On April 16, a foundational piece of the world’s cybersecurity infrastructure may quietly grind to a halt.
MITRE’s stewardship of the Common Vulnerabilities and Exposures program—a backbone of coordinated vulnerability disclosure for more than two decades—is facing an uncertain future as its U.S. Department of Homeland Security contract expires. Without confirmed renewal or replacement, the industry risks entering a period of dangerous opacity in vulnerability tracking.
For the cybersecurity community, this isn’t a minor bureaucratic lapse. It’s a five-alarm fire.
www.forbes.com
MITRE’s stewardship of the Common Vulnerabilities and Exposures program—a backbone of coordinated vulnerability disclosure for more than two decades—is facing an uncertain future as its U.S. Department of Homeland Security contract expires. Without confirmed renewal or replacement, the industry risks entering a period of dangerous opacity in vulnerability tracking.
For the cybersecurity community, this isn’t a minor bureaucratic lapse. It’s a five-alarm fire.

Cybersecurity World On Edge As CVE Program Prepares To Go Dark
MITRE’s CVE program may shut down as DHS funding expires, threatening global cybersecurity coordination and exposing critical gaps in vulnerability tracking.
