Threats / Flares
Flares
When a wave of exploitation gets a community name, the name travels faster than the facts. A flare pins the name to its CVEs, the publishers who coined and reported it, how fast it went from disclosure to CISA KEV, and how far it carries an attacker. The name is always theirs, cited; the facts are templated from the records. KEV snapshot 2026-11-14.
No flare is approved for this snapshot.
A flare needs a cited community name (two independent publishers, or a CNA reference / vendor publication) and two-person approval — until then the bugs stay on their records and in the Breaking strip, unnamed.