11th-Hour Funding Saves Program That Tracks Software Vulnerabilities
This PCMag UK article from April 16, 2025, reports that CISA extended MITRE Corporation's contract to administer the CVE Program, but only for 11 months. Casey Ellis, founder of Bugcrowd, says the close call has put a dent in confidence in the CVE process and points to a systemic issue in managing vulnerabilities.
Source description, as published
The US Cybersecurity and Infrastructure Security Agency (CISA) extends the nonprofit MITRE Corporation's contract to administer the CVE Program. But it only lasts 11 months.