Incidents Connecting…
Every exploited flaw that touched the estate
One row per KEV entry that matched Mercy Valley's inventory, with the exposure clock from the moment it reached the advisory store.
ProblemA KEV match alone doesn't say whether this hospital is actually at risk.
SolutionEach incident records the evidence, the decision and the proof, or why nothing was changed.
Why it mattersAn MSSP has to show a hospital exactly what was touched and why.
How it's usedClick a row to open its evidence, refusal, decision, verification and agent trace.
| Incident | Advisory | Asset · route | State | Control | Exposure clock | Opened |
|---|---|---|---|---|---|---|
| INC-0006 Replay of a real KEV entry | CVE-2025-55182 Meta React Server Components KEV Dec 5, 2025 | Patient portal /portal/messages | ✓ CONTAINED | BG-CTL-PORTAL-REQUIRE-SESSION-FOR-ACTIONS | 0:40 | Jan 1, 2000 04:24:17 UTC |
| INC-0015 Replay of a real KEV entry | CVE-2025-55182 Meta React Server Components KEV Dec 5, 2025 | Patient portal /portal/messages | ✓ CONTAINED | BG-CTL-PORTAL-REQUIRE-SESSION-FOR-ACTIONS | 1:26 | Oct 9, 2026 20:01:05 UTC |
| INC-0012 Replay of a real KEV entry | CVE-2025-55182 Meta React Server Components KEV Dec 5, 2025 | Patient portal /portal/messages | ✓ CONTAINED | BG-CTL-PORTAL-REQUIRE-SESSION-FOR-ACTIONS | 0:41 | Jan 1, 2000 05:15:59 UTC |
| INC-0007 Replay of a real KEV entry | CVE-2026-88779 Citrix NetScaler KEV Oct 4, 2026 | Remote access gateway /vpn/nitro/v1/config | ✓ CONTAINED | BG-CTL-VPN-BLOCK-PUBLIC-MGMT | 0:51 | Jan 1, 2000 04:27:57 UTC |
| INC-0008 Replay of a real KEV entry | CVE-2026-102489 Zammad GmbH Zammad KEV Oct 2, 2026 | Patient help desk /support/api/v1/signshow | ✓ CONTAINED | BG-CTL-SUPPORT-DISABLE-SESSION-API | 0:33 | Jan 1, 2000 04:28:50 UTC |
| INC-0011 Replay of a real KEV entryFault injected: stale inventory | CVE-2025-55182 Meta React Server Components KEV Dec 5, 2025 | Patient portal /portal/messages | ✓ CONTAINED | BG-CTL-PORTAL-REQUIRE-SESSION-FOR-ACTIONS | 1:03 | Jan 1, 2000 04:29:42 UTC |
| INC-0009 Replay of a real KEV entry | CVE-2026-87902 WordPress Core KEV Sep 25, 2026 | Public website /site/xmlrpc.php | – NO ACTION · WATCH ARMED | — | — | Jan 1, 2000 04:29:27 UTC |
| INC-0010 Replay of a real KEV entry | CVE-2026-87491 Google Chromium V8 KEV Sep 9, 2026 | Staff browsers no edge | – ADVISORY ONLY | — | — | Jan 1, 2000 04:29:41 UTC |