Skip to content
COOEY
FAIL // HALL OF SHAME
2408 players ranked

Security failures of FedRAMP vendors, their competitors, and the hardware they ship — ranked by zero-days, RCE, active exploitation, sheer embarrassment, and False-Claims-Act recoveries. A dex.sgc.ai RAG curator writes each event's summary and scores how avoidable it was; every name links to its dossier.

On the board
2408
players
Zero-days
86
tracked
RCEs
1380
assessed
Exploited
1675
in the wild
Assessed
2149
events
FCA recovered
$82M
DOJ CCFI
Overview☣ Most embarrassing◐ Most zero-days⚡ Most RCEs⌖ Most exploited⚖ Biggest FCA recoveries
All playersCompaniesVendorsProducts / HW ◧ FedRAMP only
◐ Most zero-days
Vulnerabilities exploited before a patch existed — the worst kind to ship.
41
Serv-U product
◐ 1 ⚡ 2 ⌖ 4 ☣ 1 shame 95
10-days
42
Accellion vendor
◐ 1 ⚡ 2 ⌖ 4 ☣ 4 shame 72
10-days
43
NetScaler ADC and NetScaler Gateway product
◐ 1 ⚡ 2 ⌖ 4 ☣ 2 shame 85
10-days
44
FTA product
◐ 1 ⚡ 2 ⌖ 4 ☣ 4 shame 72
10-days
45
GoAnywhere MFT product
◐ 1 ⚡ 2 ⌖ 2 ☣ 2 shame 85
10-days
46
Log4j2 product
◐ 1 ⚡ 2 ⌖ 2 ☣ 2 shame 95
10-days
47
Connect Secure, Policy Secure, and ZTA Gateways product
◐ 1 ⚡ 2 ⌖ 2 ☣ 2 shame 88
10-days
48
chrome product
◐ 1 ⚡ 2 ⌖ 1 shame 65
10-days
49
samba vendor
◐ 1 ⚡ 2 ⌖ 1 ☣ 1 shame 85
10-days
50
horizoncloud vendor
◐ 1 ⚡ 2 shame 50
10-days
51
mariadb vendor
◐ 1 ⚡ 2 shame 50
10-days
52
umbraco vendor
◐ 1 ⚡ 2 shame 50
10-days
53
enterprise linux product
◐ 1 ⚡ 2 shame 50
10-days
54
redhat vendor
◐ 1 ⚡ 2 shame 50
10-days
55
caterease product
◐ 1 ⚡ 2 shame 50
10-days
56
Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD) product
◐ 1 ⚡ 1 ⌖ 6 ☣ 2 shame 78
10-days
57
Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance product
◐ 1 ⚡ 1 ⌖ 4 ☣ 1 shame 95
10-days
58
iCagenda vendor
◐ 1 ⚡ 1 ⌖ 1 shame 65
10-days
59
Joomlack vendor
◐ 1 ⚡ 1 ⌖ 1 shame 85
10-days
60
fortimanager product
◐ 1 ⚡ 1 ⌖ 1 shame 85
10-days
61
Forms product
◐ 1 ⚡ 1 ⌖ 1 shame 85
10-days
62
Page Builder product
◐ 1 ⚡ 1 ⌖ 1 shame 85
10-days
63
JoomShaper vendor
◐ 1 ⚡ 1 ⌖ 1 shame 85
10-days
64
Email Security Gateway (ESG) Appliance product
◐ 1 ⚡ 1 ⌖ 1 shame 72
10-days
65
Balbooa vendor
◐ 1 ⚡ 1 ⌖ 1 shame 85
10-days
66
Barracuda Networks vendor
◐ 1 ⚡ 1 ⌖ 1 shame 72
10-days
67
SP Page Builder product
◐ 1 ⚡ 1 ⌖ 1 shame 85
10-days
68
Kemp LoadMaster product
◐ 1 ⚡ 1 ⌖ 1 shame 85
10-days
69
IOS XE Web UI product
◐ 1 ⚡ 1 ⌖ 1 shame 72
10-days
70
Acrobat product
◐ 1 ⚡ 1 ⌖ 1 shame 85
10-days
71
Confluence Server/Data Center product
◐ 1 ⚡ 1 ⌖ 1 ☣ 1 shame 85
10-days
72
archer ax53 firmware product
◐ 1 ⚡ 1 shame 50
10-days
73
d8801 product
◐ 1 ⚡ 1 shame 50
10-days
74
cph2 echarge product
◐ 1 ⚡ 1 shame 50
10-days
75
umbraco cms product
◐ 1 ⚡ 1 shame 50
10-days
76
d8801 firmware product
◐ 1 ⚡ 1 shame 50
10-days
77
d3dsecurity vendor
◐ 1 ⚡ 1 shame 50
10-days
78
connection manager for objectscale product
◐ 1 ⚡ 1 shame 50
10-days
79
ac7 firmware product
◐ 1 ⚡ 1 shame 50
10-days
80
phpvibe vendor
◐ 1 ⚡ 1 shame 50
10-days
◀ PREV PAGE 02 / 03 NEXT ▶