A
PoC exploit demonstrates that a vulnerability is technically exploitable — providing working code that proves the vulnerability's impact without necessarily being weaponized.
PoC publication is controversial — helps defenders prioritize but also accelerates attacker capability. CVSS exploitability score considers PoC availability. When a PoC is published publicly, patch immediately — exploitation attempts spike within 24-72 hours.