
Exploit Evidence Should Move a Vulnerability to the Front of the Queue
A long vulnerability list is not a patch plan. When a flaw has credible evidence of exploitation, it should move ahead of issues that are severe only on paper. CISA maintains the Known Exploited Vulnerabilities Catalog to help defenders prioritise vulnerabilities being used in the wild.








