National Vulnerability Database (NVD) Shifts to Selective Enrichment as CVE Volume Surges

The report explains that NVD will stop consistently enriching all CVEs due to soaring disclosure volumes and will instead focus enrichment on a prioritized subset (e.g., known exploited vulnerabilities and federal-relevant software). This structural change will leave many CVEs without severity scores, complete product metadata, or contextual exploitability information, increasing manual triage and backlog for security teams; the report recommends adopting broader, analyst-driven vulnerability intelligence and prioritizing by exploitation and environmental relevance.