Unless it's a critical CVE, they're worth very little now for your career.

Same for a lot of side projects or small contributions to OSS, people are still chasing them and wasting everyone's time for nothing. They wouldn't even work on them before AI.

If there is a CVE is has value to your career. You have public recognition that you found one which means someone looking for someone to hire will find you. In turn you are more valuable because a few people are looking. If you company wants to keep you they better give you a proactive raise.

Until it is common to verify the quality of the CVE the above will remain true. Perhaps the CVE system needs a "shame" system so that potential hiring manages find you on the list of incompetent people not to hire. (undoubtedly libel laws will make this impossible)