Particle.news

EU Launches Independent Vulnerability Database to Bolster Cybersecurity

The EUVD, operated by Enisa, complements the US CVE system, addressing funding concerns and enhancing transparency in software flaw tracking.

Overview

  • The European Union Vulnerability Database (EUVD) is now fully operational, cataloging software flaws with severity ratings and remediation guidance.
  • The EUVD integrates with the US CVE system, offering dual-tagged identifiers to maintain global interoperability in vulnerability tracking.
  • The database provides three distinct views: critical vulnerabilities, actively exploited flaws, and issues coordinated through national CIRTs like Germany's BSI.
  • The EU developed the EUVD partly in response to uncertainties surrounding the long-term funding of the US CVE system, which is now funded through March 2026.
  • Enisa's EUVD aims to strengthen EU cybersecurity autonomy while continuing close transatlantic cooperation with the US-led CVE framework.