The runZero CNA is the newest CVE Numbering Authority!

runZero announced it is now a CVE Numbering Authority (CNA), enabling it to assign and publish CVE IDs for vulnerabilities it discovers—particularly across OT, IoT, and embedded systems—and for its own products; this move aims to bring more rigor, transparency, and timeliness to coordinated vulnerability disclosure by helping vendors navigate CVD practices and delivering well-structured advisories defenders can use to prioritize patching and risk management.