NIST updated their NVD operations. They will now prioritize CISA's KEV catalog, federal government software, and "critical software" defined in the Executive Order 14028 for faster enrichment.
They also will not assign their own severity scores to CVEs that received a score from CNAs.
AI CVEs took a toll on them, it seems like.
NIST Updates NVD Operations to Address Record CVE Growth
NIST is changing the way it handles cybersecurity vulnerabilities and exposures, or CVEs, listed in its National Vulnerabilit
NIST (www.nist.gov)
#cybersecurity #cve #security #nist #cisa #cna #vulnerability #vulnerabilitymanagement #ai
