CVSSv4 Public Preview Announcement | Qualys
Summary: The public preview of CVSSv4 was announced on June 8, 2023, at the 35th Annual FIRST Conference in Montreal, introducing changes from CVSSv3.1 including a new optional Supplemental Metric Group, renaming of Temporal to Threat Metrics, retirement of the Remediation Level and Report Confidence metrics, and retirement of the Scope metric in favor of two sets of impact metrics. The new Attack Requirement metric adds granularity beyond Attack Complexity, and User Interaction now distinguishes Passive from Active interaction.
Key Takeaway: The article notes that CVSS scores can vary as more variables are introduced, and that the metric truly missing from CVSS 4.0 is evidence of exploitation - so a score alone still does not tell you whether a vulnerability is being exploited in the wild.
Read the original at Qualys Blog ↗
- Topics
- Detection & Response
- Related
- YARA-X 1.23.0 Release, (Sun, Nov 15th) Cyber Risks · Nov 15, 2026Inside Falcon AI Gateway: One Control Point for AI Traffic Cyber Risks · Nov 13, 2026Macfinger Click Fix campaign sends Down TheDRAIN infostealer for macOS, (Fri, Nov 13th) Cyber Risks · Nov 13, 2026