CISA extends funding to the CVE program (BleepingComputer)

Sergiu Gatlan reports
that the US government has extended funding for the Common
Vulnerabilities and Exposures (CVE) program, following yesterday's reports that funding
would run out as of April 16.

"The CVE Program is invaluable to cyber community and a priority of
CISA," the U.S. cybersecurity agency told BleepingComputer. "Last
night, CISA executed the option period on the contract to ensure there
will be no lapse in critical CVE services. We appreciate our partners'
and stakeholders' patience."

The article also mentions the launch of a CVE Foundation, to
transition the CVE program to a dedicated foundation and eliminate
"a single point of failure in the vulnerability management
ecosystem", as well as a European vulnerability
database (EUVD) backed by the European Union Agency for
Cybersecurity (ENISA). Details on these initiatives are scant at the
moment, and it is unclear whether restoration of funding will have any
impact on these efforts.