CVE Program

Though the Trump administration has generally had a poor relationship with CISA, there was never any real intent to defund the CVE program and that getting new funding in place has only been a matter of contract issues and some sort of “workflow” problem.

After an abrupt notice of the end of funding for the Common Vulnerabilities and Exposures (CVE) program caused a small panic in the cybersecurity world, it appears that a contract extension option exercised by CISA will keep it safe at least until March 2026.