CVE board 'kept in the dark' on funding, members say : What next for US-bankrolled vulnerability tracker? It's edging closer to a more independent, global future

www.theregister.com/2025/04/25/c...

BTW, just for the record, this is currently @mzmegazone.bsky.social behind the keyboard. (Multiple people can puppet this account.)

As for the trademark - many different entities use 'CVE' in different ways. The goal is to migrate the CVE Program under The CVE Foundation, and we'd be happy to have MITRE involved. There is a lot that has to happen outside of the public eye and we can't comment on all the details.

Also note it is *not* the 'MITRE CVE Program', this is misconception we run into a lot. The CVE Program has an independent Board. MITRE is contracted to provide the infrastructure and services that run the program, and they are a CNA, but they do not 'own' the program.

A majority of the CVE Program Board is involved with The CVE Foundation. The CVE Foundation is an independent 501(c)(3) non-profit. The goal is to move the Program under the auspices of the Foundation to remove the single point of failure of US government funding. But a lot has to happen.

CVE Foundation - Frequently Asked Questions What do you believe? We believe that CVEs are the cornerstone of cybersecurity defense. Without a common language to communicate about vulnerabilities, chaos follows. This is why the CVE Program was c...

We are working as fast as we can to address questions, while we understand there is a lot of confusion we are working to address concerns. FAQ Updated: www.thecvefoundation.org/frequently-a...

CVE Foundation - Frequently Asked Questions What do you believe? We believe that CVEs are the cornerstone of cybersecurity defense. Without a common language to communicate about vulnerabilities, chaos follows. This is why the CVE Program was c...

See updated FAQ www.thecvefoundation.org/frequently-a...

Done. Sorry that took a few days. 🙂

CVE Foundation - Frequently Asked Questions What do you believe? We believe that CVEs are the cornerstone of cybersecurity defense. Without a common language to communicate about vulnerabilities, chaos follows. This is why the CVE Program was created 25 years ago and it is even more true today. We believe in a free, publicly available

Hi Folks, more info about our federation here. www.thecvefoundation.org/frequently-a...

Because we all have day jobs and we are all taking personal risk to encourage long term solution that provide community participation and stability.

❤️❤️❤️

MITRE is not involved. We are a community driven group of folks that understand the importance of CVE and stability.

CVE Foundation FOR IMMEDIATE RELEASE April 16, 2025 CVE Foundation Launched to Secure the Future of the CVE Program [Bremerton, Washington] – The CVE Foundation has been formally established to ensure the long-term ...

www.thecvefoundation.org