While the last-minute extension averts an immediate lapse in support, rival organizations are being stood up to supplant the global vulnerability system.