NIST turns to IT consultants to clear National Vulnerability Database backlog

NIST has amended its contract with Analygence to address a significant backlog of CVE analyses in the National Vulnerability Database that has grown since February 2024, leaving most new vulnerabilities unanalyzed. The agency aims to restore processing rates by the end of the fiscal year, is considering a consortium for longer-term improvements, and has begun outside support while facing budget constraints; the precise causes of the surge remain unclear.