Vulnerabilities Surge, But Messy Reporting Blurs Picture

The article outlines a record year for publicly assigned CVEs in 2025 (around 48k), driven by growth in CNA contributors—especially several WordPress security firms, VulDB, and the Linux kernel CNA—while highlighting NVD data-quality shortfalls, backlog issues, and the view from experts that rising CVE counts reflect healthier reporting and disclosure rather than a proportional increase in cyber risk; it recommends asset inventory and prioritization practices to manage the deluge of vulnerability data.