A researcher can describe it as critical in text
But CVE scoring has a real methodology with various frameworks and takes time to do properly, just have a look at the NIST CVSS calculator
https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator
A valid critical 9+ cve score is more science than propaganda
can it be that some of the redteam's critical vulnerabilities found are actually 7 or 8 cve? yes possible, but those are sill valid vulns to patch
npub1jj…snhpx
2026-08-07 09:02:24 UTC
in reply to nevent1q…hvte
Author Public Key
npub1jj9u5wlpm7427u6y65ytqrpwcq9taqjk34v9apxjjfytt9tdm5ks9snhpxSeen on
wss://nostr.momPublished at
2026-08-07 09:02:24 UTCEvent JSON
{
"id": "1dc28db27eb9cc0bc17259c4160a54763c72307117e12f12a9fb231b250e1da7",
"pubkey": "948bca3be1dfaaaf7344d508b00c2ec00abe82568d585e84d29248b5956ddd2d",
"created_at": 1786093344,
"kind": 1,
"tags": [
[
"e",
"8c132b89cd9bfcfc4844e86a28d278549a2007529d48f2f69716d14750c17ca6",
"wss://nos.lol/",
"root",
"52b4a076bcbbbdc3a1aefa3735816cf74993b1b8db202b01c883c58be7fad8bd"
],
[
"e",
"43db1acec3a73cc6ffcfc6edb05e8661c12c94f5fdd4d84ef7ecfcdf1d5339f4",
"wss://nostr.mom/",
"",
"948bca3be1dfaaaf7344d508b00c2ec00abe82568d585e84d29248b5956ddd2d"
],
[
"e",
"b29249ec0fa772c11f0a77e1eacc52705b8f4d0d53a2b43daebc0a6fae8628ce",
"wss://nostr.land/",
"reply",
"52b4a076bcbbbdc3a1aefa3735816cf74993b1b8db202b01c883c58be7fad8bd"
],
[
"p",
"948bca3be1dfaaaf7344d508b00c2ec00abe82568d585e84d29248b5956ddd2d",
"wss://nos.lol/"
],
[
"p",
"52b4a076bcbbbdc3a1aefa3735816cf74993b1b8db202b01c883c58be7fad8bd",
"wss://nostr.land/"
],
[
"r",
"https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator"
],
[
"client",
"Amethyst"
]
],
"content": "A researcher can describe it as critical in text\n\nBut CVE scoring has a real methodology with various frameworks and takes time to do properly, just have a look at the NIST CVSS calculator\n\nhttps://nvd.nist.gov/vuln-metrics/cvss/v3-calculator\n\nA valid critical 9+ cve score is more science than propaganda\n\ncan it be that some of the redteam's critical vulnerabilities found are actually 7 or 8 cve? yes possible, but those are sill valid vulns to patch",
"sig": "cca88c95bbfa9ee9d6520c112a36f1a4b0e25e7fa8f395b98ac3ef2e8939b0fedc4f3a08392a234f5c975b17727cf54f27c07fd996eab902537dae6ca8bab614"
}