CISA outlines improvement plan for CVE program
CISA published a white paper to improve CVE quality as disclosure volume surges.
CISA published a white paper describing a "Quality Era" for the CVE program after more than 67,000 CVEs were published in 2026 and NIST NVD submissions rose 263% between 2020 and 2025. The plan focuses on governance, broader participation, supporting data infrastructure, and more reliable CVE record content. Acting cybersecurity lead Chris Butera said CISA intends to keep operating the program and invited community feedback. Researchers welcomed the goals but said the paper does not yet fix missing machine-readable software identifiers or publish today's quality metrics.
- More than 67,000 CVEs were published in 2026 as of last week
- NIST NVD submissions rose 263 percent from 2020 to 2025
- Plan covers governance, participation, infrastructure, and record content
- Experts say many CVEs still lack machine-readable software identifiers
- Countries
- United States
From the original article
4 min read at cyberscoop.com
The white paper is the latest step in trying to create a “Quality Era” for the Common Vulnerabilities and Exposures (CVE) program as the number of CVEs surges. The post CISA outlines improvement plan for CVE program appeared first on CyberScoop.
By Tim Starks · cyberscoop.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.