NOTICE— CWE 5.0 and Schema 8.0 — with breaking changes — to be released on October 28, 2026 Organizations that use CWE data should begin evaluating Schema 8.0 now in advance of the release Learn more: cwe.mitre.org/news/archive...
Common Weakness Enumeration (CWE) Program
@cweprogram.bsky.social
Account maintained by the Common Weakness Enumeration (CWE™) Program to update the community on CWE-related announcements. https://cwe.mitre.org
The CWE™ Program Celebrates 20 Years of Community-Developed Weakness Knowledge! Read our report about what the community has built over the past 20 years & how that knowledge can help prevent recurring classes of vulnerabilities in the years ahead cwe.mitre.org/documents/CW...
📣 Help shape the #VulnCon27 program! The Call for the VulnCon 2027 Program Committee is now live! 🗓️ Interest due: October 6, 2026 Apply here: firstdotorg.wufoo.com/forms/cvefir...
CVE/FIRST VulnCon27 Program Committee Interest
If you wish to be considered for the VulnCon27 Program Committee, please complete this interest form. Interest is due by October 6, 2026. Thank you for your support!
firstdotorg.wufoo.com
Hardware #CWE SIG members—Reminder that our next meeting is Friday, 9/18/2026, at 12:30-1:30 PM EST (16:30 – 17:30 UTC) Topic: - DRAFT HW CWE Lifecycle Phases Join #HW SIG: bit.ly/3SCkqyk
CNAs are regularly including #CWEs in their #CVE Records to provide enhanced #vulnerability data for downstream consumers
Common Vulnerabilities and Exposures (CVE™) Program@cveprogram.bsky.social · 2mo ago“CNA Enrichment Recognition” - 266 CNAs on the list for August 3, 2026 Published monthly, this list recognizes those CVE Numbering Authorities (#CNAs) actively providing #CVSS and #CWE vulnerability data in their #CVE Records medium.com/@cve_program...
IMPORTANT— CWE 5.0 will be here mid-autumn. The release will include Schema 8.0 for XML schema and JSON representation, resulting in major structural changes that may affect how tools & programs access, extract, & process CWE content. Learn more: cwe.mitre.org/news/archive...
CWE Program launches a new “CWE Cross-Domain Special Interest Group (XD-SIG)” focused on improving the usability & accessibility of CWE + how weaknesses are defined, presented, & mapped across software, hardware, AI, & other domains & more Details: cwe.mitre.org/news/archive...
Hardware #CWE SIG members—Reminder that our next meeting is Friday, 8/21/2026, at 12:30-1:30 PM EDT (16:30 – 17:30 UTC) Topics: - HW design/development lifecycle - HW memory weaknesses Join #HW SIG: bit.ly/3SCkqyk
CWE - CWE Community WGs & SIGs
Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.
bit.ly
“From Binary Vulnerability Detection to CWE Classification” lightning talk starts at 02:24:00 in the “CVE and AI Vulnerability Discovery Virtual Conference” video t.co/4eNZ72VMGh
CNAs are regularly including #CWEs in their #CVE Records to provide enhanced #vulnerability data for downstream consumers
Common Vulnerabilities and Exposures (CVE™) Program@cveprogram.bsky.social · 2mo ago“CNA Enrichment Recognition” - 266 CNAs on the list for August 3, 2026 Published monthly, this list recognizes those CVE Numbering Authorities (#CNAs) actively providing #CVSS and #CWE vulnerability data in their #CVE Records medium.com/@cve_program...
UPCOMING EVENT— The CVE™ Program will host a free public virtual conference, “CVE in an Era of AI-Enabled Vulnerability Discovery,” on July 30, 2026, from 10:00 AM to 2:00 PM EDT (10:00–14:00 UTC). Register today! www.cve.org/Media/News/i... #CWE
CNAs are regularly including #CWEs in their #CVE Records to provide enhanced #vulnerability data for downstream consumers
Common Vulnerabilities and Exposures (CVE™) Program@cveprogram.bsky.social · 3mo ago“CNA Enrichment Recognition” - 268 CNAs on the list for July 6, 2026 Published monthly, this list recognizes those CVE Numbering Authorities (#CNAs) actively providing #CVSS and #CWE vulnerability data in their #CVE Records medium.com/@cve_program...
Read about how CWE is moving from a background reference into active use in vulnerability disclosure as more & more CVE Records now include CWE mappings from CNAs, which tends to produce more precise root-cause data www.helpnetsecurity.com/2026/04/07/a...
The case for fixing CWE weakness patterns instead of patching one bug at a time - Help Net Security
MITRE's Alec Summers on CWE vulnerability mapping: why root-cause classification is gaining traction and where semantic gaps slow adoption.
helpnetsecurity.com
CNAs are regularly including #CWEs in their #CVE Records to provide enhanced vulnerability data for downstream consumers
Common Vulnerabilities and Exposures (CVE™) Program@cveprogram.bsky.social · 4mo ago“CNA Enrichment Recognition” - 259 CNAs on the list for June 1, 2026 Published monthly, this list recognizes those CVE Numbering Authorities (#CNAs) actively providing #CVSS and #CWE vulnerability data in their #CVE Records medium.com/@cve_program...
All of the videos from “VulnCon 2026” are now available on YouTube! www.youtube.com/playlist?lis... #cwe #cve #first #vulnerabilitymanagement #vulnerability #cybersecurity #informationsecurity
CVE/FIRST VulnCon 2026 - YouTube
The CVE Program and FIRST co-hosted “CVE/FIRST VulnCon 2026” at the DoubleTree Resort by Hilton Hotel Paradise Valley – Scottsdale, in Scottsdale, Arizona, U...
youtube.com
Learn @ the #CWE Top 25, it’s value to defenders, & how #CVE CNAs helped create the 2025 list; purpose & benefits of mapping the root causes of vulnerabilities identified in CVE Records to CWE #weaknesses; root cause mapping tips; & much more! youtu.be/UwTqrzvRMC4
Hardware #CWE SIG members—Reminder that our next meeting is Friday, 5/15/2026, at 12:30-1:30 PM EST (16:30 – 17:30 UTC) Topic: - Defining relationships between HW CWEs - Community topics Join #HW SIG: bit.ly/3SCkqyk
CWE - CWE Community WGs & SIGs
Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.
bit.ly
“CWE REST API” updated to the CWE Version 4.20 release The API, which requires no sign up or credentials, is an easy & efficient way to stay up to date with #CWE content as it’s always up to date when requested by downstream applications Details: github.com/CWE-CAPEC/RE...
github.com
#CWE 4.20 is now available! This latest release includes 1 new view to congregate common AI-related weaknesses + additions/improvements to numerous entries + content modifications submitted by the community + continued CWE content usability improvements cwe.mitre.org/news/archive...
I'm getting pumped for this afternoon's CVE-to-CWE Mapping Workshop with my colleague Connor Mullaly at #VulnCon26 #VulnCon2026 ! 1:30 PM to 5:30 PM at Workshop Room 3. There's no shortage of topics we'll be discussing. Whether we get 2 people or 50 people, we'll be ready :)
Hardware #CWE SIG members—Reminder that our next meeting is Friday, 3/20/2026, at 12:30-1:30 PM EST (16:30 – 17:30 UTC) Topic: - RTL WG Update - Commonly Confused HW CWEs Join #HW SIG: bit.ly/3SCkqyk
CWE - CWE Community WGs & SIGs
Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.
bit.ly
Check out the #CWE talks in the agenda for “CVE/FIRST VulnCon 2026” on April 13-16, 2026! www.first.org/conference/v... Virtual & In-person registration available. Register today! #cve #first #vulnerability #infosec #cybersecurity
Root Cause Mapping Working Group (RCM WG) members — Reminder that our next meeting is tomorrow, Wednesday, 2/18/2026, at 012:00 - 01:00 PM EST Topic: - 2025 CWE Top 25 , On-the-Cusp, & KEV Top 10 lists About RCM WG: cwe.mitre.org/community/wo... #CWE #CVE
CWE - CWE Community WGs & SIGs
Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.
cwe.mitre.org
Hardware #CWE SIG members—Reminder that our next meeting is Friday, 2/20/2026, at 12:30-1:30 PM EST (16:30 – 17:30 UTC) Topic: - 2026 Goals & Completeness Priorities Join #HW SIG: bit.ly/3SCkqyk
CWE - CWE Community WGs & SIGs
Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.
bit.ly
Want to know the top ten #CWEs in CISA’s “Known Exploited Vulnerabilities (#KEV) Catalog”? The “2025 CWE Top 10 KEV Weaknesses” list is now available on the CWE website! List - cwe.mitre.org/top25/archiv... Key Insights - cwe.mitre.org/top25/archiv... Methodology - cwe.mitre.org/top25/archiv...
15 CWEs were “On the Cusp” of making the “2025 #CWE Top 25 Most Dangerous Software Weaknesses” list. These CWEs continue to be prevalent & severe enough to cause concern. See the “2025 On the Cusp” list here: cwe.mitre.org/top25/archiv...
CWE - 2025 On the Cusp - Other Dangerous Software Weaknesses
Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.
cwe.mitre.org
Root Cause Mapping Working Group (RCM WG) members — Reminder that our next meeting is Wednesday, 1/21/2026, at 012:00 - 01:00 PM EST Topic: - CWE ChatBot About RCM WG: cwe.mitre.org/community/wo... #CWE #CVE
Hardware #CWE SIG members—Reminder that our next meeting is Friday, 1/16/2026, at 12:30-1:30 PM EST (16:30 – 17:30 UTC) Topic: - HW CWE Completeness Join #HW SIG: bit.ly/3SCkqyk
#CWE 4.19 is now available! This latest release includes 1 new view to support the release of the “2021 CWE Top 25 Most Dangerous Software Weaknesses,” 1 new view for the “OWASP Top Ten 2025,” + continued CWE content usability improvements cwe.mitre.org/news/archive...
The 2025 #CWE Top 25 Most Dangerous #Software Weaknesses list is now available! See the the most severe and prevalent weaknesses behind the 39,080 #CVE Records in this year’s dataset. Take a look and share your thoughts! cwe.mitre.org/top25/
