MITRE CVE Program Funding Extended For One Year

Reports surfaced that funding for MITRE’s CVE (and related CWE) programs would expire on April 16, raising concerns about CNA assignments and the continuity of centralized CVE distribution; however, CISA secured funding for the next year on April 16, 2025, and CVE Board members launched a non-profit CVE Foundation to bolster program stability. The post underscores the potential operational impacts if centralized CVE services were disrupted, notes that historical data remains on GitHub, and explains Tenable’s mitigations and continued coverage via vendor advisories and its own intelligence feed while monitoring developments.