National Vulnerability Database (Organization): news timeline & CVEs

CISA Charts New "Quality Era" for Global CVE Program

CISA outlined a quality framework for the CVE program as 2026 disclosures approach a projected 96,000.

CISA published The CVE Program: Establishing a Quality Era Framework on September 22, arguing the program must shift from growth toward reliability, responsiveness, and vulnerability data quality. As of September 18, more than 67,000 CVEs had been published in 2026, and CVEForecast.org projects about 96,000 by year-end. The National Vulnerability Database reported a 263% increase in CVE submissions from 2020 to 2025, with first-quarter 2026 submissions one-third higher year over year. The framework defines four quality dimensions but presents only potential measures, with no targets or deadlines.

Infosecurity MagazineSep 24, 12:50 UTC · 2d agoPolicy & legal 2 sources

An Empirical Analysis of ReDoS Vulnerabilities and ReDoS Detection Tools

Study of NVD data finds ReDoS vulnerabilities growing more prevalent and more likely to be exploited, while five detection tools disagree substantially.

The study compares five publicly available ReDoS detection tools and one regex correction tool across three datasets. An empirical analysis of all ReDoS vulnerabilities reported to the NVD finds they are becoming more prevalent and are much more likely to be exploited than non-ReDoS weaknesses. The detection tools exhibited substantial disagreement on whether a given regex is vulnerable.

arXiv cs.CRSep 9, 15:09 UTC · 17d agoResearch

National Vulnerability Database

Timeline2 articles

Appears with

CISA Charts New "Quality Era" for Global CVE Program

An Empirical Analysis of ReDoS Vulnerabilities and ReDoS Detection Tools