NATO Cyber Security Centre and AISLE Join ENISA’s CVE Numbering Authorities
Summary
NATO’s Cyber Security Centre can assign CVE IDs to eligible flaws across the NATO enterprise, while AISLE’s authority covers flaws in its own products. Their addition brings ENISA’s Root to 20 numbering authorities amid changes to vulnerability tracking.
Key points
- The NATO Cyber Security Centre and AISLE have been authorized as CVE numbering authorities under ENISA’s Root.
- NATO’s authority covers eligible vulnerabilities across the NATO enterprise, supporting more consistent tracking and earlier sharing with trusted partners.
- AISLE’s authorization is limited to vulnerabilities in its own products.
- ENISA’s Root now has 20 authorities: 12 added by ENISA and eight transferred from MITRE’s Root.
- The article describes pressure on vulnerability management from AI-driven flaw discovery and the emergence of alternatives, including the Global CVE Allocation System.
Article Details
- Event Type
- Authorization of the NATO Cyber Security Centre and AISLE as CVE numbering authorities under ENISA’s Root.
- Impact
- The NATO Cyber Security Centre can assign CVE IDs to eligible flaws across the NATO enterprise, supporting more consistent tracking and earlier information sharing with trusted partners. AISLE can assign identifiers for vulnerabilities discovered in its own products. ENISA’s Root now has 20 numbering authorities.