NIST Shifts CVE Priorities After Surge in Submissions

The National Institute of Standards and Technology is changing how it prioritizes software vulnerabilities in the National Vulnerability Database after a surge in CVE submissions. The agency is moving to a triage model that gives priority to vulnerabilities already being exploited in the wild and to flaws affecting critical software.

The shift marks a change for security teams that had relied on the database as a more comprehensive source of CVE details. NIST is now focusing on known exploited vulnerabilities first rather than trying to keep pace with every reported CVE.