Skip to content

Commit 7f7df13

Browse files
rrobergerlxdev
rroberge
and
rlxdev
authored
3/3/26 release branch (#3865)
* #3863 Update Related Efforts page * #3862 "CNA Enrichment Recognition List" updates for 3/2/26 list * #3861 Add 1 new CNA * #3864 Add 1 Blog @ Q4 CY25 Program Summary Report * #3861 Add 2 new CNAs * prevent Partner List table width from expanding when displaying ALL partners --------- Co-authored-by: Roy Lane <rlane@mitre.org>
1 parent 620301c commit 7f7df13

8 files changed

Lines changed: 456 additions & 33 deletions

File tree

‎public/images/news/cveProgramReport/reservedCVEIDspublishedCVERecordsQuarterlyTrendQ4CY2025.png‎

33.5 KB
Loading

‎src/assets/data/CNAsList.json‎

Lines changed: 112 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -28472,5 +28472,117 @@
2847228472
]
2847328473
},
2847428474
"country": "USA"
28475+
},
28476+
{
28477+
"shortName": "cygence",
28478+
"cnaID": "CNA-2026-0012",
28479+
"organizationName": "Cygence Pty Ltd",
28480+
"scope": "Issues in third-party products identified by, or reported, to Cygence, unless covered by the scope of another CNA.",
28481+
"contact": [
28482+
{
28483+
"email": [
28484+
{
28485+
"label": "Email",
28486+
"emailAddr": "cve@cygence.com.au"
28487+
}
28488+
],
28489+
"contact": [],
28490+
"form": []
28491+
}
28492+
],
28493+
"disclosurePolicy": [
28494+
{
28495+
"label": "Policy",
28496+
"language": "",
28497+
"url": "https://www.cygence.com.au/disclosure-policy"
28498+
}
28499+
],
28500+
"securityAdvisories": {
28501+
"alerts": [],
28502+
"advisories": [
28503+
{
28504+
"label": "Advisories",
28505+
"url": "https://www.cygence.com.au/vulnerability-disclosures"
28506+
}
28507+
]
28508+
},
28509+
"resources": [],
28510+
"CNA": {
28511+
"isRoot": false,
28512+
"root": {
28513+
"shortName": "n/a",
28514+
"organizationName": "n/a"
28515+
},
28516+
"roles": [
28517+
{
28518+
"helpText": "",
28519+
"role": "CNA"
28520+
}
28521+
],
28522+
"TLR": {
28523+
"shortName": "mitre",
28524+
"organizationName": "MITRE Corporation"
28525+
},
28526+
"type": [
28527+
"Researcher"
28528+
]
28529+
},
28530+
"country": "Australia"
28531+
},
28532+
{
28533+
"shortName": "TuranSec",
28534+
"cnaID": "CNA-2026-0013",
28535+
"organizationName": "Turan Security",
28536+
"scope": "Vulnerabilities discovered through independent research conducted by TuranSec to products and projects that are not CNAs themselves.",
28537+
"contact": [
28538+
{
28539+
"email": [
28540+
{
28541+
"label": "Email",
28542+
"emailAddr": "security@turansec.uz"
28543+
}
28544+
],
28545+
"contact": [],
28546+
"form": []
28547+
}
28548+
],
28549+
"disclosurePolicy": [
28550+
{
28551+
"label": "Policy",
28552+
"language": "",
28553+
"url": "https://cve.turansec.uz/disclosure"
28554+
}
28555+
],
28556+
"securityAdvisories": {
28557+
"alerts": [],
28558+
"advisories": [
28559+
{
28560+
"label": "Advisories",
28561+
"url": "https://cve.turansec.uz/"
28562+
}
28563+
]
28564+
},
28565+
"resources": [],
28566+
"CNA": {
28567+
"isRoot": false,
28568+
"root": {
28569+
"shortName": "redhat",
28570+
"organizationName": "Red Hat, Inc."
28571+
},
28572+
"type": [
28573+
"Researcher"
28574+
],
28575+
"TLR": {
28576+
"shortName": "mitre",
28577+
"organizationName": "MITRE Corporation"
28578+
},
28579+
"roles": [
28580+
{
28581+
"helpText": "",
28582+
"role": "CNA"
28583+
}
28584+
]
28585+
},
28586+
"country": "Uzbekistan"
2847528587
}
2847628588
]

‎src/assets/data/metrics.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1180,7 +1180,7 @@
11801180
},
11811181
{
11821182
"month": "March",
1183-
"value": "TBA"
1183+
"value": "2"
11841184
},
11851185
{
11861186
"month": "April",

‎src/assets/data/news.json‎

Lines changed: 302 additions & 1 deletion
Large diffs are not rendered by default.

‎src/assets/style/globals.scss‎

Lines changed: 12 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -587,4 +587,16 @@ label {
587587

588588
/* Other ends here*/
589589

590+
// This is used to break long URLs so the "Scope" column of the Partner List
591+
// table doesn't expand and in turn cause the table width to go beyond the
592+
// parent's (DIV) width. That also causes a horizontal scroll bar to show up.
593+
// The CSS has to be in global scope because the link (embedded in the scope
594+
// text in CNAsList.json) is added via "v-html" and Vue doesn't add the scope
595+
// tag to the "a" element in that case, so a scoped CSS won't apply.
596+
597+
.partner_scope > a {
598+
word-break: break-all;
599+
display: inline-block;
600+
}
601+
590602
/* Third party CSS */

‎src/views/About/Metrics.vue‎

Lines changed: 23 additions & 20 deletions
Original file line numberDiff line numberDiff line change
@@ -334,15 +334,16 @@
334334
</p>
335335
</div>
336336
<h3 class="title">CNA Enrichment Recognition List</h3>
337-
<p class="cve-help-text"><span class="has-text-weight-bold">Last Updated: </span><time>February 2, 2026</time><br/>
338-
<span class="has-text-weight-bold">Total CNAs: </span>256</p>
337+
<p class="cve-help-text"><span class="has-text-weight-bold">Last Updated: </span><time>March 2, 2026</time><br/>
338+
<span class="has-text-weight-bold">Total CNAs: </span>259</p>
339339
<div>
340340
<ul>
341341
<li>Acronis International GmbH</li>
342342
<li>Adobe Systems Incorporated</li>
343343
<li>Advanced Micro Devices Inc.</li>
344344
<li>Airbus</li>
345345
<li>AlgoSec</li>
346+
<li>Alibaba, Inc.</li>
346347
<li>Altera</li>
347348
<li>Altium</li>
348349
<li>Amazon</li>
@@ -361,36 +362,34 @@
361362
<li>Axis Communications AB</li>
362363
<li>AxxonSoft Limited</li>
363364
<li>Azure Access Technology</li>
365+
<li>BeyondTrust Inc.</li>
364366
<li>Bitdefender</li>
365367
<li>Bizerba SE & Co. KG</li>
366368
<li>Black Duck Software, Inc.</li>
367369
<li>Black Lantern Security</li>
368370
<li>BlackBerry</li>
371+
<li>Brocade Communications Systems LLC, a Broadcom Company</li>
369372
<li>Bugcrowd Inc.</li>
370373
<li>CA Technologies</li>
371374
<li>Canon EMEA</li>
372375
<li>Canon Inc.</li>
373376
<li>Canonical Ltd.</li>
374377
<li>Carrier Global Corporation</li>
375-
<li>Centreon</li>
376378
<li>CERT.PL</li>
377379
<li>CERT@VDE</li>
378380
<li>Check Point Software Technologies Ltd.</li>
379381
<li>Checkmarx</li>
380382
<li>Checkmk GmbH</li>
381383
<li>Cisco Systems, Inc.</li>
382384
<li>Citrix Systems, Inc.</li>
383-
<li>Cloudflare, Inc.</li>
384385
<li>Commvault Systems Inc</li>
385-
<li>Concrete CMS</li>
386386
<li>ConnectWise LLC</li>
387+
<li>Crafter CMS</li>
387388
<li>Crestron Electronics, Inc.</li>
388389
<li>CrowdStrike Holdings, Inc.</li>
389-
<li>CyberArk Labs</li>
390390
<li>CyberDanube</li>
391391
<li>Cybersecurity and Infrastructure Security Agency (CISA) U.S. Civilian Government</li>
392392
<li>Dahua Technologies</li>
393-
<li>Danfoss</li>
394393
<li>Dassault Systèmes</li>
395394
<li>Delinea, Inc.</li>
396395
<li>Dell EMC</li>
@@ -407,10 +406,8 @@
407406
<li>Ericsson</li>
408407
<li>Erlang Ecosystem Foundation</li>
409408
<li>ESET, spol. s r.o.</li>
410-
<li>EU Agency for Cybersecurity (ENISA)</li>
411409
<li>Extreme Networks, Inc.</li>
412410
<li>F5 Networks</li>
413-
<li>Fedora Project (Infrastructure Software)</li>
414411
<li>Fermax Technologies SLU</li>
415412
<li>Financial Security Institute (FSI)</li>
416413
<li>Flexera Software LLC</li>
@@ -420,7 +417,6 @@
420417
<li>Fortra, LLC</li>
421418
<li>Foxit Software Incorporated</li>
422419
<li>Gallagher Group Ltd</li>
423-
<li>GE Vernova</li>
424420
<li>Genetec Inc.</li>
425421
<li>GitHub (maintainer security advisories)</li>
426422
<li>GitHub Inc, (Products Only)</li>
@@ -429,25 +425,30 @@
429425
<li>Google Cloud</li>
430426
<li>Google LLC</li>
431427
<li>Gridware Cybersecurity</li>
428+
<li>Hackrate Kft.</li>
429+
<li>HackRTU</li>
432430
<li>Hallo Welt! GmbH</li>
433431
<li>Hanwha Vision Co., Ltd.</li>
434432
<li>Harborist</li>
435433
<li>HashiCorp Inc.</li>
436434
<li>HeroDevs</li>
437435
<li>HiddenLayer, Inc.</li>
436+
<li>Hillstone Networks Inc.</li>
438437
<li>Hitachi Energy</li>
439438
<li>Hitachi Vantara</li>
440439
<li>Hitachi, Ltd.</li>
441440
<li>Honeywell International Inc.</li>
442441
<li>Honor Device Co., Ltd.</li>
443442
<li>HP Inc.</li>
443+
<li>Huawei Technologies</li>
444444
<li>HYPR Corp</li>
445445
<li>IBM Corporation</li>
446446
<li>ICS-CERT</li>
447447
<li>Indian Computer Emergency Response Team (CERT-In)</li>
448448
<li>Insyde Software</li>
449449
<li>Intel Corporation</li>
450450
<li>Internet Systems Consortium (ISC)</li>
451+
<li>Intigriti</li>
451452
<li>Israel National Cyber Directorate</li>
452453
<li>Ivanti</li>
453454
<li>Jamf</li>
@@ -459,6 +460,7 @@
459460
<li>Juniper Networks, Inc.</li>
460461
<li>Kaspersky</li>
461462
<li>KNIME AG</li>
463+
<li>KrakenD, S.L.</li>
462464
<li>KrCERT/CC</li>
463465
<li>Kubernetes</li>
464466
<li>Larry Cashdollar</li>
@@ -493,20 +495,21 @@
493495
<li>OMRON Corporation</li>
494496
<li>ONEKEY GmbH</li>
495497
<li>Open Design Alliance</li>
496-
<li>Open-Xchange</li>
497-
<li>OpenHarmony</li>
498498
<li>OpenJS Foundation</li>
499499
<li>OpenText (formerly Micro Focus)</li>
500500
<li>OpenVPN Inc.</li>
501501
<li>OPPO</li>
502502
<li>Palantir Technologies</li>
503-
<li>Palo Alto Networks</li>
504503
<li>Panasonic Holdings Corporation</li>
505504
<li>PaperCut Software Pty Ltd</li>
505+
<li>Payara</li>
506506
<li>Pegasystems</li>
507+
<li>Pentraze Cybersecurity</li>
507508
<li>PHP Group</li>
508509
<li>Ping Identity Corporation</li>
510+
<li>PostgreSQL</li>
509511
<li>Progress Software Corporation</li>
512+
<li>Project Black</li>
510513
<li>Proofpoint Inc.</li>
511514
<li>Protect AI</li>
512515
<li>Pure Storage, Inc.</li>
@@ -521,10 +524,10 @@
521524
<li>Red Hat, Inc.</li>
522525
<li>Ribose Limited</li>
523526
<li>Robert Bosch GmbH</li>
524-
<li>Roche Diagnostics</li>
525527
<li>Rockwell Automation</li>
526528
<li>S21sec Cyber Solutions by Thales</li>
527529
<li>SailPoint Technologies</li>
530+
<li>Samsung TV & Appliance</li>
528531
<li>SAP SE</li>
529532
<li>Schneider Electric SE</li>
530533
<li>Seagate Technology</li>
@@ -540,15 +543,16 @@
540543
<li>Solidigm</li>
541544
<li>Sonatype Inc.</li>
542545
<li>Sophos</li>
543-
<li>StrongDM</li>
544-
<li>Super Micro Computer, Inc.</li>
546+
<li>Spanish National Cybersecurity Institute, S.A.</li>
547+
<li>Spartans Security</li>
545548
<li>Suse</li>
546549
<li>Switzerland National Cyber Security Centre (NCSC)</li>
547550
<li>Symantec - A Division of Broadcom</li>
548551
<li>Synaptics</li>
549552
<li>Synology Inc.</li>
550553
<li>Talos</li>
551554
<li>Tanium Inc.</li>
555+
<li>TCS-CERT </li>
552556
<li>TeamViewer Germany GmbH</li>
553557
<li>Temporal Technologies Inc.</li>
554558
<li>Tenable Network Security, Inc.</li>
@@ -561,29 +565,28 @@
561565
<li>The Qt Company</li>
562566
<li>The Rust Project</li>
563567
<li>The Tcpdump Group</li>
564-
<li>The Wikimedia Foundation</li>
565568
<li>TianoCore.org</li>
566569
<li>TIBCO Software Inc.</li>
567570
<li>Toreon</li>
568571
<li>TP-Link Systems Inc.</li>
569572
<li>TR-CERT (Computer Emergency Response Team of the Republic of Turkey)</li>
573+
<li>Trellix</li>
570574
<li>Trend Micro, Inc.</li>
571575
<li>TWCERT/CC</li>
572576
<li>TYPO3 Association</li>
573577
<li>upKeeper Solutions</li>
574578
<li>Vaadin Ltd.</li>
575-
<li>VMware</li>
579+
<li>Vivo Mobile Communication Technology Co., LTD.</li>
576580
<li>VulDB</li>
577-
<li>VulnCheck</li>
578581
<li>WatchGuard Technologies, Inc.</li>
579582
<li>Western Digital</li>
580583
<li>Wind River Systems Inc.</li>
581584
<li>Wiz, Inc.</li>
582585
<li>wolfSSL Inc.</li>
583586
<li>Wordfence</li>
584-
<li>WSO2 LLC</li>
585587
<li>Xerox Corporation</li>
586588
<li>Yandex N.V.</li>
589+
<li>Yokogawa Group</li>
587590
<li>Yugabyte, Inc.</li>
588591
<li>Zabbix</li>
589592
<li>Zephyr Project</li>

‎src/views/About/RelatedEfforts.vue‎

Lines changed: 3 additions & 9 deletions
Original file line numberDiff line numberDiff line change
@@ -82,19 +82,13 @@
8282
Weaknesses in software and hardware may become exploitable vulnerabilities if not eliminated prior to software or hardware deployment.
8383
</p>
8484
<p>
85-
The CWE Program also has special interest groups (SIGs) and working groups (WGs) for community participation, including the
85+
The CWE Program also has special interest groups (SIGs) and working groups (WGs) for community participation, such as the
8686
<a href="https://cwe.mitre.org/community/working_groups.html#ai_wg" target="_blank">
8787
Artificial Intelligence Working Group (AI WG)
88-
</a>,
88+
</a>
89+
and
8990
<a href="https://cwe.mitre.org/community/working_groups.html#hw_sig" target="_blank">
9091
Hardware CWE Special Interest Group (HW CWE SIG)
91-
</a>,
92-
<a href="https://cwe.mitre.org/community/working_groups.html#rcm_wg" target="_blank">
93-
Root Cause Mapping Working Group (RCM WG)
94-
</a>,
95-
and
96-
<a href="https://cwe.mitre.org/community/working_groups.html#ue_wg" target="_blank">
97-
CWE User Experience Working Group (UEWG)
9892
</a>.
9993
</p>
10094

‎src/views/PartnerInformation/ListofPartners.vue‎

Lines changed: 3 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -179,7 +179,7 @@
179179
{{CNA.organizationName}}
180180
</router-link>
181181
</th>
182-
<td data-label="Scope" v-html="CNA.scope"></td>
182+
<td class="partner_scope" data-label="Scope" v-html="CNA.scope"></td>
183183
<td data-label="Program Role">
184184
<span v-for="(role, index) in CNA.CNA.roles" :key="role+index">
185185
{{role.role}}{{index == CNA.CNA.roles.length-1 ? '' : ', '}}
@@ -191,7 +191,8 @@
191191
</tbody>
192192
</table>
193193
<p class="mb-2 cve-help-text">* Self-identified by CNA</p>
194-
<nav class="pagination is-centered" aria-label="pagination">
194+
<nav v-if="showPartnersCount !== 'All'"
195+
class="pagination is-centered" aria-label="pagination">
195196
<button class="pagination-previous button cve-button cve-button-outline"
196197
:class="{'disabled': pagination.currentPage > 1 ? false : true}" :aria-disabled="pagination.currentPage > 1 ? false : true"
197198
@click=getPreviousPage>

0 commit comments

Comments
 (0)