A training-focused CVE roundup is a reminder that vulnerability management is a triage problem, not a counting exercise.