Comment by oxydite

Damn, dunno why I've always assumed that if something gets a CVE, then some authority has reproduced and verified it.

Shouldn't it be CNA's job? Why would anything get a number if it hadn't been verified?