Why the CVE database for tracking security flaws nearly went dark - and what happens next
Briefly

Security experts expressed concern over the US government's initial decision not to renew funding for MITRE's Common Vulnerabilities and Exposures (CVE) database, essential for tracking security flaws. Without this funding, many systems—including incident response and critical infrastructure—could face serious setbacks. Thankfully, MITRE has secured funding for an additional 11 months. The CVE program, operational since 1999, catalogs over 274,000 security vulnerabilities and is crucial for communication among security teams and software vendors globally.
"Think of the CVE system like the Dewey Decimal System for cybersecurity. Without it, everyone is using a different catalog or no catalog at all."
"MITRE's VP Yosry Barsoum warned that the government contract support for CVE would expire soon, leading to multiple impacts to national vulnerability databases and critical infrastructure."
Read at ZDNET
[
|
]