Why CVEs are an Incentives Problem

Experts argue that the current incentive structure for reporting CVEs is flawed, leading to suboptimal reporting. This problem is attributed to the fact that the incentives are often aimed at individual gains rather than overall system security.