CISA also has no evidence that these vulnerabilities were NOT exploited in any election. If CISA discovered vulnerabilities, you can bet there are people in Dominion who knew about them and would have been sorely tempted to sell that information.
They expect the lofos to believe them that absence of evidence is evidence of absence.