The Fall of the National Vulnerability Database

The article explains that NIST's National Vulnerability Database has stopped enriching vulnerabilities (since Feb. 12) and attributes this degradation to three systemic factors—credit-seeking inexperienced contributors, global accessibility that enables monetization of vulnerabilities, and bug-bounty-driven volume over quality—resulting in a flood of low-quality CVE reports that overwhelm vendors and the NVD's single-threaded enrichment process; it recommends reconsidering reliance on the NVD and adopting federated approaches (like extending CNA responsibilities) to restore scalability and trust.