On November 10, 2026, the Cybersecurity Threat and Vulnerability Information Sharing Platform (NVDB) of the Ministry of Industry and Information Technology, together with vulnerability collection platforms such as the BUILT Vulnerability Response Platform and Vulnerability Box, jointly released and signed the "Self-Discipline Convention for Cybersecurity Product Vulnerability Collection Platforms" at the 2026 Cyber and Data Security Industry Forum. Vulnerability collection platforms connect vulnerability researchers with cybersecurity product providers and serve as a vital link for discovering risks, relaying information, and coordinating responses. To establish standardized, orderly, and vibrant channels for vulnerability collection and disclosure, NVDB organized the aforementioned platforms to research and draft this convention. The convention comprises four chapters and 18 articles, setting out provisions on platform filing, capacity building, user management, and activity implementation, as well as on whole-process management of vulnerability collection, assessment, handling, and disclosure.