CVE & NVD Management isn't responsibility of NSA but just MITRE & NIST. NSA's roles are mostly around stuffs like Signals Intelligence & offensive cybersec capabilities maybe. It does collaborate with other domestic agencies for protecting critical infrastructures i think. Not sure.

The article mentions two endpoints that mention about all those vulnerabilities. It's not a just an article with click-bait title.