On November 10, 2026, the Ministry of Industry and Information Technology's Cybersecurity Threat and Vulnerability Information Sharing Platform and vulnerability collection platforms such as the Butian Vulnerability Response Platform and Vulnerability Box jointly released and signed the “Self-Regulatory Convention on Network Product Security Vulnerability Collection Platforms” at the 2026 Network and Data Security Industry Forum. Vulnerability collection platforms connect vulnerability researchers, network product providers, etc., and are an important link for risk discovery, information transmission, and collaborative disposal. In order to establish a standardized, orderly and dynamic network product security vulnerability collection and publication channel, NVDB organized a vulnerability collection platform to research and formulate the Convention. The Convention consists of 4 chapters and 18 articles, which agree on the implementation of platform filing, capacity building, user management, activity development, and management of the entire process of collecting, evaluating, handling, and publishing bugs according to law and regulations.

On November 10, 2026, the Ministry of Industry and Information Technology's Cybersecurity Threat and Vulnerability Information Sharing Platform and vulnerability collection platforms such as the Butian Vulnerability Response Platform and Vulnerability Box jointly released and signed the “Self-Regulatory Convention on Network Product Security Vulnerability Collection Platforms” at the 2026 Network and Data Security Industry Forum. Vulnerability collection platforms connect vulnerability researchers, network product providers, etc., and are an important link for risk discovery, information transmission, and collaborative disposal. In order to establish a standardized and dynamic network product security vulnerability collection and publication channel, NVDB organized a vulnerability collection platform to research and formulate the Convention. The Convention consists of 4 chapters and 18 articles, which agree on the implementation of platform filing, capacity building, user management, activity development, and management of the entire process of collecting, evaluating, handling, and publishing bugs according to law and regulations.