NVD Update: Help Has Arrived

NIST has restored funding to the National Vulnerability Database after CISA withdrew support, reallocating $3.7M and engaging contractor Analygence to address the CVE backlog; despite reports of a $125M deal, only about $1.8M appears tied to NVD through July 2025, with NIST aiming to clear the backlog by September. Until then, organizations should not rely solely on the NVD and should source vulnerability data from multiple providers, with potential normalization around October.