Mmastodon TechnologyCybersecurity first seen 9 h ago, last 9 h ago, peak #1

GCVE updates BCP-07 to add NKEV vulnerability assessments

Original: We don't sleep at @ gcve and we updated the BCP-07 to support NKEV in addition to KEV. Version 3.0 additionally defines

The Global CVE Allocation System (GCVE) has published version 3.0 of its BCP-07 guidance, extending it beyond Known Exploited Vulnerability (KEV) assessments to a new No Known Exploitable Vulnerability (NKEV) format. An NKEV assessment provides a product-level, time-bounded technical evaluation of whether known exploitable vulnerabilities affect a product, giving vendors and users a standardized way to state exposure status.

Why now: The cybersecurity community is closely tracking new vulnerability disclosure and assessment standards from GCVE.

GCVEKEVNKEVBCP-07CIRCL

Open on mastodon →

Evidence

• We don't sleep at @ gcve and we updated the BCP-07 to support NKEV in addition to KEV. Version 3.0 additionally defines a No Known Exploitable Vulnerability (NKEV) assessment format. An NKEV assessment is a product-level, time-bounded technical assessment stating whether known… · gcve@social.circl.lu · 2

API: https://socialmediatrends-api.osmike.com/v1/trends/993546