Critical Severity
Published: Nov 4, 2026
Every public CVE in one place, free and open source: timeline, newest first, filters, scores, CISA KEV, EPSS and links to primary sources.
# CVE Tracker
**Every public CVE in one place, free and open source.** See how many vulnerabilities are published over time, browse the newest ones first, filter them down to what matters to you, and open any CVE for its scores, exploitation signals, affected products and links to the primary sources.
**Live at [trackcve.app](https://trackcve.app)**, with its public API at [api.trackcve.app](https://api.trackcve.app/v1/summary).
[](https://trackcve.app)
[](https://github.com/janszotkowski/cve-tracker/actions/workflows/ci.yml)
[](LICENSE)
CVE Tracker keeps its own copy of the public sources (the CVE List, NVD, CISA KEV, FIRST EPSS and the GitHub Advisory Database) and refreshes it every few minutes. It needs no paid API and no account, and runs on a single small server.
## Features
- **The whole CVE List**: every published record (400,000+), refreshed every 10 minutes from the official CVE Program repository.
- **Timeline**: CVEs per hour, day, week, month or year, depending on the period you look at, in three views:
- **New**: counts stacked by severity.
- **Severity mix**: each severity's share of a period.
- **Cumulative**: the running total.
- **One filter for the chart and the table**: full-text search (title, description, vendor, product) or a CVE id, a publication period (today, last 24 hours, this week … all time, or a custom range), severity, "known exploited only", a vendor and product (with suggestions, matching every affected product of a record) a package ecosystem (npm, PyPI, Maven, Go, NuGet, crates.io…, from reviewed GitHub advisories), a weakness (CWE) and the CNA that assigned it.
- **Take it with you**: any filtered list downloads as CSV or JSON (up to 10,000 rows), and has its own Atom feed for a feed reader o