CISA Launches Roadmap for the CVE Program

CISA’s report, CVE Quality for a Cyber Secure Future, reaffirms public, vendor-neutral stewardship of CVE, explores diversified funding, and shifts focus from a growth era to a quality era emphasizing automation, data quality, transparency, and broader global, multi-sector engagement; it highlights initiatives like Vulnrichment, new CVE Consumer and Researcher Working Groups, attention to NVD gaps, and a reported extension of MITRE’s contract, with commitments to clearer processes, metrics, and community feedback to modernize CVE operations.