Your refresh plan has a CVE blind spot

Apple discontinues the Mac Pro with no plans for future hardware

Reducing the Attack Surface for End-of-Support Edge Devices

US Agencies Told to Scrap End of Support Edge Devices

CISA orders federal agencies to replace end-of-life edge devices

Ingress NGINX: Statement from the Kubernetes Steering and Security Response Committees

After reporting vulnerabilities found in MDT, Microsoft chose to retire the service rather than fix the issues... Admins should follow the defensive recommendations to mitigate the issues if they choose to continue using the software or can’t migrate to a different solution.

CVE-2016-15057: ** UNSUPPORTED WHEN ASSIGNED ** Improper Neutralization of Special Elements used in a Command ('Comm...