iiinova — where your digital self keeps evolving

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 18h

NOTICE— CWE 5.0 and Schema 8.0 — with breaking changes — to be released on October 28, 2026 Organizations that use CWE data should begin evaluating Schema 8.0 now in advance of the release Learn more: cwe.mitre.org/news/archive...

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 29/09/2026

The CWE™ Program Celebrates 20 Years of Community-Developed Weakness Knowledge! Read our report about what the community has built over the past 20 years & how that knowledge can help prevent recurring classes of vulnerabilities in the years ahead cwe.mitre.org/documents/CW...

011

Reposted by Common Weakness Enumeration (CWE) Program

FIRST.org @first.org · 18/09/2026

📣 Help shape the #VulnCon27 program! The Call for the VulnCon 2027 Program Committee is now live! 🗓️ Interest due: October 6, 2026 Apply here: firstdotorg.wufoo.com/forms/cvefir...

firstdotorg.wufoo.com

CVE/FIRST VulnCon27 Program Committee Interest

If you wish to be considered for the VulnCon27 Program Committee, please complete this interest form. Interest is due by October 6, 2026. Thank you for your support!

002

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 16/09/2026

Hardware #CWE SIG members—Reminder that our next meeting is Friday, 9/18/2026, at 12:30-1:30 PM EST (16:30 – 17:30 UTC) Topic: - DRAFT HW CWE Lifecycle Phases Join #HW SIG: bit.ly/3SCkqyk

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 16/09/2026

CNAs are regularly including #CWEs in their #CVE Records to provide enhanced #vulnerability data for downstream consumers

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 03/09/2026

IMPORTANT— CWE 5.0 will be here mid-autumn. The release will include Schema 8.0 for XML schema and JSON representation, resulting in major structural changes that may affect how tools & programs access, extract, & process CWE content. Learn more: cwe.mitre.org/news/archive...

011

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 03/09/2026

CWE Program launches a new “CWE Cross-Domain Special Interest Group (XD-SIG)” focused on improving the usability & accessibility of CWE + how weaknesses are defined, presented, & mapped across software, hardware, AI, & other domains & more Details: cwe.mitre.org/news/archive...

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 18/08/2026

Hardware #CWE SIG members—Reminder that our next meeting is Friday, 8/21/2026, at 12:30-1:30 PM EDT (16:30 – 17:30 UTC) Topics: - HW design/development lifecycle - HW memory weaknesses Join #HW SIG: bit.ly/3SCkqyk

bit.ly

CWE - CWE Community WGs & SIGs

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

010

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 13/08/2026

“From Binary Vulnerability Detection to CWE Classification” lightning talk starts at 02:24:00 in the “CVE and AI Vulnerability Discovery Virtual Conference” video t.co/4eNZ72VMGh

The CVE™ Program hosted a free public virtual conference, “CVE in an Era of AI-Enabled Vulnerability Discovery,” on Thursday, July 30, 2026

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 10/08/2026

CNAs are regularly including #CWEs in their #CVE Records to provide enhanced #vulnerability data for downstream consumers

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 09/07/2026

UPCOMING EVENT— The CVE™ Program will host a free public virtual conference, “CVE in an Era of AI-Enabled Vulnerability Discovery,” on July 30, 2026, from 10:00 AM to 2:00 PM EDT (10:00–14:00 UTC). Register today! www.cve.org/Media/News/i... #CWE

The CVE™ Program will host a free public virtual conference, “CVE in an Era of AI-Enabled Vulnerability Discovery,” on July 30, 2026, from 10:00 AM to 2:00 PM EDT (10:00–14:00 UTC)

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 09/07/2026

CNAs are regularly including #CWEs in their #CVE Records to provide enhanced #vulnerability data for downstream consumers

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 09/07/2026

Read about how CWE is moving from a background reference into active use in vulnerability disclosure as more & more CVE Records now include CWE mappings from CNAs, which tends to produce more precise root-cause data www.helpnetsecurity.com/2026/04/07/a...

helpnetsecurity.com

The case for fixing CWE weakness patterns instead of patching one bug at a time - Help Net Security

MITRE's Alec Summers on CWE vulnerability mapping: why root-cause classification is gaining traction and where semantic gaps slow adoption.

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 03/06/2026

CNAs are regularly including #CWEs in their #CVE Records to provide enhanced vulnerability data for downstream consumers

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 13/05/2026

Learn @ the #CWE Top 25, it’s value to defenders, & how #CVE CNAs helped create the 2025 list; purpose & benefits of mapping the root causes of vulnerabilities identified in CVE Records to CWE #weaknesses; root cause mapping tips; & much more! youtu.be/UwTqrzvRMC4

Common Weakness Enumeration (CWE™) “Out-Of-Bounds Read” Podcast episode: “CWE Top 25 Most Dangerous Software Weaknesses”

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 13/05/2026

Hardware #CWE SIG members—Reminder that our next meeting is Friday, 5/15/2026, at 12:30-1:30 PM EST (16:30 – 17:30 UTC) Topic: - Defining relationships between HW CWEs - Community topics Join #HW SIG: bit.ly/3SCkqyk

bit.ly

CWE - CWE Community WGs & SIGs

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 07/05/2026

“CWE REST API” updated to the CWE Version 4.20 release The API, which requires no sign up or credentials, is an easy & efficient way to stay up to date with #CWE content as it’s always up to date when requested by downstream applications Details: github.com/CWE-CAPEC/RE...

github.com

011

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 30/04/2026

#CWE 4.20 is now available! This latest release includes 1 new view to congregate common AI-related weaknesses + additions/improvements to numerous entries + content modifications submitted by the community + continued CWE content usability improvements cwe.mitre.org/news/archive...

Common Weakness Enumeration (CWE™) Version 4.20 now available!

010

Reposted by Common Weakness Enumeration (CWE) Program

Steve Christey Coley @realsushidude.bsky.social · 13/04/2026

I'm getting pumped for this afternoon's CVE-to-CWE Mapping Workshop with my colleague Connor Mullaly at #VulnCon26 #VulnCon2026 ! 1:30 PM to 5:30 PM at Workshop Room 3. There's no shortage of topics we'll be discussing. Whether we get 2 people or 50 people, we'll be ready :)

031

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 17/03/2026

Hardware #CWE SIG members—Reminder that our next meeting is Friday, 3/20/2026, at 12:30-1:30 PM EST (16:30 – 17:30 UTC) Topic: - RTL WG Update - Commonly Confused HW CWEs Join #HW SIG: bit.ly/3SCkqyk

bit.ly

CWE - CWE Community WGs & SIGs

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

001

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 06/03/2026

Check out the #CWE talks in the agenda for “CVE/FIRST VulnCon 2026” on April 13-16, 2026! www.first.org/conference/v... Virtual & In-person registration available. Register today! #cve #first #vulnerability #infosec #cybersecurity

The CVE Program and FIRST will co-host “VulnCon 2026” at the DoubleTree Resort by Hilton Hotel Paradise Valley - Scottsdale, in Scottsdale, Arizona, USA, on April 13–16, 2026. Registration, both virtual and in-person, is open on the FIRST website.

110

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 17/02/2026

Root Cause Mapping Working Group (RCM WG) members — Reminder that our next meeting is tomorrow, Wednesday, 2/18/2026, at 012:00 - 01:00 PM EST Topic: - 2025 CWE Top 25 , On-the-Cusp, & KEV Top 10 lists About RCM WG: cwe.mitre.org/community/wo... #CWE #CVE

cwe.mitre.org

CWE - CWE Community WGs & SIGs

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 16/02/2026

Hardware #CWE SIG members—Reminder that our next meeting is Friday, 2/20/2026, at 12:30-1:30 PM EST (16:30 – 17:30 UTC) Topic: - 2026 Goals & Completeness Priorities Join #HW SIG: bit.ly/3SCkqyk

bit.ly

CWE - CWE Community WGs & SIGs

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 29/01/2026

Want to know the top ten #CWEs in CISA’s “Known Exploited Vulnerabilities (#KEV) Catalog”? The “2025 CWE Top 10 KEV Weaknesses” list is now available on the CWE website! List - cwe.mitre.org/top25/archiv... Key Insights - cwe.mitre.org/top25/archiv... Methodology - cwe.mitre.org/top25/archiv...

Tree Map of the https://cwe.mitre.org/top25/archive/2025/2025_kev_list.html

001

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 29/01/2026

15 CWEs were “On the Cusp” of making the “2025 #CWE Top 25 Most Dangerous Software Weaknesses” list. These CWEs continue to be prevalent & severe enough to cause concern. See the “2025 On the Cusp” list here: cwe.mitre.org/top25/archiv...

cwe.mitre.org

CWE - 2025 On the Cusp - Other Dangerous Software Weaknesses

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

001

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 20/01/2026

Root Cause Mapping Working Group (RCM WG) members — Reminder that our next meeting is Wednesday, 1/21/2026, at 012:00 - 01:00 PM EST Topic: - CWE ChatBot About RCM WG: cwe.mitre.org/community/wo... #CWE #CVE

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 13/01/2026

Hardware #CWE SIG members—Reminder that our next meeting is Friday, 1/16/2026, at 12:30-1:30 PM EST (16:30 – 17:30 UTC) Topic: - HW CWE Completeness Join #HW SIG: bit.ly/3SCkqyk

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 11/12/2025

#CWE 4.19 is now available! This latest release includes 1 new view to support the release of the “2021 CWE Top 25 Most Dangerous Software Weaknesses,” 1 new view for the “OWASP Top Ten 2025,” + continued CWE content usability improvements cwe.mitre.org/news/archive...

Common Weakness Enumeration (CWE™) Version 4.19 now available!

142

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 11/12/2025

The 2025 #CWE Top 25 Most Dangerous #Software Weaknesses list is now available! See the the most severe and prevalent weaknesses behind the 39,080 #CVE Records in this year’s dataset. Take a look and share your thoughts! cwe.mitre.org/top25/

The "2025 CWE Top 25 Most Dangerous Software Weaknesses" list demonstrates the currently most common and impactful software weaknesses. Often easy to find and exploit, these can lead to exploitable vulnerabilities that allow adversaries to completely take over a system, steal data, or prevent applications from working.

011

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 17/11/2025

#CWE User Experience Working Group (UEWG) members — Reminder that our next meeting is Wednesday, 11/19/2025, at 12:00-1:00PM EST Topic: - CWE Corpus Completeness Join CWE UEWG: bit.ly/3CIylfz

bit.ly

CWE - CWE Community WGs & SIGs

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 13/11/2025

Hardware #CWE SIG members—Reminder that our next meeting is Friday, 11/14/2025, at 12:30-1:30 PM EST (16:30 – 17:30 UTC) Topic: - Review: “Formation of RTL Weakness Ad-Hoc Working Group” Join #HW SIG: bit.ly/3SCkqyk

bit.ly

CWE - CWE Community WGs & SIGs

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 07/10/2025

Hardware #CWE SIG members—Reminder that our next meeting is Friday, 10/10/2025, at 12:30-1:30 PM EDT (16:30 – 17:30 UTC) Topic: - Review HW submission: “Improper Request Propagation before Data Reception in Write Transactions in a Bus Architecture” Join #HW SIG: bit.ly/3SCkqyk

bit.ly

CWE - CWE Community WGs & SIGs

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

001

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 10/09/2025

#CWE 4.18 is now available! This latest release includes 1 new view related to the recently released “2025 Most Important Hardware Weaknesses,” 1 new AI weakness, usability improvements for 14 CWE entries including diagrams & more cwe.mitre.org/news/archive...

New Common Weakness Enumeration (CWE™) List Version Released!

011

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 09/09/2025

Hardware #CWE SIG members—Reminder that our next meeting is Friday, 9/12/2025, at 12:30-1:30 PM EDT (16:30 – 17:30 UTC) Topic: - CWE Gaps Identified in Most Important Hardware Weaknesses (MIHW) Analysis Join #HW SIG: bit.ly/3SCkqyk

bit.ly

CWE - CWE Community WGs & SIGs

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 26/08/2025

#CWE User Experience Working Group (UEWG) members — Reminder that our next meeting is tomorrow, Wednesday, 8/27/2025, at 12:00-1:00PM EDT Topics: - Weakness Remediation - CWE Survey Updates - Open Discussion Join CWE UEWG: bit.ly/3CIylfz

bit.ly

CWE - CWE Community WGs & SIGs

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 20/08/2025

The #CWE “2025 Most Important Hardware Weaknesses (MIHW)” has arrived! See what’s included, check out the new methodology, and more! #hardware #hw cwe.mitre.org/topHW/

012

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 29/07/2025

#CWE User Experience Working Group (UEWG) members — Reminder that our next meeting is tomorrow, Wednesday, 7/30/2025, at 12:00-1:00PM EDT Topics: - CWE Survey Ideas? - Open Discussion Join CWE UEWG: bit.ly/3CIylfz

bit.ly

CWE - CWE Community WGs & SIGs

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 16/07/2025

Listen to Alexander Bushkin & Jeremy West of #RedHat discuss “How Do We Leverage CVE Root Cause Mapping and CWE Data to Prevent New Vulnerabilities?” in this video from #VULNCON25 youtu.be/5bRA2Qxqzd0 #CVE #CWE

youtu.be

How Do We Leverage CVE Root Cause Mapping and CWE Data to Prevent New Vulnerabilities?

YouTube video by FIRST

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 08/07/2025

Hardware #CWE SIG members—Reminder that our next meeting is Friday, 7/11/2025, at 12:30-1:30 PM EDT (16:30 – 17:30 UTC) Topic: - HW Memory Weaknesses Working Session Join #HW SIG: bit.ly/3SCkqyk

bit.ly

CWE - CWE Community WGs & SIGs

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 02/07/2025

Hear how the CVE Numbering Authority (#CNA) community is enhancing #CVE Records with Root Cause Mapping (RCM) of their CVEs to #CWEs, challenges & practical solutions, & how an LLM can help in this video from #VULNCON25 youtu.be/TH1tGO15K24

Vulnerability Root Cause Mapping with CWE: Challenges, Solutions, and Insights from Grounded LLM-based Analysis

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 19/06/2025

Learn about CWE’s most important problems and where they fit within the challenges faced by the broader #vulnerabilitymanagement / #softwaresecurity ecosystem in this video from #VULNCON25 youtu.be/RcR-EFSptnQ #CVE #CWE

“Hard Problems in CWE, and What it Tells us about Hard Problems in the Industry,” presentation from “CVE/FIRST VulnCon 2025.” Speaker: CWE Program Technical Lead Steve Christey Coley.

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 11/06/2025

Hardware #CWE SIG members—Reminder that our next meeting is Friday, 6/13/2025, at 12:30-1:30 PM EDT (16:30 – 17:30 UTC) Topic: - Continue discussion regarding Memory Access Related Weaknesses as they relate to hardware Join HW SIG: bit.ly/3SCkqyk

bit.ly

CWE - CWE Community WGs & SIGs

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

000

Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 27/05/2025

#CWE User Experience Working Group (UEWG) members — Reminder that our next meeting is Wednesday, 5/28/2025, at 12:00-1:00PM EST Topics: - CWE and Proactive Vulnerability Management - CWE Content Development Repository (CDR) Overview - Open Discussion About CWE UEWG: bit.ly/3CIylfz

bit.ly

CWE - CWE Community WGs & SIGs

Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses.

000