actually kinda disappointing mitre was funded again. i saw a lot of talks about it and how CVEs in general are mishandled. I feel like the constant CVE stuff for things that are only a hypothetical exploit with no proof of concept is just https://en.wikipedia.org/wiki/Alarm_fatigue. You'll get some cve rated 6.8 but the actual chain is so hard it's not really that likely people would go that route (still needs to be patched but it's not the same as it being actively exploited in the wild)