#1739086: NIST Workshop on Hardware CPE and CVSS Updates

Description: NIST is hosting a one-day workshop on hardware representation in the Common Platform Enumeration (CPE) and on how the Common Vulnerability Scoring System (CVSS) applies to hardware. The workshop will discuss NIST's plans and potential updates in these areas and gather community feedback from hardware vendors, vulnerability analysts, security-tool developers, National Vulnerability Database (NVD) users, and standards participants across government and industry.

Topics will include the current state of hardware coverage in NVD and CPE, plans and potential changes to CPE for hardware representation, CVSS considerations specific to hardware, and how the community can engage with this work going forward. The workshop is part of NIST's CHIPS Metrology and Computer Security Division (CSD) effort to improve how hardware products are identified and how their vulnerabilities are scored.

The event will be held at the NIST National Cybersecurity Center of Excellence (NCCoE) in Rockville, Maryland, with a virtual attendance option.
More info: https://www.nist.gov/news-events/events/2026/06/nist-workshop-hardware-cpe-and-cvss-updates

Date added May 27, 2026, 12:02 a.m.
Source NIST
Subjects
  • Common Platform Enumeration (CPE)
  • CVSS - Common Vulnerability Scoring System - Currently CVSS 4.0
  • NIST / DISA / DoD (Dept of Defence) / NSA USA Guidelines and Checklists
  • PodCasts / Webcast / Webinar / eSummit / Virtual Event etc.
Venue June 22, 2026, midnight - June 22, 2026, midnight