Low Severity
CVE-2026-97229
Published: Nov 2, 2026
How good is your vulnerability triage? Score any prioritization method against real CISA KEV + FIRST EPSS data, replayed day by day with no future data.
# 🎯 triage-scorecard
**How good is your vulnerability triage, really?** Score any prioritization method against **real** public data, the CISA Known Exploited Vulnerabilities catalog (KEV) and FIRST's daily EPSS scores, replayed day by day with **no future data**.
[](https://github.com/milesgurule-png/triage-scorecard/actions/workflows/test.yml)   
Most teams pick a rule like "only CRITICAL" or "EPSS above 0.1" and hope. This tool shows what that rule actually costs you: how many alerts a day, how many known-exploited vulnerabilities it misses, and whether it warns you *before* a CVE is exploited.
<!-- kev-watch:start -->
## 🔴 KEV Watch (updates daily)
**10 of 15** vulnerabilities CISA confirmed as exploited in the last 14 days had an EPSS score under 0.1 the day before, so an "EPSS ≥ 0.1" filter would not have flagged them.
| Added to KEV | CVE | Vendor / product | EPSS day before | Percentile | EPSS ≥ 0.1? |
|---|---|---|---:|---:|:---:|
| 2026-10-30 | [CVE-2026-111357](https://nvd.nist.gov/vuln/detail/CVE-2026-111357) | Ivanti Connect Secure | 0.002 | 16.0% | ❌ missed |
| 2026-10-30 | [CVE-2026-118527](https://nvd.nist.gov/vuln/detail/CVE-2026-118527) | Ivanti Connect Secure | not scored | – | – |
| 2026-10-29 | [CVE-2026-76418](https://nvd.nist.gov/vuln/detail/CVE-2026-76418) | Cisco Secure Firewall ASA Software and Cisco Secure FTD Software | not scored | – | – |
| 2026-10-29 | [CVE-2026-97229](https://nvd.nist.gov/vuln/detail/CVE-2026-97229) | GitLab Community Edition and Enterprise Edition | 0.184 | 97.2% | ✅ flagged |
| 2026-10-28 | [CVE-2026-41709](https://nvd.nist.gov/vuln/detail/CVE-2026-41709) | Broadcom