No, a CVE being assigned or allocated can happen well in advance. It's just requesting an identifier and it can be reserved very early.

For example: https://www.cve.org/CVERecord?id=CVE-2026-50000

I think that's what they're saying.

Assigning the CVE happens much earlier than actually publishing, but it's the latter that ends the embargo.