ENISA Adds NATO Agency, AISLE to CVE Network

The Common Vulnerabilities and Exposures Program assigns standardized identifiers to publicly disclosed security flaws, giving governments, vendors and researchers a shared basis for tracking and remediation. The European Union Agency for Cybersecurity, or ENISA, became a CVE Root for European entities in November 2025, taking responsibility for recruiting, training and overseeing numbering authorities while coordinating with CISA and MITRE.

ENISA said on Aug. 6, 2026, that the NATO Communications and Information Agency, or NCIA, and AI cybersecurity company AISLE had joined as CVE Numbering Authorities. The additions bring the number of CNAs under the ENISA Root to 20, including 12 onboarded directly by ENISA and eight transferred from the MITRE Root, as frontier AI models accelerate both vulnerability discovery and exploitation.