Skip to content
COOEY
FAIL // HALL OF SHAME
2508 players ranked

Security failures of FedRAMP vendors, their competitors, and the hardware they ship — ranked by zero-days, RCE, active exploitation, sheer embarrassment, and False-Claims-Act recoveries. A dex.sgc.ai RAG curator writes each event's summary and scores how avoidable it was; every name links to its dossier.

On the board
2508
players
Zero-days
90
tracked
RCEs
1459
assessed
Exploited
1690
in the wild
Assessed
2311
events
FCA recovered
$82M
DOJ CCFI
Overview☣ Most embarrassing◐ Most zero-days⚡ Most RCEs⌖ Most exploited⚖ Biggest FCA recoveries
All playersCompaniesVendorsProducts / HW ◧ FedRAMP only
◐ Most zero-days
Vulnerabilities exploited before a patch existed — the worst kind to ship.
01
windows product
◐ 3 ⚡ 101 ⌖ 172 ☣ 46 shame 95
30-days
02
vtiger crm product
◐ 3 ⚡ 3 shame 50
30-days
03
Exchange Server product
◐ 2 ⚡ 15 ⌖ 17 ☣ 13 shame 85
20-days
04
fortios product
◐ 2 ⚡ 5 ⌖ 9 ☣ 5 shame 85
20-days
05
Connect Secure and Policy Secure product
◐ 2 ⚡ 2 ⌖ 2 ☣ 2 shame 85
20-days
06
loadmaster product
◐ 2 ⚡ 2 ⌖ 1 shame 65
20-days
07
flowise product
◐ 2 ⚡ 2 shame 50
20-days
08
Office product
◐ 1 ⚡ 28 ⌖ 29 ☣ 2 shame 95
10-days
09
Zimbra Collaboration Suite (ZCS) product
◐ 1 ⚡ 14 ⌖ 17 ☣ 4 shame 90
10-days
10
Win32k product
◐ 1 ⚡ 12 ⌖ 25 ☣ 7 shame 85
10-days
11
ColdFusion product
◐ 1 ⚡ 11 ⌖ 16 ☣ 3 shame 85
10-days
12
PAN-OS product
◐ 1 ⚡ 8 ⌖ 12 ☣ 5 shame 85
10-days
13
SharePoint product
◐ 1 ⚡ 7 ⌖ 9 ☣ 5 shame 95
10-days
14
ManageEngine product
◐ 1 ⚡ 6 ⌖ 6 ☣ 2 shame 90
10-days
15
firefox product
◐ 1 ⚡ 5 ⌖ 5 ☣ 1 shame 85
10-days
16
NetScaler ADC and NetScaler Gateway product
◐ 1 ⚡ 3 ⌖ 5 ☣ 2 shame 92
10-days
17
Virtual System/Server Administrator (VSA) product
◐ 1 ⚡ 3 ⌖ 3 ☣ 3 shame 88
10-days
18
FTA product
◐ 1 ⚡ 2 ⌖ 4 ☣ 4 shame 72
10-days
19
Serv-U product
◐ 1 ⚡ 2 ⌖ 4 ☣ 1 shame 95
10-days
20
Log4j2 product
◐ 1 ⚡ 2 ⌖ 2 ☣ 2 shame 95
10-days
21
Connect Secure, Policy Secure, and ZTA Gateways product
◐ 1 ⚡ 2 ⌖ 2 ☣ 2 shame 88
10-days
22
GoAnywhere MFT product
◐ 1 ⚡ 2 ⌖ 2 ☣ 2 shame 85
10-days
23
chrome product
◐ 1 ⚡ 2 ⌖ 1 shame 65
10-days
24
caterease product
◐ 1 ⚡ 2 shame 50
10-days
25
enterprise linux product
◐ 1 ⚡ 2 shame 50
10-days
26
Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) product
◐ 1 ⚡ 1 ⌖ 6 ☣ 2 shame 78
10-days
27
Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance product
◐ 1 ⚡ 1 ⌖ 4 ☣ 1 shame 95
10-days
28
Confluence Server/Data Center product
◐ 1 ⚡ 1 ⌖ 1 ☣ 1 shame 85
10-days
29
fortimanager product
◐ 1 ⚡ 1 ⌖ 1 shame 85
10-days
30
SP Page Builder product
◐ 1 ⚡ 1 ⌖ 1 shame 85
10-days
31
Email Security Gateway (ESG) Appliance product
◐ 1 ⚡ 1 ⌖ 1 shame 72
10-days
32
Kemp LoadMaster product
◐ 1 ⚡ 1 ⌖ 1 shame 85
10-days
33
Page Builder product
◐ 1 ⚡ 1 ⌖ 1 shame 85
10-days
34
IOS XE Web UI product
◐ 1 ⚡ 1 ⌖ 1 shame 72
10-days
35
Forms product
◐ 1 ⚡ 1 ⌖ 1 shame 85
10-days
36
Acrobat product
◐ 1 ⚡ 1 ⌖ 1 shame 85
10-days
37
mchange commons java product
◐ 1 ⚡ 1 shame 50
10-days
38
connection manager for objectscale product
◐ 1 ⚡ 1 shame 50
10-days
39
archer ax53 product
◐ 1 ⚡ 1 shame 50
10-days
40
openshift container platform product
◐ 1 ⚡ 1 shame 50
10-days
◀ PREV PAGE 01 / 02 NEXT ▶