Concept
CVE
Common Vulnerabilities and Exposures
The public ID system for vulnerabilities, such as CVE-2026-12345, so everyone means the same bug.
A CVE ID names one vulnerability. It is assigned by a CVE Numbering Authority (often the vendor) and recorded by the CVE Program; NIST's National Vulnerability Database then adds a severity score. Our vulnerability pages show those facts with their sources.
CVE in the news
Recent stories that mention it.
Related
- ConceptCVSS · Common Vulnerability Scoring SystemA 0–10 score for how severe a vulnerability is in theory.
- ConceptKEV · Known Exploited Vulnerabilities catalogCISA's list of vulnerabilities with evidence of real-world exploitation.
- ConceptEPSS · Exploit Prediction Scoring SystemA daily estimate of how likely a vulnerability is to be exploited in the next 30 days.
Plain-language explainers written by SecurityTabs, matched to stories by name. All terms