Loading story…
A new EU-focused vulnerability database, db.gcve.eu, has gone live under the GCVE (Global Cybersecurity Vulnerability Enumeration) initiative, providing a free, publicly accessible repository intended to support vulnerability management and improve European digital sovereignty. The service aggregates and normalizes vulnerability information from numerous public sources, aiming to reduce reliance on US-centric vulnerability databases.
The platform is built around the GNA (GCVE Numbering Authority) model, which is positioned as a decentralized alternative to traditional centralized assignment of vulnerability identifiers (e.g., CVE IDs). It is designed to allow autonomous assignment and publication of vulnerability identifiers without waiting for central approval, and it reportedly integrates data from 25+ different sources to make vulnerability records structured, searchable, and easier to operationalize for security teams.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
3 events from the most recent confirmed update back to the earliest known activity.
On January 23, 2026, experts cited in reporting warned that GCVE's decentralized parallel identifier ecosystem could create duplicate or inconsistent entries, increase operational burden for defenders, and complicate coordinated disclosure. They argued its long-term value would depend on whether it complements rather than undermines global vulnerability coordination.
By January 2026, coverage explained that GCVE uses a decentralized GCVE Numbering Authority model that allows participating organizations to assign and publish vulnerability identifiers without waiting for central approval. The system was presented as backward-compatible with CVE while aiming to avoid delays and single-point dependency risks in centralized assignment.
In early January 2026, the GCVE initiative launched db.gcve.eu as a free public vulnerability database intended to reduce reliance on U.S.-centric vulnerability infrastructure and support European digital sovereignty. The platform was described as aggregating and normalizing data from more than 25 sources and offering an open API for integration.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
9 references tracked. Mallory keeps watching after this page renders.
darkreading.com
Open sourcecyberscoop.com
Open sourcescworld.com
Open sourcethecyberexpress.com
Open sourcethecyberthrone.in
Open sourcecsoonline.com
Open sourceforbes.com
Open sourcecsoonline.com
Open sourcecsoonline.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
The Global CVE initiative has published **GCVE BCP-12**, a proposed standard for recording and exchanging vulnerability sightings across vulnerability-management platforms, security tools, feeds, and analysis systems. The specification is based on the sighting model already used in **Vulnerability-Lookup** and is designed to capture time-bound assertions from specific observers rather than treating each report as a universal fact, allowing multiple organizations to share complementary or conflicting observations about mentions, analyst validation, proof-of-concept release, exploitation, and patching outcomes. The release comes as vulnerability-tracking data shows rising pressure on defenders and growing demand for better interoperability. DKCERT, citing Vulnerability-Lookup's June 2026 report, said **7,454 CVEs** were published in June and more than **27,000 sightings** were aggregated, including over **8,500** directly tied to exploitation; nine of the ten most observed vulnerabilities also appeared in CISA's Known Exploited Vulnerabilities catalog. The report highlighted active attacker interest in remote access, network appliances, and identity services, with heavily watched flaws affecting Oracle PeopleSoft, Cisco, Ivanti Sentry, SimpleHelp, Check Point Security Gateway, BeyondTrust Remote Support/PRA, and even older issues such as the 2017 HP iLO 4 authentication bypass, underscoring why a common sighting format is being advanced for public review.
Aug 13, 2026
**NIST is reevaluating its role in analyzing and “enriching” vulnerabilities in the National Vulnerability Database (NVD)** as demand for vulnerability analysis continues to outpace the agency’s capacity. NIST leadership told the Information Security and Privacy Advisory Board that the enrichment process is *labor-intensive* and “not scalable” given the volume of incoming CVEs, prompting a strategic review and a shift toward **prioritizing/triaging** which vulnerabilities receive deeper analysis. The broader ecosystem is also seeing parallel efforts to improve vulnerability correlation and disclosure workflows outside of any single identifier system. *Vulnerability-Lookup* is positioned as a sharing and correlation platform that aggregates vulnerability information from multiple sources, supports sightings (e.g., *seen*, *exploited*, *patched*), and is designed to operate independently of specific vulnerability IDs while remaining compatible with the **Global CVE Allocation System (GCVE)**—highlighting how tooling and processes are evolving as stakeholders question scalability and governance of centralized vulnerability analysis.
Jul 12, 2026
European Union officials said they want to help strengthen and modernize the **Common Vulnerabilities and Exposures (CVE) Program** after a 2025 contracting scare involving MITRE raised concerns about the long-term resilience of a system widely used to track and identify software flaws. ENISA cybersecurity official Hans de Vries said EU member states asked the agency to examine how to reinforce the process, arguing that such a critical global mechanism should not rely on a single U.S. government contract, while U.S. policymakers are weighing legislation that could formalize the program and expand **CISA** oversight. Officials and experts also warned that weak governance or political fragility could splinter vulnerability tracking into competing systems, undermining a core pillar of global cyber defense. The debate has also turned to improving the quality and machine-readability of CVE records at issuance, as **AI-enabled** attacks accelerate exploitation and reduce the value of delayed enrichment; CISA said a brief renewal delay in April 2025 did not interrupt operations and that **MITRE** remains the program operator.
Jun 29, 2026