Security × lifecycle
Unsupported hardware with actively exploited vulnerabilities
Hardware the manufacturer no longer fixes, that CISA also lists as carrying an actively exploited vulnerability. Past end of support is a planning note; past end of support and actively exploited is an audit finding.
What the overlap says
On a supported product, a vulnerability in CISA's actively-exploited catalogue gets a vendor fix. On the 72 products listed here it cannot: the manufacturer's last date of support has passed, so the exposure is permanent until the hardware is isolated or replaced.
The largest single overlap is the Cisco ASA 5500-X Series Firewalls: 11 actively exploited CVE entries, every one linked to known ransomware campaign use, on a platform whose vendor support has ended (match tiers stated per row).
Every one of the 72 products listed carries at least one CVE that CISA links to known ransomware campaign use.
| Product | Vendor | Parts | KEV CVEs | Ransomware | Best match |
|---|---|---|---|---|---|
| Cisco ASA 5500-X Series Firewalls | Cisco | 108 | 11 | 11 | Possible match |
| Fortinet FortiWeb 1000B | Fortinet | 1 | 3 | 3 | Possible match |
| Fortinet FortiWeb 1000C | Fortinet | 1 | 3 | 3 | Possible match |
| Fortinet FortiWeb 1000D | Fortinet | 2 | 3 | 3 | Possible match |
| Fortinet FortiWeb 100D | Fortinet | 1 | 3 | 3 | Possible match |
| Fortinet FortiWeb 3000C | Fortinet | 2 | 3 | 3 | Possible match |
| Fortinet FortiWeb 3000D | Fortinet | 3 | 3 | 3 | Possible match |
| Fortinet FortiWeb 3010E | Fortinet | 1 | 3 | 3 | Possible match |
| Fortinet FortiWeb 4000C | Fortinet | 1 | 3 | 3 | Possible match |
| Fortinet FortiWeb 4000D | Fortinet | 2 | 3 | 3 | Possible match |
| Fortinet FortiWeb 400B | Fortinet | 1 | 3 | 3 | Possible match |
| Fortinet FortiWeb 400C | Fortinet | 2 | 3 | 3 | Possible match |
| Fortinet FortiWeb 400D | Fortinet | 2 | 3 | 3 | Possible match |
| Fortinet FortiWeb 600D | Fortinet | 2 | 3 | 3 | Possible match |
| SonicWall Email Security 200 | SonicWall | 1 | 3 | 3 | Possible match |
| SonicWall Email Security 300 | SonicWall | 1 | 3 | 3 | Possible match |
| SonicWall Email Security 3300 | SonicWall | 1 | 3 | 3 | Possible match |
| SonicWall Email Security 400 | SonicWall | 1 | 3 | 3 | Possible match |
| SonicWall Email Security 4300 | SonicWall | 1 | 3 | 3 | Possible match |
| SonicWall Email Security 500 | SonicWall | 1 | 3 | 3 | Possible match |
| SonicWall Email Security 6000 | SonicWall | 1 | 3 | 3 | Possible match |
| SonicWall Email Security 8000 | SonicWall | 1 | 3 | 3 | Possible match |
| SonicWall Email Security 8300 | SonicWall | 1 | 3 | 3 | Possible match |
| Fortinet FortiSandbox 1000D | Fortinet | 2 | 2 | 2 | Possible match |
| Fortinet FortiSandbox 3000D | Fortinet | 2 | 2 | 2 | Possible match |
| Fortinet FortiSandbox 3000E | Fortinet | 2 | 2 | 2 | Possible match |
| Fortinet FortiSandbox 3500D | Fortinet | 1 | 2 | 2 | Possible match |
| Cisco Catalyst 4500-E Series | Cisco | 101 | 1 | 1 | Possible match |
| Cisco Catalyst 4500 Series | Cisco | 78 | 1 | 1 | Possible match |
| Fortinet FortiADC 1000E | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiADC 1000F | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiADC 100E | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiADC 1500D | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiADC 2000D | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiADC 2000F | Fortinet | 2 | 1 | 1 | Possible match |
| Fortinet FortiADC 200D | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiADC 200E | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiADC 200F | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiADC 300D | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiADC 300E | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiADC 4000D | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiADC 4000F | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiADC 400D | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiADC 400E | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiADC 600E | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiADC 60F | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiADC 700D | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiManager 100 | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiManager 1000C | Fortinet | 2 | 1 | 1 | Possible match |
| Fortinet FortiManager 1000D | Fortinet | 2 | 1 | 1 | Possible match |
| Fortinet FortiManager 100C | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiManager 2000E | Fortinet | 2 | 1 | 1 | Possible match |
| Fortinet FortiManager 200D | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiManager 200F | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiManager 3000 | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiManager 3000B | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiManager 3000C | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiManager 3000F | Fortinet | 2 | 1 | 1 | Possible match |
| Fortinet FortiManager 300D | Fortinet | 2 | 1 | 1 | Possible match |
| Fortinet FortiManager 300E | Fortinet | 2 | 1 | 1 | Possible match |
| Fortinet FortiManager 3700F | Fortinet | 2 | 1 | 1 | Possible match |
| Fortinet FortiManager 3900E | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiManager 400 | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiManager 4000D | Fortinet | 2 | 1 | 1 | Possible match |
| Fortinet FortiManager 4000E | Fortinet | 2 | 1 | 1 | Possible match |
| Fortinet FortiManager 400A | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiManager 400B | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiManager 400C | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiManager 400E | Fortinet | 1 | 1 | 1 | Possible match |
| Fortinet FortiManager 5001A | Fortinet | 1 | 1 | 1 | Possible match |
| Zyxel EMG2926-Q10A | Zyxel | 1 | 1 | 1 | Probable match |
| Zyxel NXC2500 | Zyxel | 1 | 1 | 1 | Confirmed match |
Unsupported and exploited — questions
What does this page list?
Hardware that is past its manufacturer's last date of support AND is associated with a vulnerability in CISA's Known Exploited Vulnerabilities catalog. 72 tracked products meet both conditions.
Does this mean my device is compromised?
No. It means the manufacturer no longer issues fixes for this product, and a vulnerability associated with that product line is being actively exploited according to CISA. Whether a specific unit is affected or exposed depends on its configuration and software version — confirm against the vendor advisory.
How exact is the match between a CVE and a product?
CISA's catalogue names product lines and software rather than part numbers, so every row on a product page states how it was matched: confirmed (CISA's text names one of our part numbers), probable (a model resolving to exactly one tracked product) or possible (a product line only). EOSL.ai never collapses these into a single "affected" flag.
Where does the vulnerability data come from?
CISA’s Known Exploited Vulnerabilities catalog, refreshed from CISA’s own published catalogue. Lifecycle dates come from each manufacturer’s end-of-life bulletin, linked on every product page.
Vulnerability data: CISA KEV catalogue 2026.09.27, refreshed with the weekly database run. Cite this page: “EOSL.ai — unsupported hardware with actively exploited vulnerabilities, Sep 2026” — https://eosl.ai/kev/