GCVE at Vulnopticon 2026

We were very happy to participate in Vulnopticon 2026 and to meet so many people interested in vulnerability identification, publication, coordination, and management.

The discussions during the conference — and just as importantly, the conversations around and outside the formal sessions — brought a lot of useful feedback, new ideas, questions, and potential directions for GCVE. These exchanges are especially valuable for a project such as GCVE, where openness, federation, interoperability, and experimentation are at the core of the initiative.

During Vulnopticon, we presented two talks related to the GCVE ecosystem:

• GCVE: Rebooting Vulnerability Tracking for an Open Security Ecosystem
  PDF - Slides

• The Missing Map: Crowdsourcing Better CPEs for Vulnerability Management with cpe.gcve.eu
  PDF - Slides

The first presentation covered the broader GCVE approach to building a more open, decentralized and interoperable vulnerability ecosystem, while the second focused on the practical challenges around software and product identification and the work being done with cpe.gcve.eu.

A big thank you to the Vulnopticon organisers, speakers and participants for the discussions and constructive feedback.

Many of the ideas exchanged during the event will help shape the next developments around GCVE, its BCPs, tooling and the wider ecosystem.

As always, feedback, experiments and new GCVE use cases are very welcome.