FOR IMMEDIATE RELEASE April 16,2025 CVE Foundation Launched to Secure the Future of the CVE Program Bremerton, Washington] - The CVE Foundation has been formally established to ensure the long-term viabily, stability, and independence of the Common Vulnerabilities and Exposures (CVE) Program, a critica pillar of the global cybersecurity infrastructure for 25 years. Since ts inception, the CVE Program has operated as U.S. government. funded nitive, with oversight and management provided under contact. While ths structure has supported the prograny’s growth, it has alo raised longstanding concems among members of the CVE Board shout the sustainability and neutrality of globally relicd-upon resource being ted 0 a single ovemment sponsor. “This concern has become urgent following an April 15, 2025 leter from MITRE notifying the ‘CVE Board that the U.S. government docs not intend 0 renew ts contract for managing the program. While we had hoped this day would not come, we have been preparing fo this possibility. In response, a coalition of longtime, active CVE Bosrd members have spent the past year developing a strategy o transition CVE to dedicated, non-profit foundation. The news CVE. Foundation wil focus solly on continuing the mission of delivering high-quality vulnerability identification and maintaining th integrity and availabilty of CVE data for defenders worldwide,
https://media.infosec.exchange/infosec.exchange/media_attachments/files/114/348/289/245/954/517/original/c772e17d6525f817.png