if your entire security operation relies 100%, or even 'heavily' on cves, cve scanners, mitre mitre mitre, then youre in for a very rough ride.

its time to stop blindly using cve as a rail shooter for security, put on adult pants, and start looking at security and architecture holistically.