Reclaiming the Namespace: EU Digital Sovereignty in the CVE Ecosystem?
Digital systems inevitably contain vulnerabilities because they are finite constructions operating in an effectively unbounded environment. Managing these vulnerabilities at scale requires more than technical remediation: it requires a way to identify them consistently, refer to them unambiguously, and coordinate action across organizations, tools, and jurisdictions. The CVE Program performs this function by providing a global naming system for publicly disclosed vulnerabilities and by…
| Keywords | EU digital sovereignty, CVE, vulnerability management, cybersecurity governance, ENISA, MITRE, Root CNA, CVE Program, distributed governance, federated systems, vulnerability disclosure, coordinated disclosure, global namespace, identifier systems, digital infrastructure, Internet governance, interoperability, geopolitical risk, economic resilience, digital autonomy, enterprise architecture, coordination layers |


