👻 Ghost CVE Tracker

Tracking CVEs mentioned in the wild but missing from official registries

-
Active Ghosts
-
Critical (30+ days)
-
New Today
-
Discovery Sources

Discovery Trends (Last 30 Days)

Ghost CVE Registry

CVE ID Status First Seen Days in Limbo Primary Source
Loading data...

What is a Ghost CVE?

A Ghost CVE (also known as "RESERVED BUT PUBLIC") is a vulnerability identifier that appears in public sources like GitHub commits, security advisories, or RSS feeds, but remains RESERVED or NOT_FOUND in official CVE registries like NVD and MITRE.

These "ghosts" represent potential security blind spots where vulnerabilities are being discussed publicly before official disclosure. This tracker monitors RSS feeds, vendor advisories, and security trackers to identify these gaps.