{"meta":{"title":"Age of CVE IDs when added","description":"Year added minus the year in the CVE ID. The ID year is when the ID was assigned or reserved, not necessarily disclosure.","source":"CISA Known Exploited Vulnerabilities catalog (https://www.cisa.gov/sites/default/files/feeds/known_exploited_vulnerabilities.json)","catalogVersion":"2026.09.23","catalogDateReleased":"2026-09-23T12:51:35.821Z","referenceDate":"2026-09-23","publisher":"Telemetry","license":"https://creativecommons.org/licenses/by/4.0/","documentation":"https://glide-telemetry.pages.dev/api/","records":6},"data":[{"year":2021,"entries":311,"fiveYearsOrOlder":17,"percent":5.5,"medianAgeYears":1},{"year":2022,"entries":555,"fiveYearsOrOlder":261,"percent":47.0,"medianAgeYears":4},{"year":2023,"entries":187,"fiveYearsOrOlder":18,"percent":9.6,"medianAgeYears":0},{"year":2024,"entries":186,"fiveYearsOrOlder":18,"percent":9.7,"medianAgeYears":0.0},{"year":2025,"entries":245,"fiveYearsOrOlder":30,"percent":12.2,"medianAgeYears":0},{"year":2026,"entries":237,"fiveYearsOrOlder":25,"percent":10.5,"medianAgeYears":0}]}