expert labeled Vulnerability to Tactic and Technique mapping dataset

The dataset is a curated benchmark designed to evaluate automated Vulnerability to Tactic and Technique (VTT) mapping, specifically tailored for the heterogeneous Internet of Things (IoT) landscape and software supply chain security. Unlike traditional datasets that focus solely on IT software, this benchmark aggregates high-impact threats from four authoritative sources: AttackerKB, CISA Advisories, ENISA Reports, and MITRE Engenuity.Constructed via a hybrid extraction strategy, the dataset prioritizes vulnerabilities that serve as critical entry points for lateral movement in modern IoT ecosystems, bridging the gap between device-specific firmware flaws and upstream component vulnerabilities. The dataset comprises 7,467 CVEs mapped to 125 MITRE ATT&CK Techniques. It is characterized by significant real-world challenges, including topological sparsity.