CVE & NVD Management isn't responsibility of NSA but just MITRE & NIST. NSA's roles are mostly around stuffs like Signals Intelligence & offensive cybersec capabilities maybe. It does collaborate with other domestic agencies for protecting critical infrastructures i think. Not sure.