NATO Admiralty (AJP-2.1) grades confidence, independent of the risk score. Cross-source corroboration isn't tracked for non-CVE news, so single-source items are capped at a lower credibility number; a low number does not imply low quality.
The inclusion in the CISA KEV catalog proves real-world exploitation and thus more than a pure patch reminder: exposed SharePoint instances are at acute risk regardless of patch status.
The report summarizes three different vulnerabilities in Synology NAS that could allow arbitrary data to be read, without providing CVE details or indications of active exploitation.