V Is for Vulnerability: Rescoring CVEs | Tanzu Platform 11.0
Originally aired live on November 6, 2026.
V is for Vulnerability—and episode 100! V Körbes joins Nick Kuhn and Keith Lee to explore CVE rescoring in Tanzu Platform 11.0. David Zendzian (DMZ) joins the discussion later in the show. Building on the previous episode’s Vulnerability Insights demo, they examine why a CVSS base score alone does not tell the whole story and how platform context informs the severity assessment.
- CVEs, CVSS vectors, and the difference between base severity and environmental context.
- How Tanzu Platform’s security controls inform vulnerability rescoring.
- A Vulnerability Insights walkthrough connecting findings to affected components and applications.
- Using context to prioritize triage, upgrades, and remediation.
Rescoring changes the severity assessment; it does not fix the underlying vulnerability. Product and security discussion reflects the original broadcast date.
Watch the original video replay and follow the on-screen demo
Episode 99: Vulnerability Insights—From Alert to Fix
CVSS reference from FIRST
Episode 99: Vulnerability Insights—From Alert to Fix
CVSS reference from FIRST
Cloud Foundry Weekly hosts: Nick Kuhn, Nicky Pike, Darin Zook, and Keith Lee.
Thanks for being part of 100 episodes! Watch, listen, and find show notes at cloudfoundryweekly.com.
