NIST is cataloging so many vulnerabilities it can only assign severity scores to the highest priority threats

Concept art representing cybersecurity principles.

• NIST changes enrichment process for National Vulnerability Database due to surge in CVE submissions
• 263% increase since 2020; prioritization now given to KEV entries, federal software, and critical software under EO 14028
• Other CVEs deemed “lowest priority,” but users can request enrichment via email if needed

The number of reported vulnerabilities has surged so sharply that it forced the National Institute of Standards and Technology (NIST) to change how it ‘enriches’ each entry.