OIG audit flags NIST’s vulnerability database for backlog and duplicated effort
A Department of Commerce Office of Inspector General report found NIST’s National Vulnerability Database suffering from poor planning, a contract lapse, and duplicated work with MITRE, inflating a backlog from 13 000 to over 27 000 unprocessed vulnerabilities. Auditors call for new processes and staffing reforms to restore trust.