I understand they had a base period through to August 17th 2025, with an option period to go from August 2025 to August 2026. Do we know if the extension means until 2025 or 2026?
The update comes just hours after a subset of the CVE Board said it plans to break off to maintain the CVE Program under a new body called the CVE Foundation. Unclear what happens next, but the new group could have a role in future contracting discussions: https://www.thecvefoundation.org/
CVE is a trademark of MITRE (that is mentioned on the CVE website), so either this is something created by MITRE or this foundation has gotten off the ground engaging in trademark infringement.
Either option seems like a problem, as MITRE isn't disclosed as being involved in this.
Comments
Endless government shutdowns, contracts being held... the world can't rely on this. It's too unstable.
https://www.thecvefoundation.org/
Either option seems like a problem, as MITRE isn't disclosed as being involved in this.