ENISA is expanding Europe’s vulnerability management framework as frontier AI reshapes threat discovery and NIS2 drives stronger disclosure requirements.

EU

NIS2

"ENISA scales up its role in the CVE Program." The NATO Communications and Information Agency (NCIA) and AI/cybersecurity firm AISLE join the CVE Numbering Authorities (CNAs) under the ENISA Root, bringing ENISA's total to 20 CNAs (including eight transferred from the MITRE Root); ENISA's Chief Cybersecurity and Operations Officer Hans de Vries linked the expansion to the emergence of frontier AI in vulnerability discovery and exploitation. This sits within the EU vulnerability-disclosure framework established under the NIS2 Directive.

‍