Happening today for CNAs!
Title: “CNA Fall Technical Workshop: Advancing CVE Record Quality”
Time: 10:00 a.m. – 4:00 p.m. EDT (UTC-4)
Format: Virtual
Agenda: Sent to CNAs via email
Registration: Link sent to CNAs via email
🤖 Made with AI
Now if effect―“CNA Operational Rules” updated to version 4.2.1, after community input & review
* Updated to to improve the clarity of the rules regarding CVE ID assignment
* In effect as of October 20, 2026
Learn more: cve.org/Media/News/item/blog… @CVEnew
CWEs represent the root causes of #CVE Records
Check out the new #CWE 5.0 and Schema 8.0 release at cwe.mitre.org/data/index.htm… @CVEnew
#CWE 5.0 / Schema 8.0 are now available!
The release includes structural data model updates to better capture technical nuance, dimensions, lifecycle context, & relationships + 3 new views, 16 new weaknesses, website usability improvements, & more
bit.ly/4zTDBsr

ALT The Common Weakness Enumeration (CWE™) Program is pleased to announce the release of CWE 5.0, along with Schema 8.0 for the XML schema and JSON representation. This release introduces important structural updates to the CWE List data model that improve how technical nuance, dimensions, lifecycle context, relationships, and contribution history are represented.
Network Device Education Foundation is now a CVE Numbering Authority assigning CVE IDs for FRRouting Routing Software issues only
cve.org/Media/News/item/news…
#cve #cna #vulnerability #vulnerabilitymanagement #infosec #cybersecurity #opensource @CVEnew
Akrites is now a CVE Numbering Authority assigning CVE IDs for projects directly attached to the @LinuxFoundation or any of its sub-foundations, unless the project has a Supplier CNA of its own
cve.org/Media/News/item/news…
#cve #vulnerability #cybersecurity #opensource @CVEnew
Samsung Semiconductor is now a CVE Numbering Authority assigning CVE IDs for Samsung Semiconductor products only including S.LSI Exynos and Memory products
cve.org/Media/News/item/news…
#cve #cna #vulnerability #infosec #cybersecurity @CVEnew
Pentaho is now a CVE Numbering Authority assigning CVE IDs for all products it develops including but not limited to Pentaho Data Integration and Analytics and Pentaho Data Catalog
cve.org/Media/News/item/news…
#cve #cna #vulnerability #infosec #cybersecurity
@CVEnew @Pentaho
Posit is now a CVE Numbering Authority assigning CVE IDs for all Posit SaaS, on-premises, and open source products
cve.org/Media/News/item/news…
#cve #cna #vulnerability #infosec #cybersecurity @CVEnew
CNAs — Final days to register for this week’s CNA Workshop! Registration closes at 11:59 PM EDT on October 28th
Title: “CNA Fall Technical Workshop: Advancing CVE Record Quality”
Date: October 29, 2026
Format: Virtual
Agenda/Registration Link: Sent to CNAs via email
🤖 Made with AI
Minutes from the CVE Board teleconference meeting on September 16 are now available
marc.info/?l=cve-editorial-b…
#cve #vulnerability #vulnerabilitymanagement #hssedi #cisa #infosec #cybersecurity @CVEnew
IMPORTANT NOTICE — SERVICE RESTORED
Maintenance on the CVE Program Web Forms at cveform.mitre.org is now complete and service is restored.
We apologize for the inconvenience and appreciate your understanding.
#cve @CVEnew
IMPORTANT NOTICE — UPDATED
The scheduled maintenance for the CVE Program Web Forms at cveform.mitre.org is taking longer than anticipated and that link remains unavailable
Please access the CVE Program Web Forms here instead: mitre.github.io/mitre-cve-ro…
#cve @CVEnew
IMPORTANT NOTICE—
The CVE Program web form cveform.mitre.org/ will be unavailable beginning at 7:45 PM EDT today on October 22, 2026, until approximately 8:00 AM EDT tomorrow on October 23, 2026
We appreciate your understanding and apologize for the inconvenience
You may access the web form here instead: mitre.github.io/mitre-cve-ro…
CVE Announcements retweeted
IMPORTANT REMINDER—
CWE 5.0 and Schema 8.0 — with breaking changes — to be released next week, on October 28, 2026
Organizations that use #CWE data should evaluate Schema 8.0 in advance of the release
Learn more:
cwe.mitre.org/news/archives/…
CNAs — Register now for next week’s CNA Workshop!
Title: “CNA Fall Technical Workshop: Advancing CVE Record Quality”
Date: October 29, 2026
Format: Virtual
Agenda: Sent to CNAs via email
Registration: Details sent to CNAs via email
🤖 Made with AI
CVE Announcements retweeted
🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗 go.dhs.gov/5Hi
New on the #CVE Blog:
“Introducing the CVE Program Validation Library”
medium.com/@cve_program/intr…
#cve #vulnerability #vulnerabilitymanagement #software #infosec #cybersecurity @CVEnew
Nitro is now a CVE Numbering Authority assigning CVE IDs for Nitro software issues only
cve.org/Media/News/item/news…
#cve #cna #vulnerability #infosec #cybersecurity @CVEnew
Linaro is now a CVE Numbering Authority assigning CVE IDs for software projects managed by trustedfirmware.org
cve.org/Media/News/item/news…
#cve #cna #vulnerability #infosec #cybersecurity #opensource @CVEnew @LinaroOrg















