Comment by kroeckx

Even when they are a CNA, there are procedures to get a CVE issued.