Threat Feeds

A deduplicated CVE queue grouped by evidence-based patch priority. Patch priority is separate from vulnerability severity and does not include a made-up composite score.

• UrgentFull-catalog CISA known exploitation or a CVE-linked public exploit in the bounded Exploit-DB feed
• HighStrong EPSS signal or critical CVSS
• StandardElevated EPSS signal or high CVSS
• MonitorTrack and validate against your environment

Know the limits: This queue covers the current bounded CISA, NVD, Exploit-DB, and GitHub display snapshots—not every vulnerability in your environment. Every displayed CVE is correlated against the full current CISA KEV catalog. EPSS estimates exploitation activity in the next 30 days; it is not environmental risk. These cutoffs are Nine Lives triage rules, not official FIRST categories. CISA known-exploitation evidence or a CVE-linked public exploit takes precedence.