Security News Why CVSS Scores Don't Tell the Real Story of Risk TheHackerNews Daniel Bender 09 Mar 2026 CVSS severity scores often mislead vulnerability prioritization when business context is ignored, leaving critical exposures unresolved.