The real problem with vulnerability classification is that mitre=bad

https://daniel.haxx.se/blog/2026/06/24/a-cve-dispute/