IMPORTANT NOTICE—
The CVE Program web form cveform.mitre.org/ will be unavailable beginning at 7:45 PM EDT today on October 22, 2026, until approximately 8:00 AM EDT tomorrow on October 23, 2026
We appreciate your understanding and apologize for the inconvenience
You may access the web form here instead: mitre.github.io/mitre-cve-ro…
CVE Announcements retweeted
IMPORTANT REMINDER—
CWE 5.0 and Schema 8.0 — with breaking changes — to be released next week, on October 28, 2026
Organizations that use #CWE data should evaluate Schema 8.0 in advance of the release
Learn more:
cwe.mitre.org/news/archives/…
CNAs — Register now for next week’s CNA Workshop!
Title: “CNA Fall Technical Workshop: Advancing CVE Record Quality”
Date: October 29, 2026
Format: Virtual
Agenda: Sent to CNAs via email
Registration: Details sent to CNAs via email
🤖 Made with AI
CVE Announcements retweeted
🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗 go.dhs.gov/5Hi
New on the #CVE Blog:
“Introducing the CVE Program Validation Library”
medium.com/@cve_program/intr…
#cve #vulnerability #vulnerabilitymanagement #software #infosec #cybersecurity @CVEnew
Nitro is now a CVE Numbering Authority assigning CVE IDs for Nitro software issues only
cve.org/Media/News/item/news…
#cve #cna #vulnerability #infosec #cybersecurity @CVEnew
Linaro is now a CVE Numbering Authority assigning CVE IDs for software projects managed by trustedfirmware.org
cve.org/Media/News/item/news…
#cve #cna #vulnerability #infosec #cybersecurity #opensource @CVEnew @LinaroOrg
“CNA Operational Rules” updated to version 4.2.6, after community input & review
* Updated to to improve the clarity of the rules regarding CVE ID assignment
* In effect as of October 20, 2026
Learn more:
cve.org/Media/News/item/blog… @CVEnew
Reminder for CNAs —
Register now for the “CVE Program Fall Technical Workshop: Advancing CVE Record Quality” virtual event for CNAs on October 29, 2026!
Registration details sent to CNAs via email.
cve.org/Media/News/item/blog… @CVEnew
🤖 Made with AI
New on the #CVE Blog:
“The CVE Search API: A New Way to Access CVE Records”
medium.com/@cve_program/the-…
#cve #vulnerability #vulnerabilitymanagement #software #infosec #cybersecurity @CVEnew
RT-Labs AB is now a CVE Numbering Authority assigning CVE IDs for all products of RT-Labs AB, excluding end-of-life-products + 3rd-party products it uses that are not in another CNA’s scope
cve.org/Media/News/item/news…
#cve #cna #vulnerability #infosec #cybersecurity
@CVEnew
GnuTLS Project is now a CVE Numbering Authority assigning CVE IDs for GnuTLS & associated software projects, including libtasn1 and p11-kit
cve.org/Media/News/item/news…
#cve #cna #vulnerability #infosec #cybersecurity
#opensource @CVEnew @GnuTLS
Minutes from the CVE Board teleconference meeting on September 2 are now available
mail-archive.com/cve-editori…
#cve #vulnerability #vulnerabilitymanagement #hssedi #cisa #infosec #cybersecurity @CVEnew
New on the #CVE Blog:
“CVE Program Data Registry: Automating Federated Management”
medium.com/@cve_program/cve-…
#cve #vulnerability #vulnerabilitymanagement #software #infosec #cybersecurity @CVEnew
Flock is now a CVE Numbering Authority assigning CVE IDs for Flock branded hardware and software products only
cve.org/Media/News/item/news…
#cve #cna #vulnerability #infosec #cybersecurity @CVEnew @flocksafety
Pointsharp is now a CVE Numbering Authority assigning CVE IDs for all products, software components, & cloud services developed, owned, maintained, & supported by Pointsharp & its subsidiaries
cve.org/Media/News/item/news…
#cve #cna #vulnerability #cybersecurity @CVEnew















