Policy and law

ENISA becomes a CVE Root for EU vulnerability numbering

ENISA became a CVE Root, letting it onboard and govern EU vulnerability numbering authorities directly rather than solely via the US run MITRE program. Executive director Lepassaar called it a step up for EU vulnerability management.

2025.11.20 Policy and law All Policy and law news →

Verified Editor-read ENISA press release, 20 November 2025

What it does not test. Does not by itself remove the CVE Program's own US based governing board.

How this item counts. This item is dated before the index starts on 1 January 2026, so it does not count in the European Sovereignty Index.

How this item was made. Drafted by an AI system (Claude (Anthropic)) from the source cited above; read and approved by the editor on 2026-10-11. How the record is made

What the tags mean: VerifiedReportedAI-draftedAI-drafted, editor-readHuman-writtenWhat the tags mean

Previously in Policy and law

2026.10.22VerifiedOpinionAI-drafted DIGITALEUROPE's Bonefeld-Dahl: sovereignty rules need high fences only for sensitive fields 2026.10.22ReportedOpinionAbroadAI-drafted FFO says Ofcom cannot enforce Online Safety Act fines on US websites 2026.10.21VerifiedAI-drafted EU-backed OSOR report finds national open source policy now a sovereignty tool

All Policy and law news →