--- title: Risky Bulletin: NIST gives up enriching most CVEs description: NIST has announced it will no longer enrich all CVEs in the National Vulnerability Database (NVD), instead focusing only on vulnerabilities listed in CISA's... canonical: https://daily.dev/posts/risky-bulletin-nist-gives-up-enriching-most-cves-stuk0hbfs twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Risky Bulletin: NIST gives up enriching most CVEs | daily.dev og:description: NIST has announced it will no longer enrich all CVEs in the National Vulnerability Database (NVD), instead focusing only on vulnerabilities listed in CISA's... og:url: https://daily.dev/posts/risky-bulletin-nist-gives-up-enriching-most-cves-stuk0hbfs og:image: https://api.daily.dev/og/posts/stUk0hBFS.png og:image:alt: Risky Bulletin: NIST gives up enriching most CVEs og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Risky Bulletin: NIST gives up enriching most CVEs **[Hacker News](https://daily.dev/sources/hn)** · 20 min read · 0 upvotes · 0 comments ## Summary NIST has announced it will no longer enrich all CVEs in the National Vulnerability Database (NVD), instead focusing only on vulnerabilities listed in CISA's Known Exploited Vulnerabilities catalog, software used by US federal agencies, and software classified as 'critical.' The agency also announced it will stop providing its own CVSS severity scores, instead showing scores assigned by the CVE-issuing organization. This policy change, effective April 15, 2026, is a response to budget constraints and an explosion in CVE volume (48,000+ in 2025 alone). The move has significant implications for vulnerability management vendors who relied on NVD data, and raises concerns about score manipulation by software vendors. The newsletter also covers numerous other cybersecurity incidents, threat intel reports, new tools, and policy developments. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Similar posts on daily.dev - [NIST Enrichment Reductions Impact CVE Coverage, Accuracy](https://daily.dev/posts/nist-enrichment-reductions-impact-cve-coverage-accuracy-fthy2krrj) · Dark Reading · 0 upvotes · 0 comments - [NVD in the AI Era: Multi-Source Vulnerability Intelligence](https://daily.dev/posts/nvd-in-the-ai-era-multi-source-vulnerability-intelligence-6fw0srlao) · Snyk · 0 upvotes · 0 comments - [NIST Narrows the NVD: What Container Security Programs Should Reassess](https://daily.dev/posts/nist-narrows-the-nvd-what-container-security-programs-should-reassess-frzvnryx5) · Docker · 1 upvotes · 0 comments - [AI Is Accelerating Vulnerability Discovery. Can Defenders Keep Up?](https://daily.dev/posts/ai-is-accelerating-vulnerability-discovery-can-defenders-keep-up--dmbfjzein) · BleepingComputer · 0 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#cyber](https://daily.dev/tags/cyber) [View this post on daily.dev](https://daily.dev/posts/risky-bulletin-nist-gives-up-enriching-most-cves-stuk0hbfs) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Risky Bulletin: NIST gives up enriching most CVEs","url":"https://daily.dev/posts/risky-bulletin-nist-gives-up-enriching-most-cves-stuk0hbfs","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/risky-bulletin-nist-gives-up-enriching-most-cves-stuk0hbfs"},"datePublished":"2026-04-17T18:09:09.298Z","dateModified":"2026-04-19T14:29:10.549Z","description":"NIST has announced it will no longer enrich all CVEs in the National Vulnerability Database (NVD), instead focusing only on vulnerabilities listed in CISA's...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/083550ea4e7d5ad48a5b5b45c40a83f8?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/083550ea4e7d5ad48a5b5b45c40a83f8?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Hacker News","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Hacker News","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/hn","url":"https://daily.dev/sources/hn"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/risky-bulletin-nist-gives-up-enriching-most-cves-stuk0hbfs","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,cyber","timeRequired":"PT20M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Hacker News","item":"https://daily.dev/sources/hn"},{"@type":"ListItem","position":3,"name":"Risky Bulletin: NIST gives up enriching most CVEs"}]} ```