alt Hacker NewsNo, a CVE being assigned or allocated can happen well in advance. It's just requesting an identifier and it can be reserved very early.
For example: https://www.cve.org/CVERecord?id=CVE-2026-50000
No, a CVE being assigned or allocated can happen well in advance. It's just requesting an identifier and it can be reserved very early.
For example: https://www.cve.org/CVERecord?id=CVE-2026-50000
I think that's what they're saying.
Assigning the CVE happens much earlier than actually publishing, but it's the latter that ends the embargo.