Cybersecurity Advances

Current Issue

Vol. 3 No. 1 (2026): 2026: Vulnerability Intelligence in Operational Systems

Cybersecurity Advances, Volume 3, Issue 1, 2026 cover for 2026: Vulnerability Intelligence in Operational Systems.

Volume 3, Issue 1 (2026) of Cybersecurity Advances presents twelve original research articles on vulnerability intelligence in operational systems. The collection examines EPSS model transitions, OSV identifier resolution, remediation endpoints and severity metadata, VEX interoperability and aging, KEV entry lag, the NVD enrichment backlog, cross-source consistency, public exploit evidence, LLM-assisted advisory extraction, and operational-technology advisory staleness.

Published on 30 October 2026, the issue contains continuously paginated articles on pages 1–93. Articles are immediately open access under the Creative Commons Attribution 4.0 International licence (CC BY 4.0).

Published: 2026-10-30

Articles

Queue Shock at Model Upgrades: A Longitudinal Audit of EPSS v2–v5 Rank Stability and Prioritization Workload

Ning Lu, Deris Stiawan (Author)

1–11
- PDF
Beyond One-Hop Aliases: Measuring Identifier-Resolution Fragmentation in the OSV Vulnerability Graph Across Six Package Ecosystems

Stjepan Picek, Huyen Trang Phan (Author)

12–21
- PDF
Where Is the Fix? A Cross-Ecosystem Census of Machine-Actionable Remediation Endpoints in OSV

Fabrizio Pastore, Norrathep Rattanavipanon (Author)

22–30
- PDF
Severity Without a Common Scale: A Cross-Ecosystem Census of Machine-Readable Severity Signals in OSV

Vesa Kuikka, Gianfranco Nencioni (Author)

31–39
- PDF
Cross-Format Semantic Preservation in Vulnerability Exploitability Exchange: A Conformance and Round-Trip Benchmark of OpenVEX 0.2.0, CycloneDX 1.6, and CSAF 2.0

Ruxandra F. Olimid, Yi-Chun Yang (Author)

40–50
- PDF
From Listing to Exploitation: Measuring KEV Entry Lag and Coverage Against Post-2024 Exploitation Evidence

M. F. Mridha, Taeshik Shon (Author)

51–56
- PDF
The Enrichment Gap: A Longitudinal Audit of the NVD Backlog and Its Propagation Through Downstream Vulnerability Feeds

Risto Vaarandi, Surafel Lemma Abebe (Author)

57–63
- PDF
Five Feeds, One Truth? Cross-Source Consistency of Fix Status, Severity, and Identifier Mapping Across GHSA, NVD, and OSV

Jan G. Bazan, Ibrahim Gad (Author)

64–69
- PDF
Do VEX Claims Age Well? Longitudinal Validation of 'Not Affected' and 'Fixed' Statements Against Subsequent Exploitation Evidence

Yan Xiao, Bo Li (Author)

70–75
- PDF
Proof-of-Concept Debt: Measuring the Timeliness and Noise of Public Exploit Disclosure as Exploitation Intelligence

Ning Lu, Deris Stiawan (Author)

76–81
- PDF
Machine-Reads the Advisory: Benchmarking LLM Extraction of Affected-Product Ranges and Fix Information Against Curated Records

Jing Sun, Mohamed Jamal Zemerly (Author)

82–87
- PDF
Advisory Staleness in Operational Technology: Measuring Coverage and Latency of ICS/OT Vulnerability Intelligence for Critical Infrastructure

Ahmad Sami Al-Shamayleh, Madhusanka Liyanage (Author)

88–93
- PDF

View All Issues