CyberHappenings logo
☰
Home Browse Watchlists Experimental About

Track cybersecurity events as they unfold. Sourced timelines. Filter, sort, and browse. Fast, privacy‑respecting. No invasive ads, no tracking.

ENISA advancement to top-level CVE Numbering Authority status under review

First reported
Last updated
1 unique sources, 1 articles

Summary

Hide ▲

The European Union Agency for Cybersecurity (ENISA) is undergoing onboarding to achieve top-level root Common Vulnerabilities and Exposures (CVE) Numbering Authority (TL-Root CNA) status, as announced by Nuno Rodrigues Carvalho, Head of Sector for Incidents and Vulnerability Services at ENISA, during VulnCon26 in Scottsdale, Arizona on April 14, 2026. If granted, ENISA will join CISA and MITRE as the third TL-Root CNA, enabling it to manage the CVE Program alongside them, including global policy setting, consistency enforcement across Root CNAs and CNAs, and representation in the program’s Board. ENISA aims to achieve this status by 2026 or early 2027.

Timeline

  1. 15.04.2026 18:31 1 articles · 3h ago

    ENISA’s onboarding to TL-Root CNA status under CISA review

    ENISA is undergoing onboarding by CISA to achieve TL-Root CNA status, which would make it the third entity globally—alongside CISA and MITRE—to manage the CVE Program. The process aims for completion in 2026 or early 2027 and would grant ENISA authority to set global policies, ensure consistency across Root CNAs, and represent European interests in the CVE Program’s Board.

    Show sources
    Open in new tab

Information Snippets