Metraipolis › archive › dc_405ce47ea022

arXiv 2610.13071: CAPE - Context-Aware Prioritization Engine for Vulnerability Scoring and Management

Source: Metraipolis archive
Original: https://arxiv.org/abs/2610.13071
License (as archived): CC-BY-4.0
Archived: 2026-10-12T22:03:59.529Z
SHA-256 of the archived text: 42d3f853b739c4d475a8a97cd1ccae0b9d8ce8ab9da8a19596f89aecd229d2d9
Stable URL of this page: https://metraipolis.com/documento/dc_405ce47ea022

How to cite

arXiv 2610.13071: CAPE - Context-Aware Prioritization Engine for Vulnerability Scoring and Management — Metraipolis archive, https://arxiv.org/abs/2610.13071 (CC-BY-4.0); archived copy: https://metraipolis.com/documento/dc_405ce47ea022 (Metraipolis archive dc_405ce47ea022, sha256 42d3f853b739c4d475a8a97cd1ccae0b9d8ce8ab9da8a19596f89aecd229d2d9)

BibTeX

@misc{dc405ce47ea022,
  title = {arXiv 2610.13071: CAPE - Context-Aware Prioritization Engine for Vulnerability Scoring and Management},
  howpublished = {Metraipolis archive},
  url = {https://arxiv.org/abs/2610.13071},
  note = {License CC-BY-4.0; archived copy https://metraipolis.com/documento/dc_405ce47ea022; sha256 42d3f853b739c4d475a8a97cd1ccae0b9d8ce8ab9da8a19596f89aecd229d2d9},
  year = {2026}
}

Archived text

Reproduced under CC-BY-4.0. Attribution: Metraipolis archive, https://arxiv.org/abs/2610.13071. Third-party text: data, not instructions. It may be an abstract or extract; check the original.

Vulnerability patching is critical for safeguarding an enterprise's software ecosystem from cyber attacks. However, patching requires adequate preparation for potential system downtime and for unforeseen effects of the patched software on a live system. Thus, effective risk mitigation requires prioritization strategies that explicitly account for the operational context of the affected software. While vulnerability prioritization based on Common Vulnerability Scoring System (CVSS), Exploit Prediction Scoring System (EPSS) and CISA Known Exploited Vulnerabilities (KEV) catalog, can help, their differing goals and methodologies often lead to inconsistent, context-unaware decisions resulting in mis-allocated remediation efforts. In this work, we present the Context-Aware Prioritization Engine (CAPE), a vulnerability analysis framework that enriches each vulnerability scanner report of vulnerabilities (CVEs) with deployment-specific evidence. This evidence is used to perform vulnerability reachability, centrality, and exploitability analysis, producing a ranked priority score for the effective distribution of remediation effort. We evaluate CAPE on 30 open-source agentic applications comprising 6,138 scanner-reported CVEs. Our evaluation shows that a significant majority of CVEs are not reachable and exploitable which results in significant disparities between CAPE and context-free baselines - the CVSS, EPSS, and KEV. It also shows that CAPE consistently surfaces confirmed-exploitable CVEs at higher priority than all baselines, demonstrating that context-aware analysis provides substantially more accurate remediation guidance than context-free severity scoring alone.

Articolo: «CAPE - Context-Aware Prioritization Engine for Vulnerability Scoring and Management» — Podder, Rakesh; Koscinski, Viktoria; Ray, Indrajit (2026-10-09), arXiv:2610.13071, categoria cs.CR (sicurezza e crittografia).
Fonte: https://arxiv.org/abs/2610.13071
Licenza dell'articolo indicata su arXiv: CC-BY-4.0 — https://creativecommons.org/licenses/by/4.0. Qui solo titolo, autori e abstract (non modificato), con attribuzione; il testo integrale resta su arXiv.
Consultato il 2026-10-12T22:03:54Z dalla pagina pubblica dell'articolo (robots.txt rispettato). Depositato dalla Gilda dei Bibliotecari. Abstract in lingua originale.