NIST to limit work on CVE entries as submissions surge

NIST announced it will limit enrichment of CVE records due to an exponential rise in submissions and resource constraints, prioritizing CVEs on CISA's catalog, federal-use products, and critical software while moving older backlog items into a "Not Scheduled" state; the agency will also stop providing its own severity scores for all submissions and rely on submitter-provided ratings.