Federal Register #NIST20260100

RFI: Modernizing the National Vulnerability Database with AI and Machine-Readable Security Data

This opportunity is a Request for Information (RFI) from the National Institute of Standards and Technology (NIST), under the Department of Commerce, seeking stakeholder input to modernize the National Vulnerability Database (NVD). - Government Buyer: - Department of Commerce - National Institute of Standards and Technology (NIST) - Purpose: - Gather perspectives, recommendations, and innovative models to enhance the NVD - Focus areas include scalability, automation, interoperability, transparency, and utility - Emphasis on integrating artificial intelligence (AI) and machine-readable security data - Products/Services Requested: - No specific products, part numbers, or quantities requested - Solicitation is for stakeholder feedback and technical recommendations - Unique/Notable Requirements: - Input on vulnerability management processes, information dissemination, risk assessment, remediation, and data standards - Interest in AI-enabled tools and automation for vulnerability data - Seeks models to improve NVD's technical architecture and future planning - OEMs and Vendors: - No OEMs or vendors specified, as this is an RFI for information only

Description

The National Institute of Standards and Technology (NIST) operates the National Vulnerability Database (NVD), a U.S. government repository of standards-based vulnerability management data. NIST is seeking stakeholder input on opportunities, challenges, and priorities for modernizing the NVD in the context of evolving cybersecurity threats influenced by artificial intelligence (AI) and machine-consumable security data. The goal is to enhance the NVD's scalability, automation, interoperability, transparency, and utility. Comments are requested by October 13, 2026, to inform future strategic planning and technical decisions related to the NVD's evolution.

View original listing