Zedmos
Exploit record

Exploit record

What a security review asks for, on one page: our count in the CISA catalogue of exploited vulnerabilities, our class under the EU Cyber Resilience Act, the SBOM, the disclosure path and the support period.

Entries for Zedmos products in the CISA Known Exploited Vulnerabilities catalogue

Catalogue version 2026.09.01, checked 2026-09-02. The catalogue lists vulnerabilities with evidence of active exploitation; an entry is what an attacker has actually used, not what a scanner reports.

Run the search yourself

The rest of the review

CVEs published for Zedmos productsNone to date.
EU Cyber Resilience ActAnnex III Class II — firewalls, intrusion detection and prevention systems. Built to the essential requirements of Annex I.Trust & compliance
Software bill of materialsCycloneDX, generated per release, in the format BSI TR-03183-2 describes.Trust & compliance
Vulnerability disclosureA published policy, a single address, and security.txt at the well-known path. Reports are acknowledged and given a timeline.Security & disclosure
Security updatesFree of charge for at least five years from placing on the market (CRA Art. 13(8)); every update remains available for at least ten years (Art. 13(9)).Security & disclosure
Reporting from 11 September 2026Actively exploited vulnerabilities and severe incidents reported to ENISA and the competent CSIRT within 24 hours (CRA Art. 14), and to affected operators at the same time.

What the number does not mean

A zero is easy to hold when a product is young and its install base is small. It says that no vulnerability in a Zedmos product has been used in the wild that anyone has recorded; it does not say there are none. What we commit to is the rest of the page — a published class, an SBOM you can read, a disclosure path that answers, and a support period the law can hold us to — and to leaving this page in place when the number changes.

For context

The same catalogue's counts for the vendors Zedmos is usually compared with are on the comparison pages, with the search that produces each one.

Switching from Fortinet