Common Vulnerabilities and Exposures (CVE™) Program

Network Device Education Foundation is now a CVE Numbering Authority assigning CVE IDs for FRRouting Routing Software issues only cve.org/Media/News/i... #cve #cna #vulnerability #vulnerabilitymanagement #infosec #cybersecurity #opensource

Akrites is now a CVE Numbering Authority assigning CVE IDs for projects directly attached to the Linux Foundation or any of its sub-foundations, unless the project has a Supplier CNA of its own cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity #opensource

Samsung Semiconductor is now a CVE Numbering Authority assigning CVE IDs for Samsung Semiconductor products only including S.LSI Exynos and Memory products cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity

Pentaho is now a CVE Numbering Authority assigning CVE IDs for all products it develops including but not limited to Pentaho Data Integration and Analytics and Pentaho Data Catalog cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity

Posit is now a CVE Numbering Authority assigning CVE IDs for all Posit SaaS, on-premises, and open source products cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity

CNAs — Final days to register for this week’s CNA Workshop! Registration closes at 11:59 PM EDT on October 28th Title: “CNA Fall Technical Workshop: Advancing CVE Record Quality” Date: October 29, 2026 Format: Virtual Agenda/Registration Link: Sent to CNAs via email

Minutes from the CVE Board teleconference meeting on September 16 are now available marc.info?l=cve-editor... #cve #vulnerability #vulnerabilitymanagement #hssedi #cisa #infosec #cybersecurity

IMPORTANT NOTICE — SERVICE RESTORED Maintenance on the CVE Program Web Forms at cveform.mitre.org is now complete and service is restored. We apologize for the inconvenience and appreciate your understanding.

IMPORTANT NOTICE — UPDATED The scheduled maintenance for the CVE Program Web Forms at cveform.mitre.org is taking longer than anticipated and that link remains unavailable Please access the CVE Program Web Forms here instead: mitre.github.io/mitre-cve-ro...

CNAs — Register now for next week’s CNA Workshop! Title: “CNA Fall Technical Workshop: Advancing CVE Record Quality” Date: October 29, 2026 Format: Virtual Agenda: Sent to CNAs via email Registration: Details sent to CNAs via email

New on the #CVE Blog: “Introducing the CVE Program Validation Library” medium.com/@cve_program... #cve #vulnerability #vulnerabilitymanagement #software #infosec #cybersecurity

Nitro is now a CVE Numbering Authority assigning CVE IDs for Nitro software issues only cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity

Linaro is now a CVE Numbering Authority assigning CVE IDs for software projects managed by trustedfirmware.org cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity #opensource

“CNA Operational Rules” updated to version 4.2.6, after community input & review * Updated to to improve the clarity of the rules regarding CVE ID assignment * In effect as of October 20, 2026 Learn more: www.cve.org/Media/News/i...

Reminder for CNAs — Register now for the “CVE Program Fall Technical Workshop: Advancing CVE Record Quality” virtual event for CNAs on October 29, 2026! Registration details sent to CNAs via email. cve.org/Media/News/i...

New on the #CVE Blog: “The CVE Search API: A New Way to Access CVE Records” medium.com/@cve_program... #cve #vulnerability #vulnerabilitymanagement #software #infosec #cybersecurity

RT-Labs AB is now a CVE Numbering Authority assigning CVE IDs for all products of RT-Labs AB, excluding end-of-life-products + 3rd-party products it uses that are not in another CNA’s scope cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity

GnuTLS Project is now a CVE Numbering Authority assigning CVE IDs for GnuTLS & associated software projects, including libtasn1 and p11-kit cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity

Minutes from the CVE Board teleconference meeting on September 2 are now available www.mail-archive.com/cve-editoria... #cve #vulnerability #vulnerabilitymanagement #hssedi #cisa #infosec #cybersecurity

New on the #CVE Blog: “CVE Program Data Registry: Automating Federated Management” medium.com/@cve_program... #cve #vulnerability #vulnerabilitymanagement #software #infosec #cybersecurity

“CNA Enrichment Recognition” - 281 CNAs on the list for October 5, 2026 Published monthly, this list recognizes those CVE Numbering Authorities (#CNAs) actively providing #CVSS and #CWE vulnerability data in their #CVE Records medium.com/@cve_program...

Flock is now a CVE Numbering Authority assigning CVE IDs for Flock branded hardware and software products only. www.cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity

Pointsharp is now a CVE Numbering Authority assigning CVE IDs for all products, software components, & cloud services developed, owned, maintained, & supported by Pointsharp & its subsidiaries cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity

SafeSource Lab is now a CVE Numbering Authority assigning CVE IDs for all SafeSource Lab products only cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity

Infoblox is now a CVE Numbering Authority assigning CVE IDs for all Infoblox products cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity

Westell is now a CVE Numbering Authority assigning CVE IDs for all Westell products, including end-of-life/end-of-service products cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity

New on the #CVE Blog: “The CVE Program’s Quality Era: Modernizing the CVE Program Automation Support System” medium.com/@cve_program... #cve #vulnerability #vulnerabilitymanagement #software #infosec #cybersecurity

We Speak CVE Podcast episode 31 now available! “CVE Numbering Authority (CNA) Scopes” youtu.be/1gKLudojNBs #cve #vulnerability #vulnerabilitymanagement #software #infosec #cybersecurity

Chainguard is now a CVE Numbering Authority assigning CVE IDs for its containers/libraries/VMs, tooling + vulnerabilities introduced by our packaging/patching of Wolfi packages cve.org/Media/News/i... #cve #cna #vulnerability #cybersecurity

📣 Help shape the #VulnCon27 program! The Call for the VulnCon 2027 Program Committee is now live! 🗓️ Interest due: October 6, 2026 Apply here: firstdotorg.wufoo.com/forms/cvefir...

News for CNAs — Call-for-topics now open for the “CVE Program Fall Technical Workshop: Advancing CVE Record Quality” virtual event on October 29, 2026 Please let us know If you have a topic you would like to see included! cve.org/Media/News/i...

RedEye Security is now a CVE Numbering Authority assigning CVE IDs for vulnerabilities in RedEye Security’s own products cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity

Minutes from the CVE Board teleconference meeting on August 19 are now available mail-archive.com/cve-editoria... #cve #vulnerability #vulnerabilitymanagement #hssedi #cisa #infosec #cybersecurity

CNAs — The CVE Program has opened a call-for-topics from CNAs for the virtual “CVE Program Fall Technical Workshop: Advancing CVE Record Quality” event on October 29, 2026 If you have a topic you would like to see included, please let us know www.cve.org/Media/News/i...

“CNA Enrichment Recognition” - 269 CNAs on the list for September 8, 2026 Published monthly, this list recognizes those CVE Numbering Authorities (#CNAs) actively providing #CVSS and #CWE vulnerability data in their #CVE Records medium.com/@cve_program...

Honeywell Aerospace is now a CVE Numbering Authority assigning CVE IDs for all Honeywell Aerospace products cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity

esaqa is now a CVE Numbering Authority assigning CVE IDs for or all products developed and maintained by esaqa cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity

Zenitel is now a CVE Numbering Authority assigning CVE IDs for Zenitel products only cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity

Airoha is now a CVE Numbering Authority assigning CVE IDs for Airoha product issues only cve.org/Media/News/i... #cve #cna #vulnerability #infosec #cybersecurity

Security4Media is now a CVE Numbering Authority assigning CVE IDs for vulnerabilities in specialized software or hardware used in media and broadcasting, discovered by or reported to it, that are not in the scope of another CNA cve.org/Media/News/i... #cve #cna #vulnerability #cybersecurity

Minutes from the CVE Board teleconference meeting on August 5 are now available www.mail-archive.com/cve-editoria... #cve #vulnerability #vulnerabilitymanagement #hssedi #cisa #infosec #cybersecurity

Meeting notes are now available from “CVE in an Era of AI-Enabled Vulnerability Discovery,” a free public virtual conference hosted by the CVE™ Program on July 30, 2026 #cve #vulnerability #ai #artificialintelligence www.cve.org/Media/News/i...

“CNA Operational Rules” updated to version 4.2.0, after community input & review * Updated to improve clarity of the rules & other improvements * In effect as of August 25, 2026 Learn more: cve.org/Media/News/i...

Velneo is now a CVE Numbering Authority assigning CVE IDs for vulnerabilities in all Velneo brand products and technologies cve.org/Media/News/i... #cve #cna #vulnerability #vulnerabilitymanagement #infosec #cybersecurity

Circutor is now a CVE Numbering Authority assigning CVE IDs for all vulnerabilities affecting Circutor and Circontrol cve.org/Media/News/i... #cve #cna #vulnerability #vulnerabilitymanagement #infosec #cybersecurity

Grayback Security is now a CVE Numbering Authority assigning CVE IDs for vulnerabilities identified by Grayback or third parties in the programs listed at app.grayback.es/programs cve.org/Media/News/i... #cve #cna #vulnerability #vulnerabilitymanagement #infosec #cybersecurity