As of: 6 Aug 2026
Summary
Two further organisations joined as CVE Numbering Authorities under ENISA's structure.
What happened?
The NATO Communications and Information Agency and AISLE joined as CVE Numbering Authorities under ENISA's structure. CVE identifiers provide a shared reference for vulnerabilities and help connect vendor advisories.
Why does it matter?
Uniform CVE identifiers make it easier to match vendor advisories and updates to a specific flaw.
Who is most affected?
IT leads and providers who track vulnerability reports.
What does it mean for businesses?
An identifier alone does not determine your organisation's risk. Check whether your products and versions are affected and what action the vendor recommends.
What can you do now?
- 1Look for the CVE identifier in security advisories
- 2Clarify with your IT provider how vulnerability reports are tracked
Editorial assessment
Our conclusion
For small businesses the main takeaway is that the European vulnerability ecosystem is being strengthened. No direct action is needed – what matters is that someone installs updates promptly.
Source
ENISA · Source date
Status / reviewed on: