Reserved but Public: The CVE IDs That Exist Everywhere Except the CVE List

calendar_today October 7, 2026 person Jerry Gamblin domain empirical-security

Reserved but Public: The CVE IDs That Exist Everywhere Except the CVE List A public advisory, a shipped fix, in some cases an exploit, and no CVE Record. The CVE Program calls these IDs Reserved but Public. On October 5 there were at least 1,983 of them, and every tool that reads the CVE List sees none.

open_in_new Read original post

Discovery

Learnings

Guidance

Toolbox

Alignment

API Evangelist LLC

Reserved but Public: The CVE IDs That Exist Everywhere Except the CVE List