Foxit, a global leader in PDF and document productivity software, has been officially recognized as a CVE Numbering Authority (CNA) by the Common Vulnerabilities and Exposures (CVE) Program. This designation empowers Foxit to independently assign CVE Identifiers (IDs) and publish CVE Records for vulnerabilities identified in its own products.

This new authority enhances Foxit’s ability to streamline vulnerability reporting and patch management for its worldwide user base, including enterprise, public sector, and government organizations.

Strengthening Control Over Vulnerability Management

As an authorized CNA, Foxit now plays a direct role in maintaining global cybersecurity standards by accelerating the identification and documentation of potential security issues. This milestone demonstrates the company’s deep commitment to proactive defense, regulatory compliance, and transparency in addressing security risks.

Cyber Technology Insights : Seemplicity Releases Four AI Agents to Bring Action to Enterprise Exposure Management

“Becoming a CNA marks a major advancement in our product security journey and reinforces our alignment with global security best practices,” said Derek O’Neill, Director of Data Privacy & Information Security at Foxit. “This authorization enables us to manage vulnerabilities internally and externally with greater efficiency. When a potential flaw is identified, it can be quickly assigned a standardized CVE ID and tracked through to resolution, ensuring faster patch releases and more effective customer protection.”

Advantages of Foxit’s CNA Accreditation

Accelerated Response Times:
Direct control over the CVE assignment process shortens the interval between discovery and disclosure of vulnerabilities.

Cyber Technology Insights : Corsha and Dragos Join Forces to Elevate OT Security with Automated Machine Identity Security

Improved Transparency:
Customers and cybersecurity professionals can access standardized, verified information about vulnerabilities through official CVE Records.

Better Collaboration:
The CNA status enables Foxit to coordinate seamlessly with independent security researchers and the broader cybersecurity community, ensuring timely credit and protection against potential zero-day threats.

Supporting Global Cybersecurity Efforts

The CVE Program, managed by the Cybersecurity and Infrastructure Security Agency (CISA) under the U.S. Department of Homeland Security, is an international initiative that catalogs publicly disclosed cybersecurity vulnerabilities. By joining the global network of CNAs, Foxit contributes to a unified ecosystem that enhances transparency, standardization, and coordinated vulnerability response across the digital landscape.

Cyber Technology Insights : Bernard Gavgani, ex-BNP Paribas Global CIO, Joins 1touch.io Board to Drive AI Data Security

To participate in our interviews, please write to our CyberTech Media Room at info@intentamplify.com