Following the cessation of funding from CISA, will MITRE's CVE program secure a new long term funding source or model by the end of June, 2025?
This market resolves to ‘Yes’ if an official announcement from MITRE or a sponsor is made by that date; otherwise, it resolves to ‘No’. If a different company takes over the CVE system, this market also resolves to ‘No’. A one time lump some donation does not count as long term funding.
Background:
MITRE’s CVE system is the backbone of cyber security in industry and government, providing a system for tracking and identifying vulnerabilities in software. MITRE is responsible for allocating CVE numbers and CVEs may no longer be published.
https://www.theregister.com/2025/04/16/homeland_security_funding_for_cve/
https://therecord.media/cisa-extends-cve-program-contract-with-mitre
CISA has extended it's contract by 11 months, so I doubt that we will get an announcement of a long term sponsor by 2025. If people would like to weigh in on this I would be interested in hearing your opinions.
