Glossary
CVE (Common Vulnerabilities and Exposures)
A public ID for a specific security flaw, written like CVE-2026-12345.
A CVE is a standard identifier for one publicly known security vulnerability. The numbering system is run by the CVE Program, sponsored by the U.S. Cybersecurity and Infrastructure Security Agency (CISA).
The ID itself says nothing about how serious a flaw is. Severity is usually expressed separately, for example with a CVSS score, and whether attackers are using it is tracked in lists such as CISA's Known Exploited Vulnerabilities catalog.