Skip to content
Launch of Global CVE Allocation System (GCVE)

Launch of Global CVE Allocation System (GCVE)

First seen 8 Nov 2026, 13:20 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 8, 2026 at 13:21 UTC
  • •GCVE enables decentralized vulnerability identification and management.
  • •Independent GNAs can autonomously allocate identifiers without central oversight.
  • •The initiative is supported by CIRCL and aims for interoperability with existing CVE systems.

The Global CVE Allocation System (GCVE) was launched as a decentralized framework for managing computer security vulnerabilities. It allows organizations to autonomously issue persistent vulnerability identifiers, enhancing transparency and attribution in vulnerability disclosures. GCVE operates through independent GCVE Numbering Authorities (GNAs), which can allocate identifiers without a central authority, thus improving flexibility and scalability. The system is designed to integrate with existing CVE registries and supports interoperability with various industry identifiers. The initiative is led by the Computer Incident Response Center Luxembourg (CIRCL), which oversees the central coordination registry and publishes Best Current Practice (BCP) documents. This new approach aims to address the limitations of traditional centralized vulnerability management systems.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 2h ago How this analysis works

Timeline

2026-11-08
GCVE launched
The Global CVE Allocation System was officially launched to enhance vulnerability management and transparency.
Casrai
2026-11-08
GCVE FAQ published
GCVE.eu released a FAQ detailing the allocation model and operational principles of the new system.
gcve.eu
2026-11-08
BCP Index released
The Best Current Practices (BCP) Index was published to guide the implementation of GCVE-related infrastructure.
gcve.eu

More articles in this cluster (4)

Following this threat?

Track Cesnet-certs and CVE-2024-1234 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (8)

1 / 2

Common questions

How does GCVE differ from traditional CVE systems?
GCVE is decentralized, allowing independent authorities to allocate identifiers without a central authority.
Who oversees the GCVE initiative?
The initiative is led by the Computer Incident Response Center Luxembourg (CIRCL).
What are Best Current Practices (BCPs) in GCVE?
BCPs are community-driven guidelines that document recommended procedures for implementing GCVE-related infrastructure.