BlackTreeCVE Intelligence
Live intelligenceLast source refresh: 13 Nov, 12:07 UTCCVE.org primary · CNA / CISA / NIST provenance · CISA KEV
BlackTree Vulnerability Intelligence
Catalogue scope2026

Know what matters. Patch with purpose.

Every CVE published in 2026, translated into clear operational guidance: what it is, why it matters, how it is used, and how quickly you should act.

Evidence-linkedPatch-focusedHuman-readable
Priority brief202613 Nov, 12:07 UTC
220 vulnerabilities require immediate review

Confirmed exploitation remains separate from public exploit references.

Open priority listView CVEs ↗
2026 CVE intelligence
Material changesCosmetic edits and duplicate refreshes excluded1,64724h ↗13,2647d ↗
Sources current:CVE.org · EPSS · CISA KEV · NIST NVD

Current aggregate snapshot. Missing status is not evidence of low risk. CVSS authority split: CNA 76,340 · CISA 14,316 · NIST 2,930 · Other 84 · Unscored 3,865.

CVE.orgCurrentPrimary published CVE records

425,358 records · refreshed 13 Nov, 12:02 UTC

FIRST EPSSCurrentExploitation probability forecasts

405,484 records · refreshed 12 Nov, 19:16 UTC

CISA KEVCurrentConfirmed exploitation in the wild

1,779 records · refreshed 13 Nov, 12:07 UTC

NIST NVDCurrentNIST enrichment and scheduling state

426,122 records · refreshed 13 Nov, 12:07 UTC

97,536published
21,143exploit references
217Confirmed exploited
39,277Patch references
Coverage Missing data is not low risk
  • 96.0%CVSS
  • 99.0%EPSS
  • 93.7%EUVD
  • 24.5%VEX
  • 96.6%product
  • 97.0%versions
  • 93.4%CWE
  • 37.9%NVD not scheduled
… matching recordsRefreshing
Loading live vulnerabilities…

The current catalogue is being retrieved.

Transparent by design

From a new CVE to a decision you can defend.

Vulnerability feeds create a daily triage problem: thousands of records, changing evidence and scores that answer different questions. BlackTree brings those signals together without hiding their source, so you can see what needs attention now, what can wait and why.

  1. 01
    Evidence arrives

    We monitor CVE.org, FIRST, CISA and NIST for new records and meaningful updates.

  2. 02
    Signals stay separate

    CVSS impact, EPSS probability and CISA-confirmed exploitation are never collapsed into a misleading single score.

  3. 03
    Context becomes action

    Affected versions, access requirements, exploitation evidence and available fixes become a practical urgency recommendation.

  4. 04
    The decision stays current

    Material changes are surfaced so you can revisit a decision when the evidence, exposure or remediation changes.

What this solvesLess feed-chasing. A shorter review queue. Decisions with evidence behind them.

Every recommendation remains traceable to its source, and missing data is treated as uncertainty rather than low risk.