Skip to content
Scality Joins EU's CVE Program as Numbering Authority

Scality Joins EU's CVE Program as Numbering Authority

First seen 10 Nov 2026, 17:19 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 10, 2026 at 17:21 UTC
  • •Scality became a CVE Numbering Authority under ENISA on July 21, 2026.
  • •The EU Cyber Resilience Act requires manufacturers to report actively exploited vulnerabilities.
  • •Scality's CNA status enhances its vulnerability management processes for its software products.

On November 10, 2026, Scality announced its status as a CVE Numbering Authority (CNA) under ENISA, enabling it to assign CVE IDs for vulnerabilities in its software products. This move, effective since July 21, 2026, allows Scality to enhance its vulnerability management by publishing CVE Records for its software, including Scality RING, ARTESCA, and ADI. The EU Cyber Resilience Act mandates manufacturers to report actively exploited vulnerabilities, which began on September 11, 2026. Scality's CNA status responds to customer demands for timely vulnerability information in a format compatible with existing security tools. The company operates an ISO 27001-certified information security management system and publishes a software bill of materials (SBOM) with each release, indicating a commitment to security and compliance.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 5h ago How this analysis works

Timeline

2026-07-21
Scality becomes a CVE Numbering Authority
Scality was designated as a CNA, allowing it to assign CVE IDs for vulnerabilities in its software products.
Globenewswire
2026-09-11
EU Cyber Resilience Act reporting obligations begin
Manufacturers must notify authorities of actively exploited vulnerabilities and severe incidents within 24 hours.
Globenewswire
2026-11-10
Scality announces CNA status
Scality publicly confirmed its CNA status, enhancing its vulnerability management and reporting capabilities.
Globenewswire

More articles in this cluster (2)

Following this threat?

Track Scality in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (5)

1 / 2

Common questions

What does being a CNA mean for Scality?
As a CNA, Scality can assign CVE IDs and publish CVE Records for vulnerabilities in its software, improving transparency and management.
What are the implications of the EU Cyber Resilience Act?
The Act requires manufacturers to report actively exploited vulnerabilities, enhancing accountability and security in the EU market.
How does Scality ensure security compliance?
Scality operates an ISO 27001-certified information security management system and publishes a software bill of materials with each release.