CISA Launches VINCE-NT for Enhanced Vulnerability Coordination

• •CISA upgraded to VINCE-NT for better vulnerability management.
• •The transition affects researchers and suppliers involved in CVD.
• •Active VINCE cases will be moved to VINCE-NT in the coming weeks.

On September 17, 2026, the US Cybersecurity and Infrastructure Security Agency (CISA) transitioned from the legacy VINCE platform to the new Vulnerability Information and Coordination Environment New Technology (VINCE-NT). This upgrade aims to improve automation, streamline vulnerability reporting, and enhance collaboration among researchers and suppliers. Key enhancements include a user-friendly interface, better triage effectiveness, and improved integration with CISA's internal tools. Active cases from VINCE will be transitioned to VINCE-NT over the coming weeks, while historical data remains accessible on the old platform. The upgrade affects vulnerability researchers, product suppliers, and CISA personnel involved in the Coordinated Vulnerability Disclosure (CVD) process. CISA emphasized the importance of updating internal reporting procedures to utilize VINCE-NT for future submissions.