MITRE CVE Program Funding Halt Imminence

April 15, 2025, 8:20 pm

The MITRE Corporation alerted that its stewardship of the world’s centralized Common Vulnerabilities and Exposures (CVE) program might end shortly because the federal government has chosen not to renew its contract. In tandem, government funding was abruptly halted, casting uncertainty over the continuity of a critical system that monitors and catalogs security flaws in products. This decision is raising concerns among cybersecurity experts who fear that losing established support may disrupt coordinated vulnerability management and delay remediation efforts, potentially impacting both public and private sector security measures.

Reddit: r/DataHoarder

Bluesky: @kirancodes.me, @fergdawg.bsky.social, @infosec.skyfleet.blue

bleepingcomputer.com / MITRE warns that funding for critical CVE program expires today

MITRE Vice President Yosry Barsoum has warned that U.S. government funding for the Common Vulnerabilities and Exposures (CVE) and Common Weakness Enumeration (CWE) programs expires today, which could lead to widespread disruption across the global cybersecurity industry. [...]

csoonline.com / CVE program faces swift end after DHS fails to renew contract

Comments

theregister.com / US abruptly turns off funding for CVE program

Comments

therecord.media / MITRE warns of lapse with CVE program as contract with US set to expire

The MITRE Corporation said on Tuesday that its stewardship of the CVE program may be ending this week because the federal government has decided not to renew its contract with the nonprofit.

theregister.com / Uncle Sam abruptly turns off funding for CVE program. Yes, that CVE program

Because vulnerability management has nothing to do with national security, right? US government funding for the world's CVE program – the centralized Common Vulnerabilities and Exposures database of product security flaws – ends Wednesday.…

9 stories from 6 sources in 6 hours ago ... #cybersecurity #software #open-source #infosec #datascience #digital-transformation #dataprivacy #techpolicy #cloudsec

Related Tags

MITRE CVE Program Funding Halt Imminence

Related Tags

Cybersecurity

Software

Open Source

IT Security

Data Science

Digital Transformation

Data Privacy

Tech Policy

Cloud Security