NIST NVD Halt Leaves Thousands of Vulnerabilities Untagged

A disruption at NIST has halted enrichment of the National Vulnerability Database (NVD) since February 12, 2024, leaving roughly 2,500+ CVEs without critical metadata such as CPEs, CVSS scores, and CWE mappings. This gap undermines automated vulnerability matching and patching workflows, potentially delaying remediation across governments and enterprises and increasing exposure to exploitation until the NVD restoration and enrichment processes resume.