IMPORTANT NOTICE — SERVICE RESTORED

Maintenance on the CVE Program Web Forms at cveform.mitre.org is now complete and service is restored.

We apologize for the inconvenience and appreciate your understanding.

#cve @CVEnew

IMPORTANT NOTICE — UPDATED

The scheduled maintenance for the CVE Program Web Forms at cveform.mitre.org is taking longer than anticipated and that link remains unavailable

Please access the CVE Program Web Forms here instead: mitre.github.io/mitre-cve-role…

#cve @CVEnew

IMPORTANT NOTICE—

The CVE Program web form cveform.mitre.org will be unavailable beginning at 7:45 PM EDT today on October 22, 2026, until approximately 8:00 AM EDT tomorrow on October 23, 2026

We appreciate your understanding and apologize for the inconvenience

You may access the web form here instead: mitre.github.io/mitre-cve-role…

IMPORTANT REMINDER—

CWE 5.0 and Schema 8.0 — with breaking changes — to be released next week, on October 28, 2026

Organizations that use #CWE data should evaluate Schema 8.0 in advance of the release

Learn more:
cwe.mitre.org/news/archives/…

CNAs — Register now for next week’s CNA Workshop!

Title: “CNA Fall Technical Workshop: Advancing CVE Record Quality”
Date: October 29, 2026
Format: Virtual
Agenda: Sent to CNAs via email
Registration: Details sent to CNAs via email

🚨 Organizations should immediately patch critical PHP vulnerabilities CVE-2026-109618 and CVE-2026-109619. These vulnerabilities enable unauthenticated #RCE and affect PHP installations serving web requests. Learn more: 🔗 go.dhs.gov/5Hi

New on the #CVE Blog:
“Introducing the CVE Program Validation Library”

medium.com/@cve_program/i…

#cve #vulnerability #vulnerabilitymanagement #software #infosec #cybersecurity @CVEnew

Nitro is now a CVE Numbering Authority assigning CVE IDs for Nitro software issues only

cve.org/Media/News/ite…

#cve #cna #vulnerability #infosec #cybersecurity @CVEnew

Linaro is now a CVE Numbering Authority assigning CVE IDs for software projects managed by trustedfirmware.org

cve.org/Media/News/ite…

#cve #cna #vulnerability #infosec #cybersecurity #opensource @CVEnew @LinaroOrg

“CNA Operational Rules” updated to version 4.2.6, after community input & review

* Updated to to improve the clarity of the rules regarding CVE ID assignment
* In effect as of October 20, 2026

Learn more:
cve.org/Media/News/ite… @CVEnew

Reminder for CNAs —

Register now for the “CVE Program Fall Technical Workshop: Advancing CVE Record Quality” virtual event for CNAs on October 29, 2026!

Registration details sent to CNAs via email.

cve.org/Media/News/ite… @CVEnew

New on the #CVE Blog:
“The CVE Search API: A New Way to Access CVE Records”

medium.com/@cve_program/t…

#cve #vulnerability #vulnerabilitymanagement #software #infosec #cybersecurity @CVEnew

RT-Labs AB is now a CVE Numbering Authority assigning CVE IDs for all products of RT-Labs AB, excluding end-of-life-products + 3rd-party products it uses that are not in another CNA’s scope

cve.org/Media/News/ite…

#cve #cna #vulnerability #infosec #cybersecurity
@CVEnew

GnuTLS Project is now a CVE Numbering Authority assigning CVE IDs for GnuTLS & associated software projects, including libtasn1 and p11-kit

cve.org/Media/News/ite…

#cve #cna #vulnerability #infosec #cybersecurity
#opensource @CVEnew @GnuTLS

Minutes from the CVE Board teleconference meeting on September 2 are now available

mail-archive.com/cve-editorial-…

#cve #vulnerability #vulnerabilitymanagement #hssedi #cisa #infosec #cybersecurity @CVEnew

New on the #CVE Blog:
“CVE Program Data Registry: Automating Federated Management”

medium.com/@cve_program/c…

#cve #vulnerability #vulnerabilitymanagement #software #infosec #cybersecurity @CVEnew

Flock is now a CVE Numbering Authority assigning CVE IDs for Flock branded hardware and software products only

cve.org/Media/News/ite…

#cve #cna #vulnerability #infosec #cybersecurity @CVEnew @flocksafety

“CNA Enrichment Recognition” - 281 CNAs on the list for October 5, 2026

Published monthly, this list recognizes those CVE Numbering Authorities (#CNAs) actively providing #CVSS and #CWE vulnerability data in their #CVE Records

medium.com/@cve_program/v… @CVEnew

NOTICE —CVE Services for CNAs will be unavailable today, September 30, 2026, between 2:00 PM and 4:00 PM EDT

Viewing & searching #CVE Records on the CVE website will also be unavailable

We apologize for the inconvenience & thank you for your understanding @CVEnew

Completed as scheduled. Thank you for your understanding.