MITRE's CVE program given last-minute reprieve