Every tracked finding that governed independent research or a vendor PSIRT confirmed before CISA KEV listed it — with evidence class, validation level, exposure, patch state, KEV status and full provenance. Nothing on this page reaches the ICHI score.
⚠
Observation only · not scored. A pre-KEV finding records that a governed source confirmed exploitability ahead of KEV listing; it is not a prediction that KEV will list it, and it never reaches computeCTI. Internet exposure is shown only where ICHI's own exposure telemetry confirms an exposed population — an edge product with unknown exposure is reported as unknown, never as exposed. See methodology →