KEV + Critical EPSS ≥ 50% Critical + PoC No Auth + Critical XSS (CWE-79) SQLi (CWE-89) Code Injection KEV + Has PoC