China's Dual Vulnerability Databases and Their Impact on Disclosure Timelines

China's Dual Vulnerability Databases and Their Impact on Disclosure Timelines

First seen 19 Feb 2026, 17:17 UTC •BitsightGbhackersCybersecuritynewsCyberpress •44.6

Article Content

Browse articles
ThreatCluster

China operates two distinct vulnerability databases, CNVD and CNNVD, which have different disclosure timelines and priorities compared to the global CVE system. This dual structure has led to the emergence of vulnerabilities that may not be promptly addressed in the international cybersecurity landscape. The differences in these databases create complexities for global cybersecurity efforts.

How this analysis works

Timeline

2026-02-19
Coverage of China's vulnerability disclosure ecosystem
Recent
Analysis of CNVD and CNNVD published
Date unknown
Emergence of CNVD and CNNVD databases in China

Extracted Entities

1 / 2