https://patchvex.com Security research, CVE breakdowns, and engineering articles from PatchVex. en-us hello@patchvex.com (PatchVex) hello@patchvex.com (PatchVex) Fri, 18 Sep 2026 19:58:55 GMT https://patchvex.com/og-default.png https://patchvex.com https://patchvex.com/blog/cvss-vs-epss-vs-cisa-kev https://patchvex.com/blog/cvss-vs-epss-vs-cisa-kev Three vulnerability signals, three different questions. A practical guide to what CVSS, EPSS, and CISA KEV each measure, how they disagree, and how to combine them into a real prioritization workflow. Fri, 21 Aug 2026 00:00:00 GMT PatchVex Engineering CVSSEPSSCISA KEVVulnerability ManagementVulnPilotVulnerability Prioritization https://patchvex.com/blog/what-is-cisa-kev https://patchvex.com/blog/what-is-cisa-kev CISA's Known Exploited Vulnerabilities catalog tracks CVEs with confirmed active exploitation. Here's what it is, why it's the strongest remediation signal available, and how to use it alongside CVSS. Fri, 21 Aug 2026 00:00:00 GMT PatchVex Engineering CISA KEVCVSSVulnerability ManagementVulnPilot https://patchvex.com/blog/what-is-epss-score https://patchvex.com/blog/what-is-epss-score EPSS predicts the probability a CVE will be exploited in the next 30 days. Here's what the score actually represents, how it differs from CVSS, its limitations, and how to use it in prioritization. Fri, 21 Aug 2026 00:00:00 GMT PatchVex Engineering EPSSCVSSCISA KEVVulnerability ManagementVulnPilot https://patchvex.com/blog/security-checks-for-ai-built-apps https://patchvex.com/blog/security-checks-for-ai-built-apps LLMs write functional code fast. They also reproduce the same security gaps consistently. Here's what to check before you ship an app built with Cursor, Claude, or Copilot. Sat, 20 Jun 2026 00:00:00 GMT PatchVex Engineering AI CodingCursorClaude CodeSecurity HeadersAPI KeysLaunch Checklist https://patchvex.com/blog/why-cvss-alone-is-not-enough https://patchvex.com/blog/why-cvss-alone-is-not-enough CVSS scores severity if exploited — not whether anyone is. Here's how CISA KEV and EPSS close that gap, with a practical composite scoring model. Sat, 15 Nov 2025 00:00:00 GMT PatchVex Engineering CVSSEPSSCISA KEVVulnerability ManagementVulnPilot