CVE Tools
Track your stack

Know which vulnerabilities actually matter to you.

In the last 30 days, 16,458 CVEs were published. 32 were confirmed exploited. cve.tools ranks every record by real-world exploitation and shows you the ones that reach the software you run.

Track your stack — free

CVE pages open without an account. Try CVE-2026-104935, added to CISA KEV this month.

Your forecast, not everyone's weather.

A feed of every CVE is noise. Tell cve.tools what you run, and the thousands of new records each month shrink to the handful that land on your software.

  1. Add the products you run.

    Vendor, product and version, once. The example here has 5.

  2. Every new CVE is matched against them.

    Each record's affected products are checked against your list as it arrives, and re-checked when exploitation signals change.

  3. You hear only about what's exploited, or likely to be.

    CISA KEV, high EPSS and public exploit code raise an alert. Everything else stays out of your way.

Track your stack — free
Example stacklast 30 days32 of 32 exploited · 3 on this stack
nginx
PostgreSQL 16
Ivanti Connect SecureCVE-2026-104935
Microsoft WindowsCVE-2026-96951
ProFTPDCVE-2015-3306
Each point is one of this month's 32 KEV additions.

Of the 32 exploited this month, 3 land on this example stack:

nginx and PostgreSQL 16: no KEV additions this month.

Every reading comes from a named station.

The colour scale on this page is one scale. Each step on it is a signal from a specific source, and every CVE page shows which source said what.

Confirmed exploited

CISA KEV: attacks seen in the wild. 1,741 records, 32 added in the last 30 days.

Exploit code exists

GitHub PoC 29,620 · Exploit-DB 15,174 · Packet Storm 8,744 · Metasploit 112 · Nuclei 12. Scanner checks from Nuclei templates and OpenVAS.

Likely to be exploited

FIRST EPSS: the probability of exploitation activity in the next 30 days. 17,307 records score high.

Severity

CVSS base scores from NVD and vendor advisories. 1,428 of this month's records scored 9.0 or higher.

Published

The record exists: NVD, CVE List V5, GHSA, CSAF vendor advisories, BDU. 16,458 in the last 30 days.

Stations

NVD
CVE records, CVSS, affected products (CPE)
CVE List V5
CVEProject's canonical records
GitHub Security Advisories
GHSA package advisories
CISA KEV
Confirmed exploitation
FIRST EPSS
Exploitation probability
CSAF vendor advisories
Vendor-published fixes and scope
BDU (FSTEC)
Russian national vulnerability database
Exploit-DB
Public exploit code
GitHub PoC
Proof-of-concept repositories
Packet Storm
Exploits and advisories
Metasploit
Exploit modules
Nuclei templates
Scanner checks
OpenVAS checks
Scanner checks
MITRE ATT&CK
Attacker techniques

In all: 397,082 CVE records, 65,340 of them with public exploit code, 1,741 in CISA KEV.

The same data, wherever you work.

  • WebsiteSearch, CVE pages, trends, My Stack alerts.
  • REST APIThe records and signals above, as JSON.
  • MCP serverFor AI agents that triage on your behalf.
  • CLICheck from a terminal or a pipeline.
  • TelegramA channel for exploited and discussed CVEs.

Thousands more arrive every month. Watch the few that reach you.

Add your stack in a few minutes. It's free, and every one of the 397,082 CVE pages stays open without an account.

Track your stack — free See this month's trends