Just an ad for their vulnerability tracking product with a clickbait title. Doesn’t even list a single “vulnerability” with any sort of impact that might have been missed. Flagged.

The article mentions two endpoints that mention about all those vulnerabilities. It's not a just an article with click-bait title.

Why is this on NIST when this is entirely the NSAs wheel house?

CVE & NVD Management isn't responsibility of NSA but just MITRE & NIST. NSA's roles are mostly around stuffs like Signals Intelligence & offensive cybersec capabilities maybe. It does collaborate with other domestic agencies for protecting critical infrastructures i think. Not sure.