What is the CERTVDE CNA?

CERTVDE is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 546 CVE records since 2020.

How many CVEs has CERTVDE published?

CERTVDE has published 546 CVE records, including 236 in the last two years.

What is CERTVDE's CVE data quality grade?

RadicalNotion.AI grades CERTVDE's CVE data quality as A, with an overall completeness score of 99.7%. This reflects how consistently its CVE records include vendor (99.6%), product (99.6%), CVSS (100%), and CWE (99.6%) information.

What products does CERTVDE publish CVEs for?

CERTVDE most frequently publishes CVEs for mymbCONNECT24, mbCONNECT24, CODESYS Control for emPC-A/iMX6 SL, CHARX SEC-3050, CHARX SEC-3000.

Which vendors does CERTVDE cover?

CERTVDE publishes CVEs across 90 distinct vendors, most often Phoenix Contact, CODESYS, MB connect line, WAGO, Helmholz.

Is CERTVDE actively publishing CVEs?

CERTVDE is currently active, based on 236 CVEs in the last two years.

What is the average severity of CERTVDE's CVEs?

The average CVSS base score across CERTVDE's scored CVEs is 7.5.

How many critical CVEs has CERTVDE published?

CERTVDE has published 129 critical-severity CVEs and 418 high-severity CVEs.

What are the most common weakness types in CERTVDE's CVEs?

CERTVDE's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-306 (Missing Authentication for Critical Function), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).

How does CERTVDE rank among CNAs?

By total CVE volume, CERTVDE ranks #53 of 370 CNAs, and it reports more complete CVE records than 57% of all CNAs.

Grade A

Active

CERTVDE

Name: CERTVDE CNA CVE data quality report card
Creator: RadicalNotion.AI
License: https://creativecommons.org/licenses/by-nc/4.0/

CVE Numbering Authority

Latest CVE published February 9, 2026

546

CVEs published

Total assigned

5.7

Years active

2020–2026

7.5

Avg CVSS

Across scored CVEs

236

Recent CVEs

Last 2 years

Overview

CERTVDE is a CVE Numbering Authority that has published 546 CVE records since 2020. It is currently classified as active, with 236 CVEs published in the last two years. Its CVE data quality is graded A (99.7% overall completeness).

Among the 370 CNAs tracked here, CERTVDE ranks #53 by CVE volume and reports more complete records than 57% of all CNAs.

Data quality report card

Completeness of CERTVDE's CVE records across vendor, product, CVSS, and CWE fields.

A CVE record needs only a description to be published. Completeness is how often CERTVDE also fills in the affected vendor and product, a CVSS severity score, and a CWE weakness type. A higher score means fewer of this CNA’s CVEs need enriching by hand before you can triage them.

Report card grade

99.7%

Overall score

Overall completeness99.7%

Vendor completeness99.6%

Product completeness99.6%

CVSS completeness100%

CWE completeness99.6%

99.3%

Update rate

Records revised after publishing

Vendor diversity

Distinct vendors covered

232 chars

Avg description length

Per CVE record

2020-05-29

First CVE date

Earliest assignment

2026-02-09

Latest CVE date

Most recent assignment

7.5

Average CVSS

Across scored CVEs

What these scores mean

Vendor completeness: The share of this CNA's CVEs that name an affected vendor.
Product completeness: The share that name a specific affected product.
CVSS completeness: The share that include a CVSS severity score.
CWE completeness: The share mapped to a CWE weakness type.
Update rate: How often this CNA revises CVE records after first publishing them.
Vendor diversity: How many distinct vendors this CNA publishes CVEs for.

Severity and exploitation

How the CVSS severity of CERTVDE's published CVEs breaks down, and how many are known to be exploited in the wild.

Critical129

High418

Medium181

Low5

In CISA’s Known Exploited Vulnerabilities catalog

None of CERTVDE's CVEs are currently listed in CISA's Known Exploited Vulnerabilities catalog.

Common weakness types

The CWE weakness categories CERTVDE most often assigns to its CVEs. Follow any weakness to its full explanation.

Publishing activity by year

How many CVEs CERTVDE has published each year.

2020

2021

2022

2023

104

2024

2025

136

2026

203

Top vendors

The vendors CERTVDE publishes the most CVEs for.

Phoenix Contact187 CVEs
CODESYS104 CVEs
MB connect line84 CVEs
WAGO75 CVEs
Helmholz71 CVEs
Pepperl+Fuchs49 CVEs
Weidmueller33 CVEs
Carlo Gavazzi32 CVEs

Latest CVEs

The most recent CVEs assigned by CERTVDE.

CVE-2026-107564CWE-770
gocsaf/csaf: csaf_provider prone to uncontrolled resource consumption
High · CVSS 8.7
2026-10-16
CVE-2026-94410CWE-862
Exposure of Role List to Low-Privileged Remote Users in Bender Custom&Partner Service
Medium · CVSS 5.3
EPSS 0.2%2026-10-13
CVE-2026-94293CWE-306
Missing authentication for critical function in the aas-edge-client REST API
Critical · CVSS 9.3
EPSS 0.3%2026-10-06
CVE-2025-41753CWE-22
Path traversal in dynamically created BACnet File Objects
Critical · CVSS 9.3
EPSS 0.6%2026-10-01
CVE-2026-76992CWE-770
Uncontrolled Memory Allocation in CODESYS Gateway Client
High · CVSS 8.7
EPSS 0.3%2026-09-30
CVE-2026-79625CWE-362
Improper Synchronization in Monitoring in CODESYS Control Runtime
High · CVSS 7.2
EPSS 0.2%2026-09-30
CVE-2026-27565CWE-78
Remote code execution via uploading a malicious IODD file
Critical · CVSS 9.8
EPSS 1.0%2026-09-16
CVE-2026-27564CWE-78
Command Injection via PUT in /api/datastorage/data
High · CVSS 7.2
EPSS 2.7%2026-09-16
CVE-2026-27563CWE-78
Command Injection via GET in /api/datastorage/data
High · CVSS 7.2
EPSS 2.7%2026-09-16
CVE-2026-27562CWE-78
Command Injection via PUT in /api/iodd/config
High · CVSS 7.2
EPSS 2.7%2026-09-16
CVE-2026-27561CWE-78
Command Injection via GET in /api/iodd/config
High · CVSS 7.2
EPSS 2.7%2026-09-16
CVE-2026-27560CWE-78
Command Injection via DELETE in /api/status/data
High · CVSS 7.2
EPSS 2.7%2026-09-16

Get an alert for each new CERTVDE CVE, with AI-written analysis and remediation steps.

Monitor CERTVDE CVEs

Other CNAs

Data quality for other CVE Numbering Authorities.

mitreGrade F · 112,208 CVEs PatchstackGrade A · 14,729 CVEs VulDBGrade A · 12,140 CVEs microsoftGrade F · 11,701 CVEs redhatGrade F · 10,745 CVEs GitHub_MGrade A · 10,605 CVEs LinuxGrade F · 10,294 CVEs WordfenceGrade A · 8,652 CVEs

Browse all CNAs

Frequently asked questions

Common questions about the CERTVDE CNA.

What is the CERTVDE CNA?: CERTVDE is a CVE Numbering Authority (CNA) — an organization authorized to assign CVE IDs to vulnerabilities in its scope. It has published 546 CVE records since 2020.
How many CVEs has CERTVDE published?: CERTVDE has published 546 CVE records, including 236 in the last two years.
What is CERTVDE's CVE data quality grade?: RadicalNotion.AI grades CERTVDE's CVE data quality as A, with an overall completeness score of 99.7%. This reflects how consistently its CVE records include vendor (99.6%), product (99.6%), CVSS (100%), and CWE (99.6%) information.
What products does CERTVDE publish CVEs for?: CERTVDE most frequently publishes CVEs for mymbCONNECT24, mbCONNECT24, CODESYS Control for emPC-A/iMX6 SL, CHARX SEC-3050, CHARX SEC-3000.
Which vendors does CERTVDE cover?: CERTVDE publishes CVEs across 90 distinct vendors, most often Phoenix Contact, CODESYS, MB connect line, WAGO, Helmholz.
Is CERTVDE actively publishing CVEs?: CERTVDE is currently active, based on 236 CVEs in the last two years.
What is the average severity of CERTVDE's CVEs?: The average CVSS base score across CERTVDE's scored CVEs is 7.5.
How many critical CVEs has CERTVDE published?: CERTVDE has published 129 critical-severity CVEs and 418 high-severity CVEs.
Are any of CERTVDE's CVEs in CISA's Known Exploited Vulnerabilities catalog?: No. None of CERTVDE's CVEs are currently listed in CISA's Known Exploited Vulnerabilities (KEV) catalog.
What are the most common weakness types in CERTVDE's CVEs?: CERTVDE's CVEs most often map to these CWE weakness types: CWE-78 (Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')), CWE-89 (Improper Neutralization of Special Elements used in an SQL Command ('SQL Injection')), CWE-306 (Missing Authentication for Critical Function), CWE-79 (Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')).
How does CERTVDE rank among CNAs?: By total CVE volume, CERTVDE ranks #53 of 370 CNAs, and it reports more complete CVE records than 57% of all CNAs.

References

CNA report-card grades are computed by RadicalNotion.AI from published CVE records. CVE data is sourced from the CVE Program.

Track CERTVDE CVEs

Get an alert when this CNA publishes a new CVE, with AI-written analysis and remediation steps.

Create an account See pricing