Reference
This page is generated from a dbt schema.yml file, the single source of truth for both tables' structure. Column types are kept portable (string, integer, float, timestamp) so the file works unchanged against any database platform. Download it here: schema.yml.
The main table: one row per CVE. Every column, its type, and what it means. Published as
numbered page files (cve_summary.<page>.csv.gz), most recently modified CVEs first.
| Column | Type | Description |
|---|---|---|
cve_id |
string | CVE identifier, e.g. CVE-2024-12345. |
published |
timestamp | When the CVE was first published to the NVD (UTC). |
last_modified |
timestamp | When the CVE record was last updated in the NVD (UTC). |
vuln_status |
string | NVD analysis status, e.g. Analyzed, Awaiting Analysis. |
is_app |
integer | 1 if the CVE affects an application, per its CPE configurations, else 0. |
is_os |
integer | 1 if the CVE affects an operating system, per its CPE configurations, else 0. |
is_hardware |
integer | 1 if the CVE affects hardware, per its CPE configurations, else 0. |
product |
string | Most commonly referenced affected product in the CVE's CPE matches. |
cwe |
string | Primary weakness classification (CWE) assigned to the CVE. |
cvss_version |
string | Version of the CVSS metric used (4.0, 3.1, 3.0 or 2.0), highest available preferred. |
base_score |
float | CVSS base score for the primary metric (0.0-10.0). |
base_severity |
string | CVSS base severity rating, e.g. LOW, MEDIUM, HIGH, CRITICAL. |
is_remote |
integer | 1 if the attack vector is Network (AV:N), else 0. |
is_adjacent |
integer | 1 if the attack vector is Adjacent (AV:A), else 0. |
is_local |
integer | 1 if the attack vector is Local (AV:L), else 0. |
is_physical |
integer | 1 if the attack vector is Physical (AV:P), else 0. |
requires_auth |
integer | 1 if exploitation requires the attacker to be authenticated/have privileges, else 0. |
requires_user_interaction |
integer | 1 if exploitation requires interaction from a user other than the attacker, else 0. |
ssvc_exploitation |
string | SSVC exploitation state, e.g. none, poc, active. |
ssvc_automatable |
string | SSVC automatable rating (yes/no) - whether exploitation can be scripted at scale. |
has_patch_reference |
integer | 1 if a reference tagged 'Patch' is available, or the CNA's affected-versions data states a fixed (unaffected) version, else 0. |
cvss_vector |
string | Full CVSS vector string the metrics above were derived from. |
epss |
float | EPSS score (0.0-1.0): probability of exploitation in the next 30 days. N/A if no EPSS score exists for this CVE. |
epss_percentile |
float | Percentile rank of this CVE's EPSS score among all scored CVEs. N/A if no EPSS score exists for this CVE. |
is_kev |
integer | 1 if listed in CISA's Known Exploited Vulnerabilities (KEV) catalog, else 0. |
kev_date_added |
timestamp | When this CVE was added to the CISA KEV catalog (UTC). N/A if not KEV-listed. |
A child table keyed by cve_id, with one row for every CPE match entry in a
CVE's configurations. A CVE that affects multiple CPEs has multiple rows here, and a CVE
with no CPE matches has none. It exists because cve_summary's product
column collapses to a single most-common value and drops the version-range data
(versionStartIncluding and friends) you need for actual version matching.
It is published as numbered page files (cve_cpe.<page>.csv.gz), ordered to match
cve_summary: rows for the most recently modified CVEs come first. A new page starts
whenever a file approaches the deploy size limit, so the number of pages grows with the data. See
Downloads for an example that fetches them all.
| Column | Type | Description |
|---|---|---|
cve_id |
string | CVE identifier, joins to cve_summary.cve_id. |
criteria |
string | Full cpe:2.3 URI as it appears in the NVD record. |
vendor |
string | Parsed from criteria (4th colon-delimited field). |
product |
string | Parsed from criteria (5th colon-delimited field). |
version |
string | Exact version from criteria, or "*" if this match is range-based. |
version_start_including |
string | From NVD versionStartIncluding, null if absent. |
version_start_excluding |
string | From NVD versionStartExcluding, null if absent. |
version_end_including |
string | From NVD versionEndIncluding, null if absent. |
version_end_excluding |
string | From NVD versionEndExcluding, null if absent. |
vulnerable |
integer | NVD's own "vulnerable" flag on the cpeMatch entry (0 or 1). |
The 10 most recently modified rows of cve_summary.
| cve_id | published | last_modified | vuln_status | is_app | is_os | is_hardware | product | cwe | cvss_version | base_score | base_severity | is_remote | is_adjacent | is_local | is_physical | requires_auth | requires_user_interaction | ssvc_exploitation | ssvc_automatable | has_patch_reference | cvss_vector | epss | epss_percentile | is_kev | kev_date_added |
|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|---|
| CVE-2026-76578 | 2026-09-07 13:20:36 | 2026-11-02 04:16:55 | Awaiting Analysis | 0 | 0 | 0 | red hat enterprise linux 10 | CWE-306 | 3.1 | 9.8 | CRITICAL | 1 | 0 | 0 | 0 | 0 | 0 | none | yes | 1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H | 0.01206 | 0.6832 | 0 | N/A |
| CVE-2026-79678 | 2026-09-07 13:20:38 | 2026-11-02 04:16:55 | Awaiting Analysis | 0 | 0 | 0 | red hat enterprise linux 10 | CWE-95 | 3.1 | 8.1 | HIGH | 1 | 0 | 0 | 0 | 1 | 0 | none | no | 1 | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:H | 0.00898 | 0.59618 | 0 | N/A |
| CVE-2026-19550 | 2026-08-11 21:17:35 | 2026-11-02 04:16:54 | Modified | 1 | 1 | 0 | enterprise_linux | CWE-863 | 3.1 | 8.2 | HIGH | 1 | 0 | 0 | 0 | 1 | 0 | none | no | 1 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:N | 0.00465 | 0.4026 | 0 | N/A |
| CVE-2026-73197 | 2026-08-20 11:16:21 | 2026-11-02 04:16:54 | Modified | 1 | 1 | 0 | enterprise_linux | CWE-770 | 3.1 | 7.5 | HIGH | 1 | 0 | 0 | 0 | 0 | 0 | none | yes | 1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 0.0054 | 0.4542 | 0 | N/A |
| CVE-2026-73198 | 2026-08-20 11:16:21 | 2026-11-02 04:16:54 | Modified | 1 | 1 | 0 | enterprise_linux | CWE-770 | 3.1 | 7.5 | HIGH | 1 | 0 | 0 | 0 | 0 | 0 | none | yes | 1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H | 0.0054 | 0.4542 | 0 | N/A |
| CVE-2026-74860 | 2026-09-08 12:16:58 | 2026-11-02 04:16:54 | Awaiting Analysis | 0 | 0 | 0 | red hat enterprise linux 10 | CWE-763 | 3.1 | 8.5 | HIGH | 1 | 0 | 0 | 0 | 1 | 0 | none | no | 1 | CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H | 0.00658 | 0.51477 | 0 | N/A |
| CVE-2026-13097 | 2026-08-20 11:16:20 | 2026-11-02 04:16:53 | Modified | 1 | 1 | 0 | enterprise_linux | CWE-706 | 3.1 | 8.7 | HIGH | 1 | 0 | 0 | 0 | 1 | 0 | none | no | 1 | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N | 0.00746 | 0.54844 | 0 | N/A |
| CVE-2026-18147 | 2026-09-09 17:17:17 | 2026-11-02 04:16:53 | Awaiting Analysis | 0 | 0 | 0 | red hat enterprise linux 10 | CWE-79 | 3.1 | 8.1 | HIGH | 1 | 0 | 0 | 0 | 0 | 1 | none | no | 1 | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:N | 0.0053 | 0.44825 | 0 | N/A |
| CVE-2026-120336 | 2026-11-02 04:16:53 | 2026-11-02 04:16:53 | Received | 0 | 0 | 0 | o-kam client | CWE-119 | 4.0 | 5.5 | MEDIUM | 1 | 0 | 0 | 0 | 0 | 0 | N/A | N/A | 0 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X | N/A | N/A | 0 | N/A |
| CVE-2026-120337 | 2026-11-02 04:16:53 | 2026-11-02 04:16:53 | Received | 0 | 0 | 0 | o-kam superipcam | CWE-119 | 4.0 | 5.5 | MEDIUM | 1 | 0 | 0 | 0 | 0 | 0 | N/A | N/A | 0 | CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X | N/A | N/A | 0 | N/A |
The first 10 rows of cve_cpe, belonging to the most recently modified CVEs.
| cve_id | criteria | vendor | product | version | version_start_including | version_start_excluding | version_end_including | version_end_excluding | vulnerable |
|---|---|---|---|---|---|---|---|---|---|
| CVE-2026-19550 | cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* | redhat | enterprise_linux | 7.0 | 1 | ||||
| CVE-2026-19550 | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* | redhat | enterprise_linux | 8.0 | 1 | ||||
| CVE-2026-19550 | cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* | redhat | enterprise_linux | 9.0 | 1 | ||||
| CVE-2026-19550 | cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* | redhat | enterprise_linux | 10.0 | 1 | ||||
| CVE-2026-19550 | cpe:2.3:a:freeipa:freeipa:*:*:*:*:*:*:*:* | freeipa | freeipa | * | 4.13.3 | 1 | |||
| CVE-2026-73197 | cpe:2.3:o:redhat:enterprise_linux:6.0:*:*:*:*:*:*:* | redhat | enterprise_linux | 6.0 | 1 | ||||
| CVE-2026-73197 | cpe:2.3:o:redhat:enterprise_linux:7.0:*:*:*:*:*:*:* | redhat | enterprise_linux | 7.0 | 1 | ||||
| CVE-2026-73197 | cpe:2.3:o:redhat:enterprise_linux:8.0:*:*:*:*:*:*:* | redhat | enterprise_linux | 8.0 | 1 | ||||
| CVE-2026-73197 | cpe:2.3:o:redhat:enterprise_linux:9.0:*:*:*:*:*:*:* | redhat | enterprise_linux | 9.0 | 1 | ||||
| CVE-2026-73197 | cpe:2.3:o:redhat:enterprise_linux:10.0:*:*:*:*:*:*:* | redhat | enterprise_linux | 10.0 | 1 |