Worse | 2 | 3 | 5 | 32 | |
| A+ | Inseego | – Stable | 0 | 0 | 0 | 0 | |
| NR | Katalyst | – Too New | 0 | 1 | 1 | 1 | |
| A- | Semtech | ↓ Getting Worse | 2 | 2 | 3 | 40 |
Others
| Grade | Manufacturer | Trend | 30 Days | 12 Months | 24 Months | Total | |
|---|---|---|---|---|---|---|---|
| A+ | ATEL | – Stable | 0 | 0 | 0 | 0 | |
| A+ | BEC | ↑ Getting Better | 0 | 0 | 4 | 5 | |
| A+ | eero | – Stable | 0 | 1 | 1 | 1 | |
| A+ | Robustel | – Stable | 0 | 0 | 0 | 26 | |
| A+ | Starlink | – Stable | 1 | 2 | 2 | 6 | |
| B+ | Inhand | ↓ Getting Worse | 0 | 9 | 9 | 64 | |
| C- | Lantronix | ↓ Getting Worse | 0 | 7 | 9 | 39 | |
| F+ | Linksys | ↑ Getting Better | 1 | 19 | 118 | 257 | |
| F+ | Netgear | ↑ Getting Better | 10 | 47 | 162 | 1,358 | |
| F | Cisco | – Stable | 31 | 278 | 689 | 6,834 | |
| F | Fortinet | – Stable | 8 | 155 | 279 | 711 | |
| F | Palo Alto Networks | – Stable | 12 | 66 | 141 | 333 | |
| F | TP-Link | – Stable | 9 | 49 | 88 | 418 | |
| F | Zyxel | – Stable | 4 | 31 | 57 | 310 | |
| F- | ASUS | ↓ Getting Worse | 15 | 64 | 90 | 369 | |
| F- | GL.iNet | ↓ Getting Worse | 5 | 46 | 56 | 96 | |
| F- | SonicWall | ↓ Getting Worse | 7 | 18 | 30 | 151 | |
| F- | TRENDnet | ↓ Getting Worse | 9 | 17 | 32 | 105 | |
| F- | Ubiquiti | ↓ Getting Worse | 22 | 72 | 94 | 179 |
Open Source Firmware
| Grade | Manufacturer | Trend | 30 Days | 12 Months | 24 Months | Total | |
|---|---|---|---|---|---|---|---|
| F- | OpenWrt / DD-WRT | ↓ Getting Worse | 5 | 28 | 33 | 90 |
See all tracked routers · Grading Methodology
Data sourced from the NVD. Grades start at 100 and deduct points per CVE, weighted by severity and recency. EPSS exploit probability adjusts penalties (high EPSS increases, very low EPSS reduces). Trend compares severity-weighted CVE volume over the last 12 months vs. the previous 12 months.