SecurityThe CVSS Blind Spot: Why a 2.7-Severity VMware Bug Became a China-Nexus Zero-Day
CISA's KEV addition for a near-zero-severity VMware ESXi logging bug that China-nexus actor Warp Panda used to erase its own tracks shows that CVSS measures the wrong thing for an attacker who is already inside.