CISA Extends Funding to Support MITRE’s Critical CVE Program
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has announced the continuation of government funding for the Common Vulnerabilities and Exposures (CVE) program, securing its ongoing operations.
We reported earlier today that the U.S. government would not renew MITRE’s contract, ending on April 16th 2025.
Without funding, the CVE system would have faced potential shutdown, significantly impacting vulnerability tracking and coordination across the cybersecurity community.
“Since its inception, the CVE Program has operated as a U.S. government-funded initiative,” the group noted in a press release. “While this model has supported the program’s growth, it has raised longstanding concerns about the stability of a globally relied-upon resource being tied to a single government sponsor.”
Although details of the foundation’s transition plan are anticipated soon, the long-term direction remains unclear—particularly with CISA’s extension of MITRE’s current contract.
I am one of the editors here at www.systemtek.co.uk I am a UK based technology professional, with an interest in computer security and telecoms.