CISA Rebuffs Funding Concerns as CVE Foundation Draws Criticism