All your vulns are belong to us! CISA wants to maintain gov control of CVE program

CISA released a vision document asserting stronger leadership over the CVE program following earlier funding uncertainty and a near-contract lapse with MITRE, while the CVE Board’s concerns helped spur creation of the CVE Foundation advocating for independent, diversified governance. CISA argues private stewardship presents conflicts of interest and signals a shift from growth to a quality-focused era, but provides few details on direct control or funding beyond early 2026, leaving the program’s future governance and stability uncertain.