From 3947dbc9bb5ff459cd6429c3929aff07871b989e Mon Sep 17 00:00:00 2001 From: Robert Roberge Date: Mon, 14 Sep 2026 22:33:31 +0000 Subject: [PATCH 1/3] #4067 Baord Minutes Summary for 8/19/24 --- src/assets/data/boardMeetings.json | 4 ++++ src/assets/data/news.json | 28 ++++++++++++++++++++++++++-- 2 files changed, 30 insertions(+), 2 deletions(-) diff --git a/src/assets/data/boardMeetings.json b/src/assets/data/boardMeetings.json index c69a2718..b3309663 100644 --- a/src/assets/data/boardMeetings.json +++ b/src/assets/data/boardMeetings.json @@ -1,5 +1,9 @@ { "2026": [ + { + "name": "Augst 19, 2026 - teleconference", + "path": "msg00352.html" + }, { "name": "Augst 5, 2026 - teleconference", "path": "msg00349.html" diff --git a/src/assets/data/news.json b/src/assets/data/news.json index 32f11045..343c4f46 100644 --- a/src/assets/data/news.json +++ b/src/assets/data/news.json @@ -1,5 +1,21 @@ { "currentNews": [ + { + "newsType": "news", + "title": "Minutes from CVE Board Teleconference Meeting on August 19 Now Available", + "urlKeywords": "CVE Board Minutes from August 19", + "date": "2026-09-15", + "description": [ + { + "contentnewsType": "paragraph", + "content": "The CVE Board held a teleconference meeting on August 19, 2026. Read the meeting minutes summary." + }, + { + "contentnewsType": "paragraph", + "content": "The CVE Board is the organization responsible for the strategic direction, governance, operational structure, policies, and rules of the CVE Program. The Board includes members from numerous cybersecurity-related organizations including commercial security tool vendors, academia, research institutions, government departments and agencies, and other prominent security experts, as well as end-users of vulnerability information." + } + ] + }, { "newsType": "news", "title": "Honeywell Aerospace Added as CVE Numbering Authority (CNA)", @@ -82,10 +98,19 @@ }, { "displayOnHomepageOrder": 1, - "newsType": "news", + "newsType": "blog", "title": "CNAs — Call for Topics for “CVE Program Fall Technical Workshop: Advancing CVE Record Quality” on October 29, 2026", "urlKeywords": "Topics Register for CVE Technical Workshop 2026", "date": "2026-09-09", + "author": { + "name": "CVE Program", + "organization": { + "name": "CVE Program", + "url": "" + }, + "title": "", + "bio": "" + }, "description": [ { "contentnewsType": "paragraph", @@ -193,7 +218,6 @@ ] }, { - "displayOnHomepageOrder": 0, "newsType": "news", "title": "Minutes from CVE Board Teleconference Meeting on August 5 Now Available", "urlKeywords": "CVE Board Minutes from August 5", From 2adf24668885defbcca90fce2d9a4c617a248a2c Mon Sep 17 00:00:00 2001 From: Robert Roberge Date: Tue, 15 Sep 2026 17:15:36 +0000 Subject: [PATCH 2/3] #4068 Add 1 new CNA + Update 1 CNA's info --- src/assets/data/CNAsList.json | 72 +++++++++++++++++++++++++++++++++-- src/assets/data/metrics.json | 2 +- src/assets/data/news.json | 20 ++++++++++ 3 files changed, 89 insertions(+), 5 deletions(-) diff --git a/src/assets/data/CNAsList.json b/src/assets/data/CNAsList.json index 9c68a8f2..20dc3d8a 100644 --- a/src/assets/data/CNAsList.json +++ b/src/assets/data/CNAsList.json @@ -7318,19 +7318,27 @@ "shortName": "schneider", "cnaID": "CNA-2017-0009", "organizationName": "Schneider Electric", - "scope": "All Schneider Electric products, including Proface, APC, and ProLeiT.", + "scope": "Products supported by Schneider Electric and its affiliates, including products branded Schneider Electric or any other brands owned or controlled by Schneider Electric (such as but not limited to APC, Eliwell, Proface, ProLeit, Lauritz Knudsen Electrical & Automation, etc.), excluding Aveva and RIB products.", "contact": [ { "email": [ { - "label": "Email", + "label": "Email – Schneider Electric & Affiliates", "emailAddr": "cpcert@se.com" + }, + { + "label": "Email – Lauritz Knudsen Electrical & Automation", + "emailAddr": "LK-EA-CERT@LK-EA.com" } ], "contact": [ { - "label": "Schneider Electric security contact page", - "url": "https://www.se.com/ww/en/work/support/cybersecurity/report-a-vulnerability.jsp" + "label": "Report Vulnerability – Schneider Electric", + "url": "https://www.se.com/ww/en/work/support/cybersecurity/report-a-vulnerability/" + }, + { + "label": "Report Vulnerability – Lauritz Knudsen Electrical & Automation", + "url": "https://www.lk-ea.com/services/cybersecurity/support-portal" } ], "form": [] @@ -31469,5 +31477,61 @@ ] }, "country": "USA" + }, + { + "shortName": "RES", + "cnaID": "CNA-2026-0067", + "organizationName": "RedEye Security", + "scope": "Vulnerabilities in RedEye Security’s own products: software that RedEye develops and distributes for customers to deploy and operate in their own environments. Caver, RedEye’s self-hosted, Splunk-compatible SIEM and OCSF data-lake platform, including its server components, collectors and agents, command-line tooling, and officially distributed installers and container images. Out of scope: vulnerabilities in third-party components and dependencies that RedEye redistributes but does not maintain; vulnerabilities in RedEye-operated hosted services and web properties that RedEye remediates server-side with no customer action required; and the content of RedEye’s threat-intelligence and CVE detection feeds.", + "contact": [ + { + "email": [ + { + "label": "Email", + "emailAddr": "security@redeyesecurity.com" + } + ], + "contact": [], + "form": [] + } + ], + "disclosurePolicy": [ + { + "label": "Policy", + "language": "", + "url": "https://redeyesecurity.com/security" + } + ], + "securityAdvisories": { + "alerts": [], + "advisories": [ + { + "label": "Advisories", + "url": "https://redeyesecurity.com/security/advisories" + } + ] + }, + "resources": [], + "CNA": { + "isRoot": false, + "root": { + "shortName": "icscert", + "organizationName": "Cybersecurity and Infrastructure Security Agency (CISA) Industrial Control Systems (ICS)" + }, + "type": [ + "Vendor" + ], + "TLR": { + "shortName": "CISA", + "organizationName": "Cybersecurity and Infrastructure Security Agency (CISA)" + }, + "roles": [ + { + "helpText": "", + "role": "CNA" + } + ] + }, + "country": "USA" } ] \ No newline at end of file diff --git a/src/assets/data/metrics.json b/src/assets/data/metrics.json index 41f0fd91..0018e834 100644 --- a/src/assets/data/metrics.json +++ b/src/assets/data/metrics.json @@ -1247,7 +1247,7 @@ }, { "month": "September", - "value": "5" + "value": "6" }, { "month": "October", diff --git a/src/assets/data/news.json b/src/assets/data/news.json index 343c4f46..47f4d936 100644 --- a/src/assets/data/news.json +++ b/src/assets/data/news.json @@ -1,5 +1,25 @@ { "currentNews": [ + { + "newsType": "news", + "title": "RedEye Security Added as CVE Numbering Authority (CNA)", + "urlKeywords": "RedEye Security Added as CNA", + "date": "2026-09-15", + "description": [ + { + "contentnewsType": "paragraph", + "content": "RedEye Security is now a CVE Numbering Authority (CNA) for vulnerabilities in RedEye Security’s own products: software that RedEye develops and distributes for customers to deploy and operate in their own environments. Caver, RedEye’s self-hosted, Splunk-compatible SIEM and OCSF data-lake platform, including its server components, collectors and agents, command-line tooling, and officially distributed installers and container images. Out of scope: vulnerabilities in third-party components and dependencies that RedEye redistributes but does not maintain; vulnerabilities in RedEye-operated hosted services and web properties that RedEye remediates server-side with no customer action required; and the content of RedEye’s threat-intelligence and CVE detection feeds." + }, + { + "contentnewsType": "paragraph", + "content": "To date, 549 CNAs (546 CNAs and 3 CNA-LRs) from 43 countries and 1 no country affiliation have partnered with the CVE Program. CNAs are organizations from around the world that are authorized to assign CVE Identifiers (CVE IDs) and publish CVE Records for vulnerabilities affecting products within their distinct, agreed-upon scope, for inclusion in first-time public announcements of new vulnerabilities. RedEye Security is the 287th CNA from USA." + }, + { + "contentnewsType": "paragraph", + "content": "RedEye Security’s Root is the CISA ICS Root." + } + ] + }, { "newsType": "news", "title": "Minutes from CVE Board Teleconference Meeting on August 19 Now Available", From 95c0f7fa1c19b29d5468384b759c9ac40b8ee6f7 Mon Sep 17 00:00:00 2001 From: Roy Lane Date: Thu, 10 Sep 2026 16:45:12 -0400 Subject: [PATCH 3/3] add Council of Roots page to Program Organization --- src/assets/data/navigation.json | 24 +- src/router/index.js | 9 + src/views/ProgramOrganization/CNAs.vue | 2 +- .../ProgramOrganization/CouncilOfRoots.vue | 276 ++++++++++++++++++ 4 files changed, 308 insertions(+), 3 deletions(-) create mode 100644 src/views/ProgramOrganization/CouncilOfRoots.vue diff --git a/src/assets/data/navigation.json b/src/assets/data/navigation.json index 5a2caf10..5870e806 100644 --- a/src/assets/data/navigation.json +++ b/src/assets/data/navigation.json @@ -241,8 +241,28 @@ } } }, - "CVE Numbering Authorities": { + "Council of Roots": { "id": "3.4", + "label": "Council of Roots (CoR)", + "path": "CouncilOfRoots", + "primaryNavPath": "/ProgramOrganization/CouncilOfRoots", + "items": { + "Responsibilities": { + "anchorId": "CoR-responsibilities", + "label": "Responsibilities" + }, + "Roots": { + "anchorId": "CoR-roots", + "label": "Organizations Currently Participating as Roots" + }, + "Partner": { + "anchorId": "CoR-partner", + "label": "How to Become a Root Partner" + } + } + }, + "CVE Numbering Authorities": { + "id": "3.5", "label": "CVE Numbering Authorities (CNAs)", "path": "CNAs", "primaryNavPath": "/ProgramOrganization/CNAs", @@ -254,7 +274,7 @@ } }, "Authorized Data Publishers": { - "id": "3.5", + "id": "3.6", "label": "Authorized Data Publishers (ADPs)", "path": "ADPs", "items": { diff --git a/src/router/index.js b/src/router/index.js index c6a84899..9b921ac6 100644 --- a/src/router/index.js +++ b/src/router/index.js @@ -14,6 +14,7 @@ import Board from '@/views/ProgramOrganization/Board.vue'; import BoardArchives from '@/views/ProgramOrganization/Archives.vue'; import WorkingGroups from '@/views/ProgramOrganization/WorkingGroups.vue'; import CNAs from '@/views/ProgramOrganization/CNAs.vue'; +import CouncilOfRoots from '@/views/ProgramOrganization/CouncilOfRoots.vue'; import ADPs from '@/views/ProgramOrganization/ADPs.vue'; import Downloads from '@/views/Downloads.vue'; import ReportRequestForNonCNAs from '@/views/ReportRequest/ReportRequestForNonCNAs.vue'; @@ -176,6 +177,14 @@ const router = createRouter({ title: 'CNAs | CVE', }, }, + { + path: '/ProgramOrganization/CouncilOfRoots', + name: 'CouncilOfRoots', + component: CouncilOfRoots, + meta: { + title: 'Council of Roots | CVE', + }, + }, { path: '/ProgramOrganization/ADPs', name: 'ADPs', diff --git a/src/views/ProgramOrganization/CNAs.vue b/src/views/ProgramOrganization/CNAs.vue index 9a766d11..3ae46b2b 100644 --- a/src/views/ProgramOrganization/CNAs.vue +++ b/src/views/ProgramOrganization/CNAs.vue @@ -1,5 +1,5 @@