Apply mitigations in accordance with vendor instructions, ensuring compliance with CISA’s BOD 26-04 Prioritizing Security Updates Based on Risk (see URL in Notes) guidance and CISA’s “Forensics Triage Requirements” (see URL in Notes). Follow applicable BOD 26-04 guidance for cloud services or discontinue use of the product if mitigations are unavailable. Stakeholders are responsible for… Due 24 Nov 2026(US federal deadline)
Fix status, versions and advisories from NVD; required actions from CISA. EPSS is FIRST’s estimate of the chance of exploitation in the next 30 days. Always confirm with the vendor advisory.
Why this score
Most trusted source
90
Independent organisations reporting it (2)
+5
Confirmed by an official source or CISA KEV
+10
Confidence
100 · Confirmed
We link to the original reporting and don’t reproduce it. Read the sources above for the full details.