The new system emerges after repeated funding crises exposed the fragility of the 25-year-old CVE program that cybersecurity defenders worldwide depend on.

The fractured ecosystem is having a chilling effect on vulnerability research.