Scality, a pioneer in data infrastructure software for AI-era storage at scale, has joined the Common Vulnerabilities and Exposures (CVE™) Program as a CVE Numbering Authority (CNA) under the Root operated by the European Union Agency for Cybersecurity (ENISA). As a CNA, Scality assigns CVE Identifiers (CVE IDs) and publishes corresponding CVE Records for vulnerabilities discovered in all of its software products, including Scality RING, Scality ARTESCA and Scality ADI.
Scality became a CNA on July 21, 2026, joining a growing number of European CNAs. It has also strengthened its vulnerability management processes, from providing accurate vulnerability information on the CVE List to moving vulnerabilities it previously disclosed in its technical bulletins into CVE Records, so customers can track them in their existing tools.
