Skip to content

Commit 1befdf8

Browse files
rrobergerlxdev
andauthored
2/17/26 release branch (#3850)
* #3846 Add 1 new CNA + Update 2 CNA's info * #3848 Update CVE Services status to v2.6.1 * #3849 Update CVE Record timestamp maintenance blog * #3846 Add 1 additional new CNA * news: change news id (630) --------- Co-authored-by: Roy Lane <rlane@mitre.org>
1 parent 051a86b commit 1befdf8

4 files changed

Lines changed: 198 additions & 18 deletions

File tree

src/assets/data/CNAsList.json

Lines changed: 123 additions & 10 deletions
Original file line numberDiff line numberDiff line change
@@ -7319,7 +7319,7 @@
73197319
"shortName": "schneider",
73207320
"cnaID": "CNA-2017-0009",
73217321
"organizationName": "Schneider Electric",
7322-
"scope": "All Schneider Electric products, including Proface, APC, and Eurotherm.",
7322+
"scope": "All Schneider Electric products, including Proface, APC, and ProLeiT.",
73237323
"contact": [
73247324
{
73257325
"email": [
@@ -11527,21 +11527,21 @@
1152711527
"CNA": {
1152811528
"isRoot": false,
1152911529
"root": {
11530-
"shortName": "n/a",
11531-
"organizationName": "n/a"
11530+
"shortName": "ENISA",
11531+
"organizationName": "EU Agency for Cybersecurity (ENISA)"
1153211532
},
11533-
"roles": [
11534-
{
11535-
"helpText": "",
11536-
"role": "CNA"
11537-
}
11533+
"type": [
11534+
"Researcher"
1153811535
],
1153911536
"TLR": {
1154011537
"shortName": "mitre",
1154111538
"organizationName": "MITRE Corporation"
1154211539
},
11543-
"type": [
11544-
"Researcher"
11540+
"roles": [
11541+
{
11542+
"helpText": "",
11543+
"role": "CNA"
11544+
}
1154511545
]
1154611546
},
1154711547
"country": "Netherlands"
@@ -28301,5 +28301,118 @@
2830128301
]
2830228302
},
2830328303
"country": "Australia"
28304+
},
28305+
{
28306+
"shortName": "DTEX",
28307+
"cnaID": "CNA-2026-0009",
28308+
"organizationName": "DTEX Systems, Inc.",
28309+
"scope": "All DTEX products, including DTEX Forwarder for Mac, DTEX Forwarder for Linux, DTEX Forwarder for Windows, and DTEX platform including DTEX Analytics Server.",
28310+
"contact": [
28311+
{
28312+
"email": [
28313+
{
28314+
"label": "Email",
28315+
"emailAddr": "vulnerability-disclosure@dtexsystems.com"
28316+
}
28317+
],
28318+
"contact": [],
28319+
"form": []
28320+
}
28321+
],
28322+
"disclosurePolicy": [
28323+
{
28324+
"label": "Policy",
28325+
"language": "",
28326+
"url": "https://advisories.dtexsystems.com/vulnerability-disclosure-policy.pdf"
28327+
}
28328+
],
28329+
"securityAdvisories": {
28330+
"alerts": [],
28331+
"advisories": [
28332+
{
28333+
"label": "Advisories",
28334+
"url": "https://advisories.dtexsystems.com"
28335+
}
28336+
]
28337+
},
28338+
"resources": [],
28339+
"CNA": {
28340+
"isRoot": false,
28341+
"root": {
28342+
"shortName": "n/a",
28343+
"organizationName": "n/a"
28344+
},
28345+
"roles": [
28346+
{
28347+
"helpText": "",
28348+
"role": "CNA"
28349+
}
28350+
],
28351+
"TLR": {
28352+
"shortName": "mitre",
28353+
"organizationName": "MITRE Corporation"
28354+
},
28355+
"type": [
28356+
"Vendor",
28357+
"Hosted Service"
28358+
]
28359+
},
28360+
"country": "USA"
28361+
},
28362+
{
28363+
"shortName": "Vestel",
28364+
"cnaID": "CNA-2026-0010",
28365+
"organizationName": "Vestel Electronics Industry & Trade Co.",
28366+
"scope": "Vestel-owned brands and products only.",
28367+
"contact": [
28368+
{
28369+
"email": [
28370+
{
28371+
"label": "Email",
28372+
"emailAddr": "psirt@vestel.com.tr"
28373+
}
28374+
],
28375+
"contact": [],
28376+
"form": []
28377+
}
28378+
],
28379+
"disclosurePolicy": [
28380+
{
28381+
"label": "Policy",
28382+
"language": "",
28383+
"url": "https://vestelinternational.com/en/vulnerability-disclose-policy"
28384+
}
28385+
],
28386+
"securityAdvisories": {
28387+
"alerts": [],
28388+
"advisories": [
28389+
{
28390+
"label": "Advisories",
28391+
"url": "https://vestelinternational.com/security-advisories"
28392+
}
28393+
]
28394+
},
28395+
"resources": [],
28396+
"CNA": {
28397+
"isRoot": false,
28398+
"root": {
28399+
"shortName": "n/a",
28400+
"organizationName": "n/a"
28401+
},
28402+
"roles": [
28403+
{
28404+
"helpText": "",
28405+
"role": "CNA"
28406+
}
28407+
],
28408+
"TLR": {
28409+
"shortName": "mitre",
28410+
"organizationName": "MITRE Corporation"
28411+
},
28412+
"type": [
28413+
"Vendor"
28414+
]
28415+
},
28416+
"country": "Türkiye"
2830428417
}
2830528418
]

src/assets/data/metrics.json

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1176,7 +1176,7 @@
11761176
},
11771177
{
11781178
"month": "February",
1179-
"value": "2"
1179+
"value": "4"
11801180
},
11811181
{
11821182
"month": "March",

src/assets/data/news.json

Lines changed: 72 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -1,10 +1,73 @@
11
{
22
"currentNews": [
3+
{
4+
"id": 631,
5+
"newsType": "news",
6+
"title": "Vestel Added as CVE Numbering Authority (CNA)",
7+
"urlKeywords": "Vestel Added as CNA",
8+
"date": "2026-02-17",
9+
"description": [
10+
{
11+
"contentnewsType": "paragraph",
12+
"content": "<a href='/PartnerInformation/ListofPartners/partner/Vestel'>Vestel Electronics Industry & Trade Co.</a> is now a <a href='/ResourcesSupport/Glossary?activeTerm=glossaryCNA'>CVE Numbering Authority (CNA)</a> for Vestel-owned brands and products only."
13+
},
14+
{
15+
"contentnewsType": "paragraph",
16+
"content": "To date, <a href='/PartnerInformation/ListofPartners'>494 CNAs</a> (491 CNAs and 3 CNA-LRs) from <a href='/ProgramOrganization/CNAs'>41 countries</a> and 1 no country affiliation have partnered with the CVE Program. CNAs are organizations from around the world that are authorized to assign <a href='/ResourcesSupport/Glossary?activeTerm=glossaryCVEID'>CVE Identifiers (CVE IDs)</a> and publish <a href='/ResourcesSupport/Glossary?activeTerm=glossaryRecord'>CVE Records</a> for vulnerabilities affecting products within their distinct, agreed-upon scope, for inclusion in first-time public announcements of new vulnerabilities. Vestel is the 4th CNA from Türkiye."
17+
},
18+
{
19+
"contentnewsType": "paragraph",
20+
"content": "Vestel’s Root is the <a href='/PartnerInformation/ListofPartners/partner/mitre'>MITRE TL-Root</a>."
21+
}
22+
]
23+
},
24+
{
25+
"id": 630,
26+
"newsType": "news",
27+
"title": "DTEX Added as CVE Numbering Authority (CNA)",
28+
"urlKeywords": "DTEX Added as CNA",
29+
"date": "2026-02-17",
30+
"description": [
31+
{
32+
"contentnewsType": "paragraph",
33+
"content": "<a href='/PartnerInformation/ListofPartners/partner/DTEX'>DTEX Systems, Inc.</a> is now a <a href='/ResourcesSupport/Glossary?activeTerm=glossaryCNA'>CVE Numbering Authority (CNA)</a> for all DTEX products, including DTEX Forwarder for Mac, DTEX Forwarder for Linux, DTEX Forwarder for Windows, and DTEX platform including DTEX Analytics Server."
34+
},
35+
{
36+
"contentnewsType": "paragraph",
37+
"content": "To date, <a href='/PartnerInformation/ListofPartners'>493 CNAs</a> (490 CNAs and 3 CNA-LRs) from <a href='/ProgramOrganization/CNAs'>41 countries</a> and 1 no country affiliation have partnered with the CVE Program. CNAs are organizations from around the world that are authorized to assign <a href='/ResourcesSupport/Glossary?activeTerm=glossaryCVEID'>CVE Identifiers (CVE IDs)</a> and publish <a href='/ResourcesSupport/Glossary?activeTerm=glossaryRecord'>CVE Records</a> for vulnerabilities affecting products within their distinct, agreed-upon scope, for inclusion in first-time public announcements of new vulnerabilities. DTEX is the 265th CNA from USA."
38+
},
39+
{
40+
"contentnewsType": "paragraph",
41+
"content": "DTEX’s Root is the <a href='/PartnerInformation/ListofPartners/partner/mitre'>MITRE TL-Root</a>."
42+
}
43+
]
44+
},
45+
{
46+
"id": 629,
47+
"newsType": "news",
48+
"title": "MegaZone Reelected as CNA Liaison Board Member",
49+
"urlKeywords": "MegaZone Reelected CNA Liaison Board Member",
50+
"date": "2026-02-17",
51+
"description": [
52+
{
53+
"contentnewsType": "paragraph",
54+
"content": "The <a href='/'>CVE Program</a> is pleased to announce that MegaZone of <a href='https://www.f5.com' target='_blank'>F5, Inc.</a>, received the majority of votes from CNAs and was reelected as the <a href='/ProgramOrganization/CNAs'>CVE Numbering Authority (CNA)</a> Liaison to the <a href='/ProgramOrganization/Board'>CVE Board</a> for another one-year term."
55+
},
56+
{
57+
"contentnewsType": "paragraph",
58+
"content": "Per the <a href='/Resources/Roles/Board/General/Board-Charter.pdf' target='_blank'>CVE Board Charter</a>, “Section 1.3.2 CNA Liaison &ndash; A single seat on the Board is reserved for a CNA Liaison who represents the CNA community, and ensures CNAs are updated with various status and activity-related information. The liaison is a voting member of the Board, with a one-year term, and can serve more than one consecutive term if the CNA community desires. This position is a two-way conduit for CNAs to bring things to and from the Board in a more official and structured way.”"
59+
},
60+
{
61+
"contentnewsType": "paragraph",
62+
"content": "The CVE Board is the organization responsible for the strategic direction, governance, operational structure, policies, and rules of the CVE Program. The Board includes members from numerous cybersecurity-related organizations including commercial security tool vendors, academia, research institutions, government departments and agencies, and other prominent security experts, as well as end-users of vulnerability information."
63+
}
64+
]
65+
},
366
{
467
"id": 628,
568
"displayOnHomepageOrder": 1,
669
"newsType": "blog",
7-
"title": "NOTICE: Date/Time Normalization Maintenance of Historical CVE Records to Occur February 16&ndash;25, 2026",
70+
"title": "NOTICE: Date/Time Normalization Maintenance of Historical CVE Records to Occur February 16&ndash;26 (UPDATED: February 17, 2026)",
871
"urlKeywords": "Historic CVE Record Date Time Maintenance February",
972
"date": "2026-02-10",
1073
"author": {
@@ -19,19 +82,23 @@
1982
"description": [
2083
{
2184
"contentnewsType": "paragraph",
22-
"content": "The <a href='/'>CVE&trade; Program</a> will normalize the formatting of date/time fields across historical <a href='/ResourcesSupport/Glossary?activeTerm=glossaryRecord'>CVE Records</a> from February 16, 2026, through February 25, 2026. As <a href='/Media/News/item/blog/2026/01/06/Historic-CVE-Record-Date-Time-Fields-Normalized'>initially announced on January 6, 2026</a>, this maintenance will update older CVE Records so their date/time values use the same standardized ISO 8601 UTC format already in place for records published or updated since February 2025: <ul style=list-style-type:none;><li><strong>yyyy-MM-ddTHH:mm:ss.sssZ (ISO-8601, UTC)</strong></li></ul>For example: <strong>2025-07-11T19:32:03.983Z</strong>"
85+
"content": "The <a href='/'>CVE&trade; Program</a> will normalize the formatting of date/time fields across historical <a href='/ResourcesSupport/Glossary?activeTerm=glossaryRecord'>CVE Records</a> from February 16, 2026, through February 26, 2026. As <a href='/Media/News/item/blog/2026/01/06/Historic-CVE-Record-Date-Time-Fields-Normalized'>initially announced on January 6, 2026</a>, this maintenance will update older CVE Records so their date/time values use the same standardized ISO 8601 UTC format already in place for records published or updated since February 2025: <ul style=list-style-type:none;><li><strong>yyyy-MM-ddTHH:mm:ss.sssZ (ISO-8601, UTC)</strong></li></ul>For example: <strong>2025-07-11T19:32:03.983Z</strong><br/<br/><br/><i>NOTE: This article was revised on February 17, 2026, to add an additional day of processing to this CVE List maintenance schedule to address potential inconsistencies identified during the first day, February 16, 2026.</i>"
2386
},
2487
{
2588
"contentnewsType": "paragraph",
2689
"content": "<h3>Maintenance Window and Dates</h3>"
2790
},
2891
{
2992
"contentnewsType": "paragraph",
30-
"content": "The normalization activity will run in defined daily windows and will proceed in stages based on the publication year of the CVE Records in the following dates and year ranges:"
93+
"content": "The normalization activity will run in defined daily windows and will proceed in stages based on the publication year of the CVE Records in the following dates and year ranges."
94+
},
95+
{
96+
"contentnewsType": "paragraph",
97+
"content": "<ul><li>Monday, February 16 &ndash; CVE Records published from 1999–2007</li><li>Tuesday, February 17 &ndash; CVE Records published from 2008–2012</li><li>Wednesday, February 18 &ndash; CVE Records published from 2013–2015</li><li>Thursday, February 19 &ndash; CVE Records published from 2016–2017</li><li>Friday, February 20 &ndash; CVE Records published from 2018–2019 (Part 1)</li><li>Monday, February 23 &ndash; CVE Records published from 2019 (Part 2)–2020</li><li>Tuesday, February 24 &ndash; CVE Records published from 2021–2022 (Part 1)</li><li>Wednesday, February 25 &ndash; CVE Records published from 2022 (Part 2)–2026</li><li>Thursday, February 26 &ndash; Quality Control Review/Modification 1999-2007<sup>*</sup></li></ul>"
3198
},
3299
{
33100
"contentnewsType": "paragraph",
34-
"content": "<ul><li>Monday, February 16 &ndash; CVE Records published from 1999–2007</li><li>Tuesday, February 17 &ndash; CVE Records published from 2008–2012</li><li>Wednesday, February 18 &ndash; CVE Records published from 2013–2015</li><li>Thursday, February 19 &ndash; CVE Records published from 2016–2017</li><li>Friday, February 20 &ndash; CVE Records published from 2018–2019 (Part 1)</li><li>Monday, February 23 &ndash; CVE Records published from 2019 (Part 2)–2020</li><li>Tuesday, February 24 &ndash; CVE Records published from 2021–2022 (Part 1)</li><li>Wednesday, February 25 &ndash; CVE Records published from 2022 (Part 2)–2026</li></ul>"
101+
"content": "<i>* An additional day of processing has been added to address potential inconsistencies identified during the first day (i.e., February 16, 2026) of the maintenance activity.</i>"
35102
},
36103
{
37104
"contentnewsType": "paragraph",
@@ -59,7 +126,7 @@
59126
},
60127
{
61128
"contentnewsType": "paragraph",
62-
"content": "To help the community track progress and plan accordingly, the CVE Program will post on social media at the start and end of each maintenance window every day from February 16 through 20, and February 23 through 25."
129+
"content": "To help the community track progress and plan accordingly, the CVE Program will post on social media at the start and end of each maintenance window every day from February 16 through 20, and February 23 through 26."
63130
},
64131
{
65132
"contentnewsType": "paragraph",

src/views/ResourcesSupport/AllResources/CveServices.vue

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -51,8 +51,8 @@
5151
(view <a href="https://github.com/CVEProject/cve-schema/releases/tag/v5.2.0" target="_blank">release notes</a>)
5252
</li>
5353
<li>
54-
<a href="https://github.com/CVEProject/cve-services/releases/tag/v2.6.0" target="_blank">CVE Services 2.6.0</a>
55-
(view <a href="https://github.com/CVEProject/cve-services/releases/tag/v2.6.0" target="_blank">release notes</a>)
54+
<a href="https://github.com/CVEProject/cve-services/releases/tag/v2.6.1" target="_blank">CVE Services 2.6.1</a>
55+
(view <a href="https://github.com/CVEProject/cve-services/releases/tag/v2.6.1" target="_blank">release notes</a>)
5656
</li>
5757
</ul>
5858
<h4 class="title">Known Issues</h4>

0 commit comments

Comments
 (0)