Terms and disclaimer
Last updated 13 August 2026.
This is not security advice
CyberCVE reports published vulnerability data and counts it in various ways. It does not tell you whether you are affected by anything, and it is not a substitute for your vendor's advisories, your own asset inventory, or professional advice. Decisions about patching your systems should be based on the vendor's advisory and your own circumstances — not on a count on this site.
Accuracy, and its limits
The data here is assembled automatically from public sources and mapped to product categories by rules we wrote. Both steps can be wrong. Known and specific limitations are documented on the methodology page, including which years are covered and which records are deliberately excluded.
CVE counts are not a product quality ranking. A vendor that publishes thoroughly and assigns CVEs for its own findings will show more CVEs than one that does neither. The methodology page explains this at length because it is the single most common way this kind of data is misread.
If you find an error, please report it — corrections are the point, and the fix history is public.
No warranty
This site is provided "as is", without warranty of any kind, express or implied, including but not limited to warranties of merchantability, fitness for a particular purpose, and non-infringement. To the fullest extent permitted by law, the operator is not liable for any claim, damages, or other liability arising from your use of, or reliance on, this site or its data.
Data sources and attribution
The vulnerability data on this site comes from third parties and remains theirs:
- CVE records — the CVE Program. Use is subject to the CVE Program Terms of Use. CVE® is a registered trademark of MITRE.
- Known Exploited Vulnerabilities catalog — CISA, a work of the U.S. Government.
- EPSS scores — courtesy of FIRST. Free to use with citation.
None of these organisations endorse this site or have reviewed it. Any error in how their data is presented here is ours.
Trademarks
Fortinet, Palo Alto Networks, Cisco, Splunk, CyberArk, and all other vendor and product names are trademarks of their respective owners. They are used nominatively — that is, to identify the products a vulnerability affects. No affiliation with, sponsorship by, or endorsement from any of these companies is claimed or implied.
Using this site's content
The source code, including the product taxonomy, is open source under the MIT licence — see the repository. The underlying vulnerability data is not ours to license; take it from the sources above under their terms. If you cite figures from this site, please link to the page you took them from, since the numbers change as the data does.
Acceptable use
The site and its JSON API are free to use. Please do not scrape at a rate that degrades it for others — there is an RSS feed and a JSON API precisely so you do not have to. Abusive traffic may be rate-limited or blocked.
Contact
contact@cybercve.com · Security reports: security.txt