CVE Announcements

Bombadil Systems is now a CVE Numbering Authority (CNA) assigning CVE IDs for vulnerabilities in third-party software discovered by Bombadil Systems that are not in another CNA’s scope cve.org/Media/News/ite… #cve #cna #vulnerability #vulnerabilitymanagement @CVEnew

Minutes from the CVE Board teleconference meeting on February 4 are now available @mitre.org/msg00317.html" target="_blank" rel="nofollow noopener">mail-archive.com/cve-editorial-… #cve #vulnerability #vulnerabilitymanagement #hssedi #cisa #infosec #cybersecurity @CVEnew

FULL AGENDA for “VulnCon 2026” now available on the conference website: first.org/conference/vul… Register today! #cve #first #vulncon26 #vulnerability #cybersecurity #infosec @CVEnew

“CNA Enrichment Recognition” - 259 CNAs on the list for March 2, 2026 Published monthly, this list recognizes those CVE Numbering Authorities (#CNAs) actively providing #CVSS and #CWE vulnerability data in their #CVE Records @cve_program/vulnerability-data-enrichment-for-cve-records-259-cnas-on-the-enrichment-recognition-list-for-4c7e42797059" target="_blank" rel="nofollow noopener">medium.com/@cve_program/v… @CVEnew

New on the CVE Blog: “CVE Program Report for Quarter 4 Calendar Year (Q4 CY) 2025” @cve_program/cve-program-report-for-quarter-4-calendar-year-q4-cy-2025-e0f3031e8d4e" target="_blank" rel="nofollow noopener">medium.com/@cve_program/c… #cve #vulnerability #vulnerabilitymanagement #hssedi #cisa #infosec #cybersecurity @CVEnew

Turan Security is now a CVE Numbering Authority (CNA) assigning CVE IDs for vulnerabilities it discovers through independent research on products & projects not in another CNA’s scope cve.org/Media/News/ite… #cve #cna #vulnerability #vulnerabilitymanagement @CVEnew

Cygence is now a CVE Numbering Authority (CNA) assigning CVE IDs for issues in 3rd-party products identified by, or reported, to Cygence, unless covered by another CNA’s scope cve.org/Media/News/ite… #cve #cna #vulnerability #vulnerabilitymanagement #cybersecurity @CVEnew

Register today for “VulnCon 2026” on April 13–16, 2026! In-Person: * $525.00 (before 3/14/2026) * $600.00 (after 3/14/2026) Virtual: * $100.00 (before 3/14/2026) * $100.00 (after 3/14/2026) first.org/conference/vul… #cve #first #vulncon26 #vulnerability @CVEnew

NOTICE: CVE List Maintenance is concluded for Thursday, February 26, 2026 * Action: quality control review/modification of 1999-2007 CVE Records to address potential inconsistencies identified during the first day Additional information here: cve.org/Media/News/ite… @CVEnew

NOTICE: CVE List Maintenance Thursday, February 26, 2026 9:30 AM – 4:30 PM EST * Quality Control Review/Modification of CVE Records from 1999-2007 There will be no impact on viewing or publishing records during this time Learn more: cve.org/Media/News/ite… @CVEnew

NOTICE: CVE List Maintenance is concluded for Wednesday, February 25, 2026 * Date/time fields of CVE Records published from 2022 (Part 2)–2026 were normalized View the full schedule here: cve.org/Media/News/ite… @CVEnew

Registration—both in-person & virtual—are open for “CVE/FIRST VulnCon 2026” on April 13–16, 2026!!! Register today: first.org/conference/vul… #cve #first #vulncon26 #vulnerabilitymanagement #vulnerability @CVEnew

NOTICE: CVE List Maintenance Wednesday, February 25, 2026 9:30 AM – 4:30 PM EST * Date/time fields of CVE Records published from 2022 (Part 2)–2026 will be normalized No impact on viewing or publishing records during this time Learn more: cve.org/Media/News/ite… @CVEnew

NOTICE: CVE List Maintenance is concluded for Tuesday, February 24, 2026 * Date/time fields of CVE Records published from 2021–2022 (Part 1) were normalized View the full schedule here: cve.org/Media/News/ite… @CVEnew

JupiterOne is now a CVE Numbering Authority (CNA) assigning CVE IDs for all JupiterOne open source and commercial products cve.org/Media/News/ite… #cve #cna #vulnerability #vulnerabilitymanagement #infosec #cybersecurity @CVEnew @jupiterone

NOTICE: CVE List Maintenance Tuesday, February 24, 2026 9:30 AM – 4:30 PM EST * Date/time fields of CVE Records published from 2021–2022 (Part 1) will be normalized No impact on viewing or publishing records during this time Learn more: cve.org/Media/News/ite… @CVEnew

NOTICE: CVE List Maintenance is concluded for Monday, February 23, 2026 * Date/time fields of CVE Records published from 2019 (Part 2)–2020 were normalized View the full schedule here: cve.org/Media/News/ite… @CVEnew

Minutes from the CVE Board teleconference meeting on January 21 are now available @mitre.org/msg00314.html" target="_blank" rel="nofollow noopener">mail-archive.com/cve-editorial-… #cve #vulnerability #vulnerabilitymanagement #hssedi #cisa #infosec #cybersecurity @CVEnew

NOTICE: CVE List Maintenance Monday, February 23, 2026 9:30 AM – 4:30 PM EST * Date/time fields of CVE Records published from 2019 (Part 2)–2020 will be normalized No impact on viewing or publishing records during this time Learn more: cve.org/Media/News/ite… @CVEnew

NOTICE: CVE List Maintenance is concluded for Friday, February 20, 2026 * Date/time fields of CVE Records published from 2018–2019 (Part 1) were normalized View the full schedule here: cve.org/Media/News/ite… @CVEnew