We joined the CVE® program under the leadership of INCIBE

We joined the CVE® program under the leadership of INCIBE

July 1, 2025

Product security and privacy of communications is a priority at Fermax. We have a multidisciplinary team specialized in cybersecurity, dedicated to reinforcing the security of our products and ensuring compliance with privacy regulations. Our goal is to create a secure and robust product for our customers, always guaranteeing the privacy of their data. 

In line with this commitment, we are pleased to announce we have joined the CVE® (Common Vulnerabilities and Exposures) program as a CVE Numbering Authority (CNA), under the supervision of the National Institute of Cybersecurity (INCIBE), an entity under the Ministry for Digital Transformation and Public Function, through the Secretary of State for Telecommunications and Digital Infrastructure

The CVE® program aims to identify, define and catalogue publicly disclosed cybersecurity vulnerabilities. This designation recognizes our ability to detect and assign unique CVE identifiers to vulnerabilities that may affect our products, thus contributing to a more transparent management aligned with international best practices in cybersecurity.

To facilitate collaboration with our community of users and professionals, we have enabled a vulnerability reporting form. Through this channel, anyone can report possible security flaws, allowing our team to analyses them and apply the necessary corrective measures quickly.

"The standardization of this process through this designation consolidates Fermax as a benchmark company in terms of security. It also recognizes the effort and good practices we apply to protect our products throughout their life cycle and guarantee the privacy of communications and data," explains Francisco Sánchez, CTO Software at Fermax. ‘This procedure will allow us to be much more agile and transparent in the management and resolution of possible vulnerabilities that are detected’.

See our Cybersecurity web page for more information.