Goodbye CVE? European Vulnerability Database EUVD Now Live

For years, most of the world has relied on the CVE system to track software vulnerabilities. It’s widely trusted, globally used, and managed by a well-known organization based in the United States.

But in today’s world, digital resilience is becoming a shared responsibility. And depending entirely on a single system — especially one rooted in a specific country — has sparked conversations around risk and continuity.

That’s where Europe’s new move comes in.

The Rise of EUVD — Europe’s Alternative Platform

The European Union Agency for Cybersecurity (ENISA) recently introduced the European Vulnerability Database (EUVD) — a new, open-access platform currently in beta. While it complements the CVE system, it operates independently and is maintained within the EU framework.

Rather than duplicating the CVE database, the EUVD introduces its own features and goals. Think of it as a way to enhance collaboration, reduce potential bottlenecks, and provide better regional visibility into security risks.

Why Build a Second Database?

One key reason is to ensure long-term continuity and availability of vulnerability information. The CVE program continues to serve its purpose well, but occasional delays or uncertainty around its management have raised concerns in the wider security community.

By creating a parallel platform, the EU is adding another layer of resilience to global cybersecurity efforts. The goal isn’t to compete — it’s to complement.

What Makes EUVD Stand Out?

Here are a few features worth noting:

• Independent ID system: While it still references CVEs using “alternative IDs,” the EUVD has its own identifier format, allowing more flexibility and local verification.
• Improved search functionality: Users can filter and explore vulnerabilities by a wider set of attributes.
• Exploited vulnerability tagging: EUVD aims to highlight issues that are actively being used in real-world scenarios.
• CSAF support: It adopts a machine-readable format for vulnerability advisories, helping security teams automate their processes.

All of this is designed with a simple goal: make it easier to detect, assess, and respond to software risks in the EU and beyond.

Community Response: Cautious but Curious

Not everyone is immediately convinced. On tech forums, some users have raised a fair concern — whether having another identifier system will add complexity to an already busy ecosystem.

One user noted:

“This is great — except it adds yet another ID we have to track.”

Others questioned the current content in the beta version, pointing out that it primarily aggregates data already available elsewhere. But many agree that the platform’s potential lies in its ability to grow into a regionally relevant, independently managed resource.

A Step Toward Digital Autonomy

The EUVD is part of a broader initiative to build more independent infrastructure for Europe’s digital future. By creating its own vulnerability database, the EU is investing in tools that align with local needs while still contributing to global security efforts.

ENISA is inviting national authorities, academic institutions, and cybersecurity experts to contribute. Over time, this collaboration could lead to a more robust and diverse view of software threats affecting different regions.

Not Alone in This Mission

Europe isn’t the only region rethinking how vulnerabilities are tracked. Other initiatives, like the Global CVE (GCVE) framework, are also exploring more distributed models for assigning and managing vulnerability identifiers.

It’s clear that cybersecurity is becoming more collaborative and decentralized. And with the EUVD now live — even in beta — Europe is helping lead that shift.