CNA (CVE Numbering Authority)

Also written: CNAs, CVE Numbering Authorities

An organization allowed to hand out CVE IDs, usually a vendor describing its own bugs. What it writes sits in the cna container of a CVE record.