Coverage
See what Emberix checks before you sign up
Emberix supports 34 network platforms and runs 832 configuration checks across them. For each platform below, see the known high and critical vulnerabilities Emberix matches and how many configuration checks it runs.
Vulnerability data from the National Vulnerability Database, as of October 30, 2026.
| Platform | Device types | High/critical CVEs | On CISA KEV | Config checks |
|---|---|---|---|---|
| Arista EOS | Switch | 24 | 3 | 81 |
| Aruba AOS-CX | Switch | 37 | 0 | 19 |
| ArubaOS-Switch | Switch | 1 | 0 | 19 |
| Check Point Gaia | Firewall | 3 | 2 | 10 |
| Cisco ASA | Firewall | 200 | 15 | 21 |
| Cisco Firepower Threat Defense | Firewall | 133 | 14 | 10 |
| Cisco IOS | Router, Switch | 366 | 39 | 90 |
| Cisco IOS XE | Router, Switch | 350 | 28 | 91 |
| Cisco IOS XR | Router | 97 | 10 | 20 |
| Cisco Meraki MR | Wireless AP | 0 | 0 | 1 |
| Cisco Meraki MS | Switch | 0 | 0 | 2 |
| Cisco Meraki MX | Firewall | 4 | 0 | 1 |
| Cisco NX-OS | Switch | 119 | 2 | 85 |
| Citrix NetScaler | Load balancer | 63 | 18 | 10 |
| Dell Networking OS6 | Switch | Not available | - | 26 |
| Dell Networking OS9 | Switch | Not available | - | 35 |
| Dell SmartFabric OS10 | Switch | 26 | 0 | 65 |
| Extreme EXOS | Switch | 8 | 0 | 19 |
| Extreme VOSS | Switch | 1 | 0 | 19 |
| F5 BIG-IP | Load balancer | 469 | 13 | 11 |
| Fortinet FortiOS | Firewall | 85 | 21 | 24 |
| Huawei VRP | Router, Switch | Not available | - | 20 |
| Juniper Junos OS | Router, Switch, Firewall | 393 | 8 | 40 |
| MikroTik RouterOS | Router | 37 | 5 | 14 |
| Palo Alto PAN-OS | Firewall | 134 | 17 | 20 |
| Ruckus ICX / FastIron | Switch | Not available | - | 19 |
| Ruckus SmartZone | Wireless controller | 5 | 1 | 6 |
| SonicWall SonicOS | Firewall | 38 | 3 | 10 |
| Sophos Firewall | Firewall | 9 | 3 | 10 |
| Ubiquiti EdgeOS | Router, Switch | 3 | 0 | 19 |
| Ubiquiti UniFi Router | Router | Not available | - | 6 |
| Ubiquiti UniFi Switch | Switch | 2 | 0 | 2 |
| Ubiquiti UniFi Wireless AP | Wireless AP | Not available | - | 1 |
| WatchGuard Fireware | Firewall | 44 | 4 | 6 |
The CVE column counts known high and critical vulnerabilities (CVSS 7.0 and above) matched to the platform's vendor identifiers. The KEV column counts those on the CISA Known Exploited Vulnerabilities list, including entries below CVSS 7.0. "Not available" means no usable identifier exists to match vulnerabilities for that platform, so Emberix does not show a count for it. Configuration checks are the platform-specific checks Emberix runs on collected device data.