The world's vulnerability-numbering system quietly grew a second pole - ENISA's root now holds 20 authorities, 8 moved over from MITRE
ENISA announced that its CVE Root now holds 20 CVE Numbering Authorities - 12 onboarded directly and 8 transferred from the MITRE Root - with NATO's Communications and Information Agency (NCIA) and the AI-security firm AISLE newly joined. The global system that assigns identity to software vulnerabilities is gaining a second center of gravity, on the agency's own record.
What would prove this wrong: This signal weakens if CNAs transfer back toward the MITRE Root, if the ENISA Root's authority count stalls or shrinks over the next year, or if CVE issuance under the ENISA Root remains marginal relative to the program total.
Associates briefed T+0. Subscribers T+7. This is the public record.