Expand Threat Analytics to Include Misconfiguration-Based CVEs and Vulnerabilities

At present, the Threat Analytics section in Patch My PC Advanced Insights provides valuable information on CVEs related to software vulnerabilities. However, it does not appear to cover CVEs or security issues arising from misconfigurations—such as those commonly flagged by vulnerability scanners like Tenable or Nessus.

Feature Request:
Enhance the Threat Analytics module to include:

• CVEs and security advisories linked to misconfigurations (e.g., insecure registry settings, weak encryption protocols, missing hardening steps).

• Integration or mapping of findings from common vulnerability scanners (e.g., Tenable, Qualys, Nessus) to provide a more holistic view of endpoint risk.

• Risk scoring or prioritisation based on configuration-related vulnerabilities.

• Ingestion of configuration-related CVEs from NVD or MITRE databases.

• Optional integration with external vulnerability scan results.

• Tagging and categorisation of findings as “Patchable” vs “Configurable” for clarity.

Misconfigurations are a leading cause of security breaches and are often overlooked. Including these would:

• Provide a more complete risk profile for endpoints.

• Help security and IT teams prioritise remediation beyond just patching.