On September 17, 2026, the Cybersecurity and Infrastructure Security Agency (CISA) will launch VINCE-NT, its next-generation platform for Coordinated Vulnerability Disclosure (CVD).
While users may continue to contact SEI/CERT and use the legacy VINCE portal, after November 17, 2026, all CISA vulnerability reports must be submitted through VINCE-NT. All CISA CVD casework will be managed directly through VINCE-NT.
What You Need to Know:
VINCE-NT will become the primary platform for submitting and managing vulnerability reports to CISA.
If you expect CISA to take action on your report, please use VINCE-NT once it becomes available.
If you need support, please reach out to us at cvd@cisa.dhs.gov. For frequently asked questions and additional resources, please visit cisa.gov/cvd.
