Cybersecurity glossary
What is CVE?
Also known as: Common Vulnerabilities and Exposures, CVE ID
Definition
A CVE ID is a unique public identifier, such as CVE-2024-12345, for a disclosed security vulnerability, assigned through the CVE Program.
Why it matters
IDs are issued by CVE Numbering Authorities, which include software vendors and security organizations. The ID tells you which flaw people are talking about; severity and exploitation status come from other sources such as CVSS, EPSS and CISA’s KEV catalog.
Common questions about CVE
See also
Sources
Related Guides
GuideWeb Security
PHP2Shell (CVE-2026-109618 and CVE-2026-109619): How to Patch, Mitigate and Detect Attacks
Two critical PHP flaws allow unauthenticated remote code execution. See who is affected, the fixed versions, temporary mitigations and what to watch for in your logs.
Read more GuideGRC
How to Run a Security Awareness Training Program That Changes Behaviour
Build a security awareness and training program that changes behaviour: role-based content, phishing simulations done fairly, policy acknowledgement, metrics that matter and reporting to leadership.
Read more GuideGRC
How to Drive Security Compliance Across Every Team: A Control Ownership Playbook
A playbook for making every team understand its security obligations and follow through: control ownership, RACI, team scorecards, follow-up cadence, escalation and making compliance part of normal work.
Read more GuideSOC
9 Quick-Win AI Agent Use Cases for Security Operations
Nine high-impact, low-effort SOC tasks to hand to AI agents first, what each agent does and the metric that proves it, plus the tasks to keep human.
Read more