Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 05/10/2026NOTICE— CWE 5.0 and Schema 8.0 — with breaking changes — to be released on October 28, 2026 Organizations that use CWE data should begin evaluating Schema 8.0 now in advance of the release Learn more: cwe.mitre.org/news/archive... 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 29/09/2026The CWE™ Program Celebrates 20 Years of Community-Developed Weakness Knowledge! Read our report about what the community has built over the past 20 years & how that knowledge can help prevent recurring classes of vulnerabilities in the years ahead cwe.mitre.org/documents/CW... 011
Reposted by Common Weakness Enumeration (CWE) ProgramFIRST.org @first.org · 18/09/2026📣 Help shape the #VulnCon27 program! The Call for the VulnCon 2027 Program Committee is now live! 🗓️ Interest due: October 6, 2026 Apply here: firstdotorg.wufoo.com/forms/cvefir...firstdotorg.wufoo.comCVE/FIRST VulnCon27 Program Committee InterestIf you wish to be considered for the VulnCon27 Program Committee, please complete this interest form. Interest is due by October 6, 2026. Thank you for your support! 002
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 16/09/2026Hardware #CWE SIG members—Reminder that our next meeting is Friday, 9/18/2026, at 12:30-1:30 PM EST (16:30 – 17:30 UTC) Topic: - DRAFT HW CWE Lifecycle Phases Join #HW SIG: bit.ly/3SCkqyk 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 16/09/2026CNAs are regularly including #CWEs in their #CVE Records to provide enhanced #vulnerability data for downstream consumers 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 03/09/2026IMPORTANT— CWE 5.0 will be here mid-autumn. The release will include Schema 8.0 for XML schema and JSON representation, resulting in major structural changes that may affect how tools & programs access, extract, & process CWE content. Learn more: cwe.mitre.org/news/archive... 011
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 03/09/2026CWE Program launches a new “CWE Cross-Domain Special Interest Group (XD-SIG)” focused on improving the usability & accessibility of CWE + how weaknesses are defined, presented, & mapped across software, hardware, AI, & other domains & more Details: cwe.mitre.org/news/archive... 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 18/08/2026Hardware #CWE SIG members—Reminder that our next meeting is Friday, 8/21/2026, at 12:30-1:30 PM EDT (16:30 – 17:30 UTC) Topics: - HW design/development lifecycle - HW memory weaknesses Join #HW SIG: bit.ly/3SCkqykbit.lyCWE - CWE Community WGs & SIGsCommon Weakness Enumeration (CWE) is a list of software and hardware weaknesses. 010
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 13/08/2026“From Binary Vulnerability Detection to CWE Classification” lightning talk starts at 02:24:00 in the “CVE and AI Vulnerability Discovery Virtual Conference” video t.co/4eNZ72VMGh 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 10/08/2026CNAs are regularly including #CWEs in their #CVE Records to provide enhanced #vulnerability data for downstream consumers 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 09/07/2026UPCOMING EVENT— The CVE™ Program will host a free public virtual conference, “CVE in an Era of AI-Enabled Vulnerability Discovery,” on July 30, 2026, from 10:00 AM to 2:00 PM EDT (10:00–14:00 UTC). Register today! www.cve.org/Media/News/i... #CWE 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 09/07/2026CNAs are regularly including #CWEs in their #CVE Records to provide enhanced #vulnerability data for downstream consumers 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 09/07/2026Read about how CWE is moving from a background reference into active use in vulnerability disclosure as more & more CVE Records now include CWE mappings from CNAs, which tends to produce more precise root-cause data www.helpnetsecurity.com/2026/04/07/a...helpnetsecurity.comThe case for fixing CWE weakness patterns instead of patching one bug at a time - Help Net SecurityMITRE's Alec Summers on CWE vulnerability mapping: why root-cause classification is gaining traction and where semantic gaps slow adoption. 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 03/06/2026CNAs are regularly including #CWEs in their #CVE Records to provide enhanced vulnerability data for downstream consumers 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 29/05/2026All of the videos from “VulnCon 2026” are now available on YouTube! www.youtube.com/playlist?lis... #cwe #cve #first #vulnerabilitymanagement #vulnerability #cybersecurity #informationsecurityyoutube.comCVE/FIRST VulnCon 2026 - YouTubeThe CVE Program and FIRST co-hosted “CVE/FIRST VulnCon 2026” at the DoubleTree Resort by Hilton Hotel Paradise Valley – Scottsdale, in Scottsdale, Arizona, U... 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 13/05/2026Learn @ the #CWE Top 25, it’s value to defenders, & how #CVE CNAs helped create the 2025 list; purpose & benefits of mapping the root causes of vulnerabilities identified in CVE Records to CWE #weaknesses; root cause mapping tips; & much more! youtu.be/UwTqrzvRMC4 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 13/05/2026Hardware #CWE SIG members—Reminder that our next meeting is Friday, 5/15/2026, at 12:30-1:30 PM EST (16:30 – 17:30 UTC) Topic: - Defining relationships between HW CWEs - Community topics Join #HW SIG: bit.ly/3SCkqykbit.lyCWE - CWE Community WGs & SIGsCommon Weakness Enumeration (CWE) is a list of software and hardware weaknesses. 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 07/05/2026“CWE REST API” updated to the CWE Version 4.20 release The API, which requires no sign up or credentials, is an easy & efficient way to stay up to date with #CWE content as it’s always up to date when requested by downstream applications Details: github.com/CWE-CAPEC/RE...github.com 011
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 30/04/2026#CWE 4.20 is now available! This latest release includes 1 new view to congregate common AI-related weaknesses + additions/improvements to numerous entries + content modifications submitted by the community + continued CWE content usability improvements cwe.mitre.org/news/archive... 010
Reposted by Common Weakness Enumeration (CWE) ProgramSteve Christey Coley @realsushidude.bsky.social · 13/04/2026I'm getting pumped for this afternoon's CVE-to-CWE Mapping Workshop with my colleague Connor Mullaly at #VulnCon26 #VulnCon2026 ! 1:30 PM to 5:30 PM at Workshop Room 3. There's no shortage of topics we'll be discussing. Whether we get 2 people or 50 people, we'll be ready :) 031
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 17/03/2026Hardware #CWE SIG members—Reminder that our next meeting is Friday, 3/20/2026, at 12:30-1:30 PM EST (16:30 – 17:30 UTC) Topic: - RTL WG Update - Commonly Confused HW CWEs Join #HW SIG: bit.ly/3SCkqykbit.lyCWE - CWE Community WGs & SIGsCommon Weakness Enumeration (CWE) is a list of software and hardware weaknesses. 001
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 06/03/2026Check out the #CWE talks in the agenda for “CVE/FIRST VulnCon 2026” on April 13-16, 2026! www.first.org/conference/v... Virtual & In-person registration available. Register today! #cve #first #vulnerability #infosec #cybersecurity 110
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 17/02/2026Root Cause Mapping Working Group (RCM WG) members — Reminder that our next meeting is tomorrow, Wednesday, 2/18/2026, at 012:00 - 01:00 PM EST Topic: - 2025 CWE Top 25 , On-the-Cusp, & KEV Top 10 lists About RCM WG: cwe.mitre.org/community/wo... #CWE #CVEcwe.mitre.orgCWE - CWE Community WGs & SIGsCommon Weakness Enumeration (CWE) is a list of software and hardware weaknesses. 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 16/02/2026Hardware #CWE SIG members—Reminder that our next meeting is Friday, 2/20/2026, at 12:30-1:30 PM EST (16:30 – 17:30 UTC) Topic: - 2026 Goals & Completeness Priorities Join #HW SIG: bit.ly/3SCkqykbit.lyCWE - CWE Community WGs & SIGsCommon Weakness Enumeration (CWE) is a list of software and hardware weaknesses. 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 29/01/2026Want to know the top ten #CWEs in CISA’s “Known Exploited Vulnerabilities (#KEV) Catalog”? The “2025 CWE Top 10 KEV Weaknesses” list is now available on the CWE website! List - cwe.mitre.org/top25/archiv... Key Insights - cwe.mitre.org/top25/archiv... Methodology - cwe.mitre.org/top25/archiv... 001
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 29/01/202615 CWEs were “On the Cusp” of making the “2025 #CWE Top 25 Most Dangerous Software Weaknesses” list. These CWEs continue to be prevalent & severe enough to cause concern. See the “2025 On the Cusp” list here: cwe.mitre.org/top25/archiv...cwe.mitre.orgCWE - 2025 On the Cusp - Other Dangerous Software Weaknesses Common Weakness Enumeration (CWE) is a list of software and hardware weaknesses. 001
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 20/01/2026Root Cause Mapping Working Group (RCM WG) members — Reminder that our next meeting is Wednesday, 1/21/2026, at 012:00 - 01:00 PM EST Topic: - CWE ChatBot About RCM WG: cwe.mitre.org/community/wo... #CWE #CVE 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 13/01/2026Hardware #CWE SIG members—Reminder that our next meeting is Friday, 1/16/2026, at 12:30-1:30 PM EST (16:30 – 17:30 UTC) Topic: - HW CWE Completeness Join #HW SIG: bit.ly/3SCkqyk 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 11/12/2025#CWE 4.19 is now available! This latest release includes 1 new view to support the release of the “2021 CWE Top 25 Most Dangerous Software Weaknesses,” 1 new view for the “OWASP Top Ten 2025,” + continued CWE content usability improvements cwe.mitre.org/news/archive... 142
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 11/12/2025The 2025 #CWE Top 25 Most Dangerous #Software Weaknesses list is now available! See the the most severe and prevalent weaknesses behind the 39,080 #CVE Records in this year’s dataset. Take a look and share your thoughts! cwe.mitre.org/top25/ 011
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 17/11/2025#CWE User Experience Working Group (UEWG) members — Reminder that our next meeting is Wednesday, 11/19/2025, at 12:00-1:00PM EST Topic: - CWE Corpus Completeness Join CWE UEWG: bit.ly/3CIylfzbit.lyCWE - CWE Community WGs & SIGsCommon Weakness Enumeration (CWE) is a list of software and hardware weaknesses. 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 13/11/2025Hardware #CWE SIG members—Reminder that our next meeting is Friday, 11/14/2025, at 12:30-1:30 PM EST (16:30 – 17:30 UTC) Topic: - Review: “Formation of RTL Weakness Ad-Hoc Working Group” Join #HW SIG: bit.ly/3SCkqykbit.lyCWE - CWE Community WGs & SIGsCommon Weakness Enumeration (CWE) is a list of software and hardware weaknesses. 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 07/10/2025Hardware #CWE SIG members—Reminder that our next meeting is Friday, 10/10/2025, at 12:30-1:30 PM EDT (16:30 – 17:30 UTC) Topic: - Review HW submission: “Improper Request Propagation before Data Reception in Write Transactions in a Bus Architecture” Join #HW SIG: bit.ly/3SCkqykbit.lyCWE - CWE Community WGs & SIGsCommon Weakness Enumeration (CWE) is a list of software and hardware weaknesses. 001
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 07/10/2025New on the #CWE Blog: “2025 CWE™ Most Important Hardware Weaknesses” Now Available medium.com/@CWE_CAPEC/2... #hardware #hw #informationtechnology #informationsecurity #cybersecuritymedium.com“2025 CWE™ Most Important Hardware Weaknesses” Now AvailableThe “2025 CWE™ Most Important Hardware Weaknesses” (2025 MIHW) was released on August 20, 2025, on the CWE website. 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 10/09/2025#CWE 4.18 is now available! This latest release includes 1 new view related to the recently released “2025 Most Important Hardware Weaknesses,” 1 new AI weakness, usability improvements for 14 CWE entries including diagrams & more cwe.mitre.org/news/archive... 011
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 09/09/2025Hardware #CWE SIG members—Reminder that our next meeting is Friday, 9/12/2025, at 12:30-1:30 PM EDT (16:30 – 17:30 UTC) Topic: - CWE Gaps Identified in Most Important Hardware Weaknesses (MIHW) Analysis Join #HW SIG: bit.ly/3SCkqykbit.lyCWE - CWE Community WGs & SIGsCommon Weakness Enumeration (CWE) is a list of software and hardware weaknesses. 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 27/08/2025The “2025 CWE Most Important Hardware Weaknesses” cycuity.com/type/blog/th... #cwe #cybersecurity #infosec #hardwaresecurity #hw #hardwarecycuity.comThe "2025 CWE Most Important Hardware Weaknesses”Discover the 2025 most important hardware security weaknesses. Learn how to leverage this list to strengthen your security program. 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 26/08/2025"MITRE updates list of top hardware security blunders" securityboulevard.com/2025/08/cybe... #cwe #cybersecurity #infosec #hw #hardwaresecurityboulevard.comCybersecurity Snapshot: Industrial Systems in Crosshairs of Russian Hackers, FBI Warns, as MITRE Updates List of Top Hardware WeaknessesCheck out the FBI’s alert on Russia-backed hackers infiltrating critical infrastructure networks via an old Cisco bug. Plus, MITRE dropped a revamped list of the most important critical security flaws... 010
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 26/08/2025MITRE Updates List of Most Common Hardware Weaknesses www.securityweek.com/mitre-update... #cwe #cybersecurity #infosec #hw #hardwaresecurityweek.comMITRE Updates List of Most Common Hardware WeaknessesMITRE has updated the list of Most Important Hardware Weaknesses to align it with evolving hardware security challenges. 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 26/08/2025#CWE User Experience Working Group (UEWG) members — Reminder that our next meeting is tomorrow, Wednesday, 8/27/2025, at 12:00-1:00PM EDT Topics: - Weakness Remediation - CWE Survey Updates - Open Discussion Join CWE UEWG: bit.ly/3CIylfzbit.lyCWE - CWE Community WGs & SIGsCommon Weakness Enumeration (CWE) is a list of software and hardware weaknesses. 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 20/08/2025The #CWE “2025 Most Important Hardware Weaknesses (MIHW)” has arrived! See what’s included, check out the new methodology, and more! #hardware #hw cwe.mitre.org/topHW/ 012
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 07/08/2025Check out this “We Speak CVE Podcast” about mapping the roots causes of CVEs to CWEs youtu.be/3nNmrv4j1YE #CWE #CVE #Vulnerability #VulnerabilityManagement #InformationSecurity #Cybersecurityyoutu.beMapping the Root Causes of CVEsYouTube video by CVE™ Program 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 29/07/2025#CWE User Experience Working Group (UEWG) members — Reminder that our next meeting is tomorrow, Wednesday, 7/30/2025, at 12:00-1:00PM EDT Topics: - CWE Survey Ideas? - Open Discussion Join CWE UEWG: bit.ly/3CIylfzbit.lyCWE - CWE Community WGs & SIGsCommon Weakness Enumeration (CWE) is a list of software and hardware weaknesses. 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 16/07/2025Listen to Alexander Bushkin & Jeremy West of #RedHat discuss “How Do We Leverage CVE Root Cause Mapping and CWE Data to Prevent New Vulnerabilities?” in this video from #VULNCON25 youtu.be/5bRA2Qxqzd0 #CVE #CWEyoutu.beHow Do We Leverage CVE Root Cause Mapping and CWE Data to Prevent New Vulnerabilities?YouTube video by FIRST 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 08/07/2025Hardware #CWE SIG members—Reminder that our next meeting is Friday, 7/11/2025, at 12:30-1:30 PM EDT (16:30 – 17:30 UTC) Topic: - HW Memory Weaknesses Working Session Join #HW SIG: bit.ly/3SCkqykbit.lyCWE - CWE Community WGs & SIGsCommon Weakness Enumeration (CWE) is a list of software and hardware weaknesses. 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 02/07/2025Hear how the CVE Numbering Authority (#CNA) community is enhancing #CVE Records with Root Cause Mapping (RCM) of their CVEs to #CWEs, challenges & practical solutions, & how an LLM can help in this video from #VULNCON25 youtu.be/TH1tGO15K24 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 19/06/2025Learn about CWE’s most important problems and where they fit within the challenges faced by the broader #vulnerabilitymanagement / #softwaresecurity ecosystem in this video from #VULNCON25 youtu.be/RcR-EFSptnQ #CVE #CWE 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 11/06/2025Hardware #CWE SIG members—Reminder that our next meeting is Friday, 6/13/2025, at 12:30-1:30 PM EDT (16:30 – 17:30 UTC) Topic: - Continue discussion regarding Memory Access Related Weaknesses as they relate to hardware Join HW SIG: bit.ly/3SCkqykbit.lyCWE - CWE Community WGs & SIGsCommon Weakness Enumeration (CWE) is a list of software and hardware weaknesses. 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 03/06/2025All of the videos from “VulnCon 2025” are now available on YouTube! youtube.com/playlist?lis... #CWE #CVE #FIRST #VulnerabilityManagement #Vulnerability #Cybersecurity #InformationSecurityyoutube.comCVE/FIRST VulnCon 2025 - YouTubeThe CVE Program and FIRST co-hosted “CVE/FIRST VulnCon 2025” at the McKimmon Center in Raleigh, North Carolina, USA, on April 7-10, 2025. The purpose of Vuln... 000
Common Weakness Enumeration (CWE) Program @cweprogram.bsky.social · 27/05/2025#CWE User Experience Working Group (UEWG) members — Reminder that our next meeting is Wednesday, 5/28/2025, at 12:00-1:00PM EST Topics: - CWE and Proactive Vulnerability Management - CWE Content Development Repository (CDR) Overview - Open Discussion About CWE UEWG: bit.ly/3CIylfzbit.lyCWE - CWE Community WGs & SIGsCommon Weakness Enumeration (CWE) is a list of software and hardware weaknesses. 000
