The near-shutdown of MITRE’s CVE program revealed a global cybersecurity blind spot. What went wrong here and why the world must share the burden.