## 2 Background
### Early Warning of Vulnerabilities  
A vulnerability is defined as a weakness in an information system, its security procedures, internal controls, or implementation that can be exploited by a threat actor to compromise the system's confidentiality, integrity, or availability [9]. This formal definition underscores the critical importance of identifying and mitigating such weaknesses to protect essential information assets. Recent reports [10] indicate that organizations that proactively implement security measures can save an average of approximately USD 2.22 million compared to those that do not adopt such preventative actions. This picture highlights the substantial economic benefits of preventing the exploitation of vulnerabilities before they result in costly data breaches. Through early warning services, identified vulnerabilities can be rapidly disseminated, ensuring that all relevant information is accessible to organizations and end-users with the objective of minimizing potential damage. However, the effectiveness of such prevention and awareness efforts is significantly diminished if the vulnerability descriptions are not available to the entire cybersecurity community. With over 580 million speakers worldwide, Spanish is one of the most widely spoken languages and ranks second in terms of native speakers. Translating early vulnerability alerts into Spanish is therefore crucial for ensuring that Spanish-speaking professionals and users can access critical cybersecurity information in their native language. This facilitates rapid comprehension and response to potential threats, reducing the risk of misinterpretation and enhancing collaborative efforts in implementing security measures. In this context, INCIBE's translation process plays a vital role in providing Spanish-speaking professionals with timely access to essential security information, thereby lowering language barriers and fostering a swift, coordinated response to emerging threats. The translation and publication of vulnerability descriptions follow a structured sequence involving multiple stages and stakeholders. The process begins when the National Institute of Standards and Technology (NIST) publishes a new vulnerability in the National Vulnerability Database (NVD), including its original technical description in English under the label _Vulnerability Description_. INCIBE automatically retrieves the information from the NVD via a feed, making it readily available to its users. At this stage, the INCIBE team manually translates the vulnerability description into Spanish, supplementing it with a descriptive title summarizing the nature of the vulnerability. Once the translation is completed, the content undergoes a review process by professional translators to ensure both technical and linguistic accuracy. Following verification, the translation is submitted to the National Vulnerability Database (NVD). After that, INCIBE retrieves the translated content and publishes it on its website, ensuring that Spanish-speaking users can access vulnerability information with optimal clarity and detail. Each vulnerability report contains the following information in Spanish: unique identifier, severity level, error category, publication and last modification dates, technical description, impact assessment, references, and mitigation solutions. These reports not only identify security issues but also provide essential tools and strategies for understanding and addressing vulnerabilities, thereby supporting the work of researchers and cybersecurity professionals. Additionally, the repository includes the CVE (Common Vulnerabilities and Exposures) identifier, a standardized system that assigns a unique identifier to each known vulnerability, facilitating consistent and efficient referencing across cybersecurity databases [11]. The procedure described above requires continuous updates and entails significant financial and human resource expenditures, making it a strong candidate for automation through machine translation tools.