Launch of CVSS v2 Enhances Vulnerability Scoring for Cybersecurity

On July 28, 2026, the Forum of Incident Response and Security Teams (FIRST) announced the release of CVSS v2, a significant upgrade to the Common Vulnerability Scoring System. This new version aims to improve the accuracy and granularity of vulnerability ratings, addressing issues identified in the previous version. The CVSS v2 was developed through extensive collaboration among members of the CVSS-SIG, incorporating feedback from early adopters and security professionals. It will be utilized in the U.S. government's Security Content Automation Protocol (SCAP) for automating vulnerability management across millions of computers. The update is expected to enhance the communication of vulnerability properties to end-users and organizations. The CVSS-SIG will continue to evaluate and refine the standard based on user feedback and real-world vulnerabilities.

Key Points: • CVSS v2 was officially released on July 28, 2026, improving vulnerability scoring. • The new version addresses inconsistencies and enhances granularity in ratings. • CVSS v2 will be integrated into the U.S. government's SCAP for widespread use.