NewsPublished 20 Jun 2026

NIST NVD seems down

Source Reddit Cybersecurity

Discussion

The National Institute of Standards and Technology (NIST) National Vulnerability Database (NVD) REST API endpoint https://services.nvd.nist.gov/rest/json/cves/2.0 is reportedly experiencing outages, returning HTTP 503 errors and timeouts. This issue was observed and discussed in a Reddit cybersecurity forum. There is no indication that this outage is due to a security vulnerability or attack, nor is there evidence of exploitation. The outage affects access to the NVD data service but does not represent a direct security threat or vulnerability in software or systems.

r/cybersecurity (opens in a new tab)u/2bb6-11ed0 points0 comments

Apparently https://services.nvd.nist.gov/rest/json/cves/2.0 is currently throwing 503's and timeouts, anyone facing the same issue?

Links cited in the discussion

https://services.nvd.nist.gov/rest/json/cves/2.0

Impact

The primary impact is the temporary unavailability of the NVD REST API service, which may disrupt automated vulnerability data retrieval and security tooling that depends on this service. There is no evidence of a security breach or exploitation. The outage could delay vulnerability awareness and response but does not itself constitute a vulnerability or threat to systems.

Defensive guidance

No specific mitigation is required as this is a service availability issue with the NVD API. Users should monitor the NVD service status and retry requests later. There is no indication of a security vulnerability or compromise requiring patching or other remediation.

Summary

A Reddit post in the cybersecurity subreddit reported that the NIST NVD REST API endpoint for CVE data is currently unavailable, returning HTTP 503 Service Unavailable errors and timing out. This appears to be a service availability issue rather than a security vulnerability. No technical details suggest exploitation or compromise. The NVD is a critical resource for vulnerability information, so its downtime may impact security operations relying on automated CVE data retrieval.

References

Community reviews

Loading reviews…

Discussion

Links cited in the discussion

AI analysisMachine-generated, updated 20 Jun 2026, 06:57 UTC

Technical details

References

Community reviews