diff --git a/app/Modules/AdversaryMeter/Http/Controllers/HoneypotController.php b/app/Modules/AdversaryMeter/Http/Controllers/HoneypotController.php
index 830cdeb..d9cf19f 100644
--- a/app/Modules/AdversaryMeter/Http/Controllers/HoneypotController.php
+++ b/app/Modules/AdversaryMeter/Http/Controllers/HoneypotController.php
@@ -104,7 +104,7 @@ public function getVulnerabilitiesWithAssetInfo(?int $attackerId = null): array
             ->join('scans', 'scans.id', '=', 'ports.scan_id')
             ->join('assets', 'assets.cur_scan_id', '=', 'scans.ports_scan_id')
             ->get()
-            ->filter(fn(Alert $alert) => !$attackerId || !$alert->cve_id || $alert->events($attackerId)->exists())
+            ->filter(fn(Alert $alert) => !$attackerId || ($alert->cve_id && $alert->events($attackerId)->exists()))
             ->map(function (Alert $alert) use ($attackerId) {
                 return [
                     'alert' => $alert,