DEV Community

Cover image for CVE Program in Jeopardy: MITRE Contract Expiring, Cybersecurity Experts Sound the Alarm
Techi
Techi

Posted on • Originally published at techi.com

CVE Program in Jeopardy: MITRE Contract Expiring, Cybersecurity Experts Sound the Alarm

MITRE’s CVE Contract Set to Expire Cybersecurity at Risk

MITRE’s long-standing contract to manage the CVE program, crucial for tracking software vulnerabilities, is set to expire on April 16, 2025, with no confirmed renewal. This could disrupt how the U.S. government and cybersecurity experts identify, name, and respond to threats.

Experts warn that without CVE’s standardized framework, incident response and threat coordination could fragment, putting national security at risk. While MITRE promises historical CVE data will remain on GitHub, the lack of a cohesive future plan is alarming—especially with over 40,000 vulnerabilities reported in 2024 alone.

Industry leaders are calling this a wake-up call for the government to establish a more sustainable, long-term strategy for critical cybersecurity infrastructure.

Read Full Article here :- MITRE Contract Expires: CVE Program Plans To Turn Off

Top comments (0)