NIST is revising its approach to software vulnerability analysis due to overwhelming submissions. It plans to prioritize certain vulnerabilities for in-depth analysis and may delegate enrichment tasks to external organizations. A strategic review aims to clarify NIST's role, focusing on collaboration with partners while ensuring operational functions align with its research mission. This transition can lead to a significant reset in the National Vulnerability Database's processing and involvement in the broader CVE ecosystem.
https://www.cybersecuritydive.com/news/nist-cve-vulnerability-analysis-nvd-review/810300/