CISA issued a statement that it execution an option on its contract with MITRE to continue funding the CVE program.