NIST NVD Enrichment Policy Change: Prioritizing Vulnerabilities with Attacker Behavior Signals
As of April 15, 2026, NIST enriches only CVEs that appear in the CISA Known Exploited Vulnerabilities catalog, federal government software, or software designated critical…