Firewalls, VPNs and routers
Updated . Data gathered daily from official public sources.
As of Oct 26, 2026, Vendor History found breach notices or SEC cyber filings for 3 of the 23 vendors it tracks in this category: Cisco (1), Citrix (1) and F5 (1), dated Oct 25, 2016 to Oct 15, 2025. 20 of them have flaws on CISA's list of actively exploited security flaws. Finding nothing in these sources does not mean nothing happened.
| Vendor | State breach notices | SEC cyber filings | Exploited flaws | Latest notice or filing |
|---|---|---|---|---|
| Check Point | 0 | 0 | 5 | None found |
| Cisco | 1 | 0 | 101 | Oct 25, 2016 |
| Citrix | 1 | 0 | 27 | Apr 29, 2019 |
| CrowdStrike | 0 | 0 | 0 | None found |
| D-Link | 0 | 0 | 26 | None found |
| DrayTek | 0 | 0 | 5 | None found |
| F5 | 0 | 1 | 8 | Oct 15, 2025 |
| Fortinet | 0 | 0 | 32 | None found |
| Ivanti | 0 | 0 | 36 | None found |
| Juniper Networks | 0 | 0 | 8 | None found |
| MikroTik | 0 | 0 | 5 | None found |
| NETGEAR | 0 | 0 | 8 | None found |
| Palo Alto Networks | 0 | 0 | 16 | None found |
| QNAP | 0 | 0 | 11 | None found |
| SentinelOne | 0 | 0 | 0 | None found |
| SonicWall | 0 | 0 | 19 | None found |
| Sophos | 0 | 0 | 7 | None found |
| TP-Link | 0 | 0 | 6 | None found |
| Trend Micro | 0 | 0 | 12 | None found |
| Ubiquiti | 0 | 0 | 4 | None found |
| WatchGuard | 0 | 0 | 4 | None found |
| Zscaler | 0 | 0 | 0 | None found |
| Zyxel | 0 | 0 | 13 | None found |
Don't see a vendor your business uses? Email its name to support@vendorhistory.com and we'll look at adding it.
Breach notices and SEC filings in this category
-
F5 filed a Form 8-K with the SEC under Item 1.05, which is used to report a material cybersecurity incident.
Source: SEC EDGAR
-
Citrix Systems, Inc. filed a data breach notice with the California Attorney General. Breach date(s) listed: 10/13/2018.
Source: California Attorney General
-
Cisco Systems, Inc. filed a data breach notice with the California Attorney General. Breach date(s) listed: 08/18/2016.
Source: California Attorney General
We check: California and Washington Attorney General breach notices, SEC cyber incident filings (Form 8-K, Item 1.05) and CISA's catalog of actively exploited security flaws. An empty section means we found nothing in those sources. It does not mean nothing happened. How it works