Overview

• The European Union Vulnerability Database (EUVD) is now fully operational, cataloging software flaws with severity ratings and remediation guidance.
• The EUVD integrates with the US CVE system, offering dual-tagged identifiers to maintain global interoperability in vulnerability tracking.
• The database provides three distinct views: critical vulnerabilities, actively exploited flaws, and issues coordinated through national CIRTs like Germany's BSI.
• The EU developed the EUVD partly in response to uncertainties surrounding the long-term funding of the US CVE system, which is now funded through March 2026.
• Enisa's EUVD aims to strengthen EU cybersecurity autonomy while continuing close transatlantic cooperation with the US-led CVE framework.