Frequently Asked Questions About the MITRE CVE Program Expiration and Renewal

Tenable’s FAQ outlines the current status of the MITRE CVE Program, confirming that CISA extended funding for one year on April 16, 2025, and emphasizing the program’s central role and CNA function in coordinated vulnerability identification. It notes parallel initiatives such as the CVE Foundation’s nonprofit transition proposal and CIRCL’s GCVE decentralized numbering system, and explains that Tenable has reserved CVEs and relies on vendor advisories to minimize disruption from any CVE or NVD interruptions while it continues to monitor and update the community.