We opened a practitioner catalog of identity CVEs: what broke, why IAM teams should care, and what to do this week. Not an NVD mirror. A place to triage SAML wrapping, Kerberos escalation, cloud-token bugs, and KEV items that let someone log in as you.