NVD - Data Feeds You are viewing this page in an unauthorized frame window. This is a potential security issue, you are being redirected to https://nvd.nist.gov An official website of the United States government Here's how you know Official websites use .gov A .gov website belongs to an official government organization in the United States. Secure .gov websites use HTTPS A lock () or https:// means you've safely connected to the .gov website. Share sensitive information only on official, secure websites. NVD MENU General Expand or Collapse NVD Dashboard News and Status Updates FAQ Visualizations Legal Disclaimer Vulnerabilities Expand or Collapse Search & Statistics Weakness Types Data Feeds Vendor Comments CVMAP Vulnerability Metrics Expand or Collapse CVSS v4.0 Calculators CVSS v3.x Calculators CVSS v2.0 Calculator Products Expand or Collapse CPE Dictionary CPE Search CPE Statistics SWID Developers Expand or Collapse Start Here Request an API Key Vulnerabilities Products Data Sources Terms of Use Contact NVD Other Sites Expand or Collapse Checklist (NCP) Repository Configurations (CCE) 800-53 Controls SCAP Search Expand or Collapse Vulnerability Search CPE Search Information Technology Laboratory National Vulnerability Database National Vulnerability Database NVD Vulnerabilities NVD Data Feeds APIs and Data Feed Types The following table contains links and short descriptions for each API or data feed the NVD offers. Please read how to keep up-to-date with NVD data when using the traditional data feeds. Users of the data feeds provided on this page must have an understanding of the XML and/or JSON standards and XML or JSON related technologies as defined by www.w3.org. Type Description CVE and CPE APIs An alternative to the traditional vulnerability data feed files. The APIs are far more flexible and offer a richer dataset in a single interface compared to the JSON Vulnerability Feeds and CPE Match Feed. 2.0 JSON Feeds A series of traditional data feed files that reflect the schema format of the 2.0 APIs. Vulnerability Feeds (/cves/) CPE Dictionary Feeds (/cpes/) CPE Match Feeds (/cpematch/) Vulnerability Translation Feeds Translations of vulnerability feeds. Vulnerability Vendor Comments Comments provided by vendors regarding a particular flaw affecting within a product. Common Configuration Enumeration (CCE) Reference Data Reference data for common configuration items. CVE and CPE APIs The 2.0 APIs are the preferred method for staying up to date with the NVD. Users interested in learning where to begin with the API should visit the NVD developers pages. Benefits of the APIs over the traditional data feeds include: The APIs are updated as frequently as our website (unlike the traditional feeds which have explicit update intervals) The APIs provide search capabilities based on the Advanced search feature of the website The APIs provide CVE and CPE based searching capabilities, including the ability to search for single CVE and CPE entries The ability to view only the information that has changed since a given date or time Simplified methods of identifying CPE matches to Applicability statements CVE API Documentation CPE API Documentation Automation Support for CVE Retrieval Automation Support for CPE Retrieval How to Keep Up-to-Date with the NVD Data Using the Traditional Feeds The vulnerability feeds provide CVE® data organized by the first four digits of a CVE® identifier (except for the 2002 feeds which include vulnerabilities prior to and including "CVE-2002-"). If you are locally mirroring NVD data, either the APIs or the data feeds may be used to stay synchronized. After performing a one-time import of the complete data set using the compressed JSON vulnerability feeds, the "modified" feeds should be used to keep up-to-date. Each feed is updated nightly, but only if the content of that feed has changed. For example, the 2004 feeds will be updated only if there is an addition or modification to any vulnerability with a starting CVE® identifier of "CVE-2004-". The "recent" feeds are a list of recently published vulnerabilities and the "modified" feeds are a list of recently published and modified vulnerabilities. The "recent" and "modified" feeds only contain vulnerabilities changed within the previous eight days. These feeds are updated approximately every two hours. META Files Users should always consult the META file to determine if a given feed has been updated since the last import. If no changes have been made there is no benefit to downloading either the .zip or .gz files. This approach should result in a reasonable use of less than 200 requests per day. Each of the data feeds is described by an associated plain text file with the same name as the .xml/.json file with a .meta extension. These files are updated approximately every two hours to reflect changes within their respective feed file. For example, if the name of the file is nvdcve-2.0-modified.json then the .meta file name will be nvdcve-2.0-modified.meta. The .meta file contains information about the specific feed file including the last modified date and time, the size of the file uncompressed, and a SHA256 value of the uncompressed file: lastModifiedDate:2015-09-10T08:40:09-04:00 size:1273382 zipSize:91619 gzSize:91477 sha256:ac782e2db403e2b09ad5dd676501e8755fda3f2bef347b7503491700c6c5eaff JSON 2.0 Feeds These data feeds include updated NVD data in the new 2.0 JSON format. The "year" feeds are updated once per day, while the "recent" and "modified" feeds are updated every two hours. Schema Version 2.0 : NVD JSON 2.0 Schema Feed Updated Download Size (MB) CVE-Modified 08/17/2026; 1:00:04 AM -0400 META GZ 4.84 MB ZIP 4.84 MB CVE-Recent 08/17/2026; 1:00:00 AM -0400 META GZ 1.73 MB ZIP 1.73 MB CVE-2026 08/17/2026; 3:00:10 AM -0400 META GZ 22.67 MB ZIP 22.67 MB CVE-2025 08/17/2026; 3:00:41 AM -0400 META GZ 22.69 MB ZIP 22.69 MB CVE-2024 08/17/2026; 3:01:12 AM -0400 META GZ 23.82 MB ZIP 23.82 MB CVE-2023 08/16/2026; 3:01:34 AM -0400 META GZ 19.21 MB ZIP 19.21 MB CVE-2022 08/16/2026; 3:01:57 AM -0400 META GZ 17.49 MB ZIP 17.49 MB CVE-2021 08/15/2026; 3:02:25 AM -0400 META GZ 16.06 MB ZIP 16.06 MB CVE-2020 08/15/2026; 3:02:43 AM -0400 META GZ 13.31 MB ZIP 13.31 MB CVE-2019 08/15/2026; 3:02:58 AM -0400 META GZ 9.70 MB ZIP 9.70 MB CVE-2018 08/13/2026; 3:02:47 AM -0400 META GZ 7.88 MB ZIP 7.88 MB CVE-2017 08/14/2026; 3:02:42 AM -0400 META GZ 7.35 MB ZIP 7.35 MB CVE-2016 08/15/2026; 3:03:11 AM -0400 META GZ 4.92 MB ZIP 4.92 MB CVE-2015 08/14/2026; 3:03:00 AM -0400 META GZ 4.00 MB ZIP 4.00 MB CVE-2014 07/14/2026; 3:02:51 AM -0400 META GZ 4.34 MB ZIP 4.34 MB CVE-2013 08/14/2026; 3:03:06 AM -0400 META GZ 5.53 MB ZIP 5.53 MB CVE-2012 08/14/2026; 3:03:13 AM -0400 META GZ 4.64 MB ZIP 4.64 MB CVE-2011 07/10/2026; 3:03:18 AM -0400 META GZ 4.08 MB ZIP 4.08 MB CVE-2010 08/14/2026; 3:03:19 AM -0400 META GZ 4.16 MB ZIP 4.16 MB CVE-2009 08/06/2026; 3:03:02 AM -0400 META GZ 4.32 MB ZIP 4.32 MB CVE-2008 07/14/2026; 3:02:57 AM -0400 META GZ 3.99 MB ZIP 3.99 MB CVE-2007 06/22/2026; 10:34:32 AM -0400 META GZ 3.44 MB ZIP 3.44 MB CVE-2006 07/15/2026; 3:04:04 AM -0400 META GZ 3.34 MB ZIP 3.34 MB CVE-2005 07/15/2026; 3:04:09 AM -0400 META GZ 2.07 MB ZIP 2.07 MB CVE-2004 06/22/2026; 10:34:45 AM -0400 META GZ 1.42 MB ZIP 1.42 MB CVE-2003 06/22/2026; 10:34:47 AM -0400 META GZ 0.70 MB ZIP 0.70 MB CVE-2002 07/24/2026; 3:03:22 AM -0400 META GZ 2.08 MB ZIP 2.08 MB Schema Version 2.0 : NVD CPE Match Feed 2.0 Schema Feed Updated Download Size (MB) CPE-Match 2.0 08/14/2026; 11:40:02 PM -0400 META GZ 762.98 MB ZIP 763.00 MB Schema Version 2.0 : CPE Dictionary 2.0 Schema Feed Updated Download Size (MB) CPE Dictionary 2.0 08/14/2026; 11:50:02 PM -0400 META GZ 78.54 MB ZIP 78.55 MB Vulnerability Vendor Comments NVD provides a service whereby software development organizations can submit "Official Vendor Comments" on the set of CVE vulnerabilities that apply to their products. Organizations can submit comments by contacting NVD staff at [emailprotected] . More information is provided on the vendor comment page. All of the vendors comments can be downloaded from the following XML feed which is updated every 2 hours: Feed Updated Download Size (MB) Vendor Comments 08/17/2026; 12:45:07 AM -0400 META GZ 0.07 MB ZIP 0.07 MB NVD/CVE Translated XML Feed (version 1.0) NVD provides an XML feed for translations of CVE vulnerabilities into other languages. Currently, INCIBE (Spanish National Cybersecurity Institute) is translating vulnerabilities into Spanish. INCIBE is solely responsible for the Spanish translation content. Schema Version 1 : NVD/CVE Translation XML Schema Feed Updated Download Size (MB) CVE-Modified 08/02/2026; 12:40:00 AM -0400 META GZ 0.03 MB ZIP 0.03 MB CVE-2026 08/17/2026; 12:35:04 AM -0400 META GZ 2.32 MB ZIP 2.32 MB CVE-2025 08/17/2026; 12:35:11 AM -0400 META GZ 3.28 MB ZIP 3.28 MB CVE-2024 08/17/2026; 12:35:21 AM -0400 META GZ 4.69 MB ZIP 4.70 MB CVE-2023 08/17/2026; 12:35:28 AM -0400 META GZ 1.85 MB ZIP 1.85 MB CVE-2022 08/17/2026; 12:35:34 AM -0400 META GZ 2.67 MB ZIP 2.67 MB CVE-2021 08/17/2026; 12:35:40 AM -0400 META GZ 2.46 MB ZIP 2.46 MB CVE-2020 08/17/2026; 12:35:46 AM -0400 META GZ 1.89 MB ZIP 1.89 MB CVE-2019 08/17/2026; 12:35:51 AM -0400 META GZ 1.56 MB ZIP 1.56 MB CVE-2018 08/17/2026; 12:35:56 AM -0400 META GZ 1.41 MB ZIP 1.41 MB CVE-2017 08/17/2026; 12:36:01 AM -0400 META GZ 1.29 MB ZIP 1.29 MB CVE-2016 08/17/2026; 12:36:04 AM -0400 META GZ 0.73 MB ZIP 0.73 MB CVE-2015 08/17/2026; 12:36:07 AM -0400 META GZ 0.66 MB ZIP 0.66 MB CVE-2014 08/17/2026; 12:36:10 AM -0400 META GZ 0.71 MB ZIP 0.71 MB CVE-2013 08/17/2026; 12:36:12 AM -0400 META GZ 0.56 MB ZIP 0.56 MB CVE-2012 08/17/2026; 12:36:14 AM -0400 META GZ 0.49 MB ZIP 0.49 MB CVE-2011 08/17/2026; 12:36:16 AM -0400 META GZ 0.42 MB ZIP 0.42 MB CVE-2010 08/17/2026; 12:36:18 AM -0400 META GZ 0.47 MB ZIP 0.47 MB CVE-2009 08/17/2026; 12:36:20 AM -0400 META GZ 0.49 MB ZIP 0.49 MB CVE-2008 08/17/2026; 12:36:22 AM -0400 META GZ 0.66 MB ZIP 0.66 MB CVE-2007 08/17/2026; 12:36:24 AM -0400 META GZ 0.64 MB ZIP 0.64 MB CVE-2006 08/17/2026; 12:36:26 AM -0400 META GZ 0.40 MB ZIP 0.40 MB CVE-2005 08/17/2026; 12:36:27 AM -0400 META GZ 0.04 MB ZIP 0.04 MB CVE-2004 08/17/2026; 12:36:27 AM -0400 META GZ 0.06 MB ZIP 0.06 MB CVE-2003 08/17/2026; 12:36:28 AM -0400 META GZ 0.07 MB ZIP 0.07 MB CVE-2002 08/17/2026; 12:36:29 AM -0400 META GZ 0.07 MB ZIP 0.07 MB Created September 20, 2022 , Updated August 20, 2025 X (link is external) facebook (link is external) linkedin (link is external) youtube (link is external) rss govdelivery (link is external) HEADQUARTERS 100 Bureau Drive Gaithersburg, MD 20899 (301) 975-2000 Webmaster | Contact Us | Our Other Offices Incident Response Assistance and Non-NVD Related Technical Cyber Security Questions: US-CERT Security Operations Center Email: [emailprotected] Phone: 1-888-282-0870 Site Privacy | Accessibility | Privacy Program | Copyrights | Vulnerability Disclosure | No Fear Act Policy | FOIA | Environmental Policy | Scientific Integrity | Information Quality Standards | Commerce.gov | Science.gov | USA.gov