一句话：通过主题分析与社区调查，揭示 CVE 生态系统对各方参与者的负面影响及内在问题，并提出改进建议。
该研究关注 CVE（Common Vulnerabilities and Exposures）系统虽在全球网络安全漏洞标识与编目中起关键作用，但近期事件暴露其潜在缺陷，且社区对参与者受影响程度及生态内具体问题缺乏系统理解。作者从 Reddit、LWN.net、GitHub 等来源广泛收集博客、社区讨论与编辑文章，采用主题分析方法识别 CVE 生态对各类参与者的负面影响及内在问题，并通过 77 人社区调查进行验证。结果首次全面梳理并阐释了可能导致这些影响的问题，并基于发现提出缓解现有问题、提升 CVE 生态效率与健康的系列启示。
The Common Vulnerabilities and Exposures (CVE) system plays a critical role in global cybersecurity by standardizing the identification and cataloging of software and hardware vulnerabilities. However, recent high-profile incidents highlight the potential pitfall of the system, indicating the space for improvement. Despite significant interests in and substantial studies on CVE system, there is a lack of understanding to what extent the participants are impacted, and what problems are exactly in the CVE ecosystem. To bridge the knowledge gap, we extensively collect blog posts, community discussions, and editorial articles from various sources, including Reddit, LWN.net, and GitHub, and employ a thematic analysis approach to identify the perceived adverse impact on participants as well as the inherent problems within the CVE ecosystem. Then we conducted a community survey with 77 participants for verification. The results unveil the impacts on various participants within the prevailing CVE ecosystem and for the first time comprehensively trace and elucidate the problems that may cause these impacts. Based on the findings and survey results, we propose a series of implications to mitigate existing problems within the CVE ecosystem, aiming to enhance its efficiency and health.