Data disclaimer
Last updated: July 2026
CVEInsight is an independent reference. It is not affiliated with NIST, MITRE, or any software vendor, and it is not a substitute for professional security assessment.
Where the data comes from
All vulnerability records originate from the National Vulnerability Database (NVD). We refresh every six hours, but entries can still lag the original source, and NVD records themselves are revised over time.
What scan results mean
A scan match means a version you reported falls inside a version range that NVD lists as affected. It does not prove the vulnerability is exploitable on your machine — configuration, patches applied outside version numbers, and platform differences all matter. A clean scan likewise doesn’t guarantee you are safe: matching depends on how vendors name their products, and not every program maps cleanly to the database.
Severity is a guide, not a verdict
CVSS scores rate theoretical severity, not the actual risk to you. A “critical” flaw in software you never expose to the internet may matter less than a “medium” one in your browser.
Report problems
If a record here looks wrong, check it against the official NVD entry (linked from every CVE page) and let us know through the contact details on the site.