AISLE Expands CVE Numbering Authority Scope Under ENISA

On August 26, 2026, AISLE announced its expanded scope as a CVE Numbering Authority (CNA) under ENISA, covering all AISLE products and third-party software vulnerabilities. This designation allows AISLE to assign CVE IDs for vulnerabilities discovered through research when no other CNA has coverage. The expansion follows AISLE's initial CNA designation on July 22, 2026, which was limited to its own products. AISLE aims to improve the speed and accuracy of vulnerability disclosures, addressing the growing security backlogs in the software ecosystem. The company has reported hundreds of vulnerabilities across popular open-source projects, facilitating timely disclosures that support remediation efforts. Jaya Baloo, AISLE's CISO, emphasized the importance of this expanded authority in enhancing global vulnerability management.

Key Points: • AISLE's scope as a CVE Numbering Authority now includes third-party software vulnerabilities. • The company aims to expedite vulnerability disclosures amid increasing security backlogs. • AISLE has reported hundreds of vulnerabilities in widely used open-source projects.