← D-TRUST cases
Bugzilla #2082644
Audit Finding
Audit Document
Opened By Ca
D-Trust 2026 ETSI audit finding on vulnerability management
UNCONFIRMED
D-TRUST
This summary was auto-generated by AI and revised by me when needed — accuracy improves with each update.
Always refer to the official Bugzilla thread as the authoritative source.
If you spot an inaccuracy, let me know via the contact form.
AI Summary
This case records a preliminary incident report from D-Trust about a finding in its 2026 ETSI audit. The auditors identified that not every critical vulnerability was addressed within the required 48-hour deadline under ETSI EN 319 401. The report states that the issue was discovered during the annual audit, not through an external complaint or a self-disclosed incident. No remediation details or closure are included in the thread excerpt provided. The bug remains UNCONFIRMED in the available record.
Chronology
- During the 2026 ETSI audit, auditors identified a vulnerability-management finding that critical vulnerabilities were not always addressed within 48 hours.
Thread Activity
- D-Trust — Ana Laura Martorano filed a preliminary incident report describing the ETSI audit finding and citing the 48-hour requirement for critical vulnerabilities.
Participants
D-Trust
External References
Similar Local Cases
D-Trust: Finding #2 of 2 in 2026 ETSI Audit – Documentation of backup recovery testing
SSL.com: Failure to Post all Root and Intermediate CA certificates in Repository identified in CP/CPS
Audit info for SECOM (20250607-20260606)
certSIGN: Findings in 2023 ETSI Audit for certSIGN ROOT CA G2 - Audit Incident Report
Consorci AOC (CATCert): EC-ACC audit statement 123 days after period end, no letter, no audit period newer than 2024-03-28
IdenTrust: 2026 Audit Report Finding
Documents for Microsoft PKI Services intermediate certificates
Audit Statements for GlobalSign