https://patchfirst.co/insights/The 50 most recent additions to the CISA Known Exploited Vulnerabilities catalogue, with EPSS, ransomware use and ATT&CK context.en-gb360Sat, 31 Oct 2026 22:22:55 GMThttps://patchfirst.co/cve/CVE-2026-111357/CVE-2026-111357#kevFri, 30 Oct 2026 00:00:00 GMTIvanti · Connect Secure. In CISA KEV since 2026-10-30. ENISA EUVD lists it as exploited. EPSS 0.5% (higher than 45% of CVEs). CVSS 7.0 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1548 Abuse Elevation Control Mechanism. Priority 61.1 of 100.kevT1068T1548https://patchfirst.co/cve/CVE-2026-118527/CVE-2026-118527#kevFri, 30 Oct 2026 00:00:00 GMTIvanti · Connect Secure. In CISA KEV since 2026-10-30. No EPSS score. ATT&CK: T1190 Exploit Public-Facing Application; T1105 Ingress Tool Transfer. Priority 45.0 of 100.kevT1190T1105https://patchfirst.co/cve/CVE-2026-97229/CVE-2026-97229#kevThu, 29 Oct 2026 00:00:00 GMTGitLab · Community Edition and Enterprise Edition. In CISA KEV since 2026-10-29. ENISA EUVD lists it as exploited. EPSS 27.3% (higher than 98.1% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.5 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-76418/CVE-2026-76418#kevThu, 29 Oct 2026 00:00:00 GMTCisco · Secure Firewall ASA Software and Cisco Secure FTD Software. In CISA KEV since 2026-10-29. ENISA EUVD lists it as exploited. EPSS 0.8% (higher than 57.3% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 63.8 of 100.kevT1190T1499.004https://patchfirst.co/cve/CVE-2026-46300/CVE-2026-46300#kevWed, 28 Oct 2026 00:00:00 GMTLinux · Kernel. In CISA KEV since 2026-10-28. ENISA EUVD lists it as exploited. EPSS 16.1% (higher than 96.9% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 77.5 of 100.kevpublic-exploitT1068https://patchfirst.co/cve/CVE-2026-41709/CVE-2026-41709#kevWed, 28 Oct 2026 00:00:00 GMTBroadcom · VMware ESX. In CISA KEV since 2026-10-28. ENISA EUVD lists it as exploited. EPSS 0.7% (higher than 52.8% of CVEs). CVSS 2.7 LOW. ATT&CK: T1078 Valid Accounts. Priority 59.8 of 100.kevT1078https://patchfirst.co/cve/CVE-2026-111497/CVE-2026-111497#kevTue, 27 Oct 2026 00:00:00 GMTGoogle · Brotli. In CISA KEV since 2026-10-27. ENISA EUVD lists it as exploited. EPSS 82.6% (higher than 99.67% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Priority 79.8 of 100.kevpublic-exploitT1190T1005T1059T1499.004https://patchfirst.co/cve/CVE-2026-48356/CVE-2026-48356#kevTue, 27 Oct 2026 00:00:00 GMTAdobe · Commerce and Magento. In CISA KEV since 2026-10-27. ENISA EUVD lists it as exploited. EPSS 44.6% (higher than 98.8% of CVEs). CVSS 9.3 CRITICAL. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 78.3 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2026-109618/CVE-2026-109618#kevMon, 26 Oct 2026 00:00:00 GMTPHP Group · PHP. In CISA KEV since 2026-10-26. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.9 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-109619/CVE-2026-109619#kevMon, 26 Oct 2026 00:00:00 GMTPHP Group · PHP. In CISA KEV since 2026-10-26. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 78.7 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-110447/CVE-2026-110447#kevFri, 23 Oct 2026 00:00:00 GMTCollabora · Collabora Online – Built-in CODE Server. In CISA KEV since 2026-10-23. ENISA EUVD lists it as exploited. EPSS 73.3% (higher than 99.46% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 89.4 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-114625/CVE-2026-114625#kevFri, 23 Oct 2026 00:00:00 GMTArista · VeloCloud Orchestrator. In CISA KEV since 2026-10-23. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 63.6% of CVEs). CVSS 9.9 CRITICAL. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation; T1190 Exploit Public-Facing Application. Priority 72.5 of 100.kevpublic-exploitT1078T1068T1190https://patchfirst.co/cve/CVE-2026-96656/CVE-2026-96656#kevTue, 20 Oct 2026 00:00:00 GMTPlex · Media Server. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 1.8% (higher than 78.3% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 73.1 of 100.kevpublic-exploitT1078T1059https://patchfirst.co/cve/CVE-2026-96652/CVE-2026-96652#kevTue, 20 Oct 2026 00:00:00 GMTPlex · Media Server. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 1.8% (higher than 78.8% of CVEs). CVSS 4.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1090 Proxy. Priority 71.2 of 100.kevpublic-exploitT1190T1090https://patchfirst.co/cve/CVE-2026-106931/CVE-2026-106931#kevTue, 20 Oct 2026 00:00:00 GMTEG Secure Solutions · SiteGuard Server Edition. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 2.5% (higher than 84.9% of CVEs). CVSS 8.5 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 70.7 of 100.kevT1068T1059https://patchfirst.co/cve/CVE-2026-96654/CVE-2026-96654#kevTue, 20 Oct 2026 00:00:00 GMTPlex · Media Server. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 1.9% (higher than 80.2% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 68.0 of 100.kevT1190T1059https://patchfirst.co/cve/CVE-2026-96655/CVE-2026-96655#kevTue, 20 Oct 2026 00:00:00 GMTPlex · Media Server. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 1.6% (higher than 76.3% of CVEs). CVSS 4.3 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1090 Proxy. Priority 65.7 of 100.kevT1190T1090https://patchfirst.co/cve/CVE-2026-110936/CVE-2026-110936#kevTue, 20 Oct 2026 00:00:00 GMTSiemens · Software Center. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 61.8% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1574.008 Path Interception by Search Order Hijacking. Priority 65.0 of 100.kevT1078T1059T1574.008https://patchfirst.co/cve/CVE-2026-102764/CVE-2026-102764#kevFri, 16 Oct 2026 00:00:00 GMTBeyondTrust · Remote Support. In CISA KEV since 2026-10-16. ENISA EUVD lists it as exploited. EPSS 18.9% (higher than 97.3% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 79.3 of 100.kevpublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2025-61624/CVE-2025-61624#kevFri, 16 Oct 2026 00:00:00 GMTFortinet · Multiple Products. In CISA KEV since 2026-10-16. ENISA EUVD lists it as exploited. EPSS 1.3% (higher than 71.4% of CVEs). CVSS 6.5 MEDIUM. Priority 66.8 of 100.kevhttps://patchfirst.co/cve/CVE-2026-21589/CVE-2026-21589#kevThu, 15 Oct 2026 00:00:00 GMTAtlassian · Multiple Products. In CISA KEV since 2026-10-15. ENISA EUVD lists it as exploited. EPSS 99.5% (higher than 99.94% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 78.2 of 100.kevpublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2026-105134/CVE-2026-105134#kevWed, 14 Oct 2026 00:00:00 GMTAhsay · AhsayCBS. In CISA KEV since 2026-10-14. ENISA EUVD lists it as exploited. EPSS 81.8% (higher than 99.64% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.9 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-105133/CVE-2026-105133#kevWed, 14 Oct 2026 00:00:00 GMTAhsay · AhsayCBS. In CISA KEV since 2026-10-14. ENISA EUVD lists it as exploited. EPSS 79.5% (higher than 99.6% of CVEs). CVSS 7.3 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 78.0 of 100.kevpublic-exploitT1190T1078https://patchfirst.co/cve/CVE-2026-76519/CVE-2026-76519#kevWed, 14 Oct 2026 00:00:00 GMTCisco · Secure Email Gateway. In CISA KEV since 2026-10-14. ENISA EUVD lists it as exploited. EPSS 2.2% (higher than 82.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1105 Ingress Tool Transfer. Priority 76.3 of 100.kevpublic-exploitT1190T1059T1105https://patchfirst.co/cve/CVE-2026-0322/CVE-2026-0322#kevWed, 14 Oct 2026 00:00:00 GMTPalo Alto Networks · PAN-OS. In CISA KEV since 2026-10-14. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 77.7% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 73.6 of 100.kevpublic-exploitT1078T1059https://patchfirst.co/cve/CVE-2026-104935/CVE-2026-104935#kevTue, 13 Oct 2026 00:00:00 GMTIvanti · Connect Secure. In CISA KEV since 2026-10-13. ENISA EUVD lists it as exploited. EPSS 86.8% (higher than 99.74% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.0 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-96951/CVE-2026-96951#kevTue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2026-10-13. ENISA EUVD lists it as exploited. EPSS 9.8% (higher than 95.5% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 73.3 of 100.kevT1204.001T1059https://patchfirst.co/cve/CVE-2015-3306/CVE-2015-3306#kevThu, 08 Oct 2026 00:00:00 GMTProFTPD · ProFTPD. In CISA KEV since 2026-10-08. ENISA EUVD lists it as exploited. EPSS 99.5% (higher than 99.94% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 80.0 of 100.kevpublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2021-3199/CVE-2021-3199#kevThu, 08 Oct 2026 00:00:00 GMTONLYOFFICE · Docs. In CISA KEV since 2026-10-08. ENISA EUVD lists it as exploited. EPSS 30.2% (higher than 98.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.5 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2023-22894/CVE-2023-22894#kevThu, 08 Oct 2026 00:00:00 GMTStrapi · Strapi. In CISA KEV since 2026-10-08. ENISA EUVD lists it as exploited. EPSS 4.1% (higher than 90.8% of CVEs). CVSS 4.9 MEDIUM. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1212 Exploitation for Credential Access. Priority 74.6 of 100.kevpublic-exploitT1078T1212https://patchfirst.co/cve/CVE-2016-3081/CVE-2016-3081#kevThu, 08 Oct 2026 00:00:00 GMTApache · Struts. In CISA KEV since 2026-10-08. ENISA EUVD lists it as exploited. EPSS 96.5% (higher than 99.88% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 73.6 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2015-5477/CVE-2015-5477#kevThu, 08 Oct 2026 00:00:00 GMTISC · BIND. In CISA KEV since 2026-10-08. ENISA EUVD lists it as exploited. EPSS 99.6% (higher than 99.95% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 68.2 of 100.kevpublic-exploitT1190T1499.004https://patchfirst.co/cve/CVE-2026-88779/CVE-2026-88779#kevSun, 04 Oct 2026 00:00:00 GMTCitrix · NetScaler. In CISA KEV since 2026-10-04. ENISA EUVD lists it as exploited. EPSS 11.4% (higher than 96% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application. Priority 72.4 of 100.kevT1190https://patchfirst.co/cve/CVE-2026-102489/CVE-2026-102489#kevFri, 02 Oct 2026 00:00:00 GMTZammad GmbH · Zammad. In CISA KEV since 2026-10-02. ENISA EUVD lists it as exploited. EPSS 22.5% (higher than 97.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.4 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-102490/CVE-2026-102490#kevFri, 02 Oct 2026 00:00:00 GMTZammad GmbH · Zammad. In CISA KEV since 2026-10-02. ENISA EUVD lists it as exploited. EPSS 10.9% (higher than 95.9% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 72.6 of 100.kevT1068T1059https://patchfirst.co/cve/CVE-2026-104286/CVE-2026-104286#kevThu, 01 Oct 2026 00:00:00 GMTFortinet · FortiMail. In CISA KEV since 2026-10-01. ENISA EUVD lists it as exploited. EPSS 4.6% (higher than 91.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1565.001 Stored Data Manipulation. Priority 78.2 of 100.kevpublic-exploitT1190T1565.001https://patchfirst.co/cve/CVE-2026-76504/CVE-2026-76504#kevWed, 30 Sep 2026 00:00:00 GMTCisco · Catalyst SD-WAN Manager. In CISA KEV since 2026-09-30. ENISA EUVD lists it as exploited. EPSS 38.9% (higher than 98.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 79.6 of 100.kevpublic-exploitT1190T1078https://patchfirst.co/cve/CVE-2026-86950/CVE-2026-86950#kevTue, 29 Sep 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-09-29. ENISA EUVD lists it as exploited. EPSS 26.2% (higher than 98% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1059 Command and Scripting Interpreter. Priority 78.8 of 100.kevpublic-exploitT1204.002T1059https://patchfirst.co/cve/CVE-2026-88771/CVE-2026-88771#kevSun, 27 Sep 2026 00:00:00 GMTCitrix · NetScaler. In CISA KEV since 2026-09-27. ENISA EUVD lists it as exploited. EPSS 82.2% (higher than 99.66% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-88772/CVE-2026-88772#kevSun, 27 Sep 2026 00:00:00 GMTCitrix · NetScaler. In CISA KEV since 2026-09-27. ENISA EUVD lists it as exploited. EPSS 78.2% (higher than 99.58% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 78.6 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-87902/CVE-2026-87902#kevFri, 25 Sep 2026 00:00:00 GMTWordPress · Core. In CISA KEV since 2026-09-25. ENISA EUVD lists it as exploited. EPSS 95.8% (higher than 99.87% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 78.6 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-65660/CVE-2026-65660#kevFri, 25 Sep 2026 00:00:00 GMTMicrosoft · SharePoint. In CISA KEV since 2026-09-25. ENISA EUVD lists it as exploited. EPSS 8.2% (higher than 94.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 78.1 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-67279/CVE-2026-67279#kevFri, 25 Sep 2026 00:00:00 GMTMikroTik · RouterOS. In CISA KEV since 2026-09-25. ENISA EUVD lists it as exploited. EPSS 2.3% (higher than 83.1% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1565.001 Stored Data Manipulation. Priority 74.2 of 100.kevpublic-exploitT1190T1059T1565.001https://patchfirst.co/cve/CVE-2026-5430/CVE-2026-5430#kevThu, 24 Sep 2026 00:00:00 GMTWSO2 · Multiple Products. In CISA KEV since 2026-09-24. ENISA EUVD lists it as exploited. EPSS 22.4% (higher than 97.7% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts; T1550 Use Alternate Authentication Material. Priority 79.5 of 100.kevpublic-exploitT1190T1078T1550https://patchfirst.co/cve/CVE-2026-71362/CVE-2026-71362#kevThu, 24 Sep 2026 00:00:00 GMTAdobe · Commerce and Magento . In CISA KEV since 2026-09-24. ENISA EUVD lists it as exploited. EPSS 90.5% (higher than 99.8% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 79.3 of 100.kevpublic-exploitT1190T1068https://patchfirst.co/cve/CVE-2026-93616/CVE-2026-93616#kevTue, 22 Sep 2026 00:00:00 GMTCheck Point · Multiple Products. In CISA KEV since 2026-09-22. ENISA EUVD lists it as exploited. EPSS 91.6% (higher than 99.81% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-85102/CVE-2026-85102#kevTue, 22 Sep 2026 00:00:00 GMTCheck Point · Multiple Products. In CISA KEV since 2026-09-22. ENISA EUVD lists it as exploited. EPSS 54.1% (higher than 99.01% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.7 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-94127/CVE-2026-94127#kevTue, 22 Sep 2026 00:00:00 GMTF5 · BIG-IP APM. In CISA KEV since 2026-09-22. ENISA EUVD lists it as exploited. EPSS 26.6% (higher than 98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.5 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-93952/CVE-2026-93952#kevTue, 22 Sep 2026 00:00:00 GMTArista · VeloCloud Orchestrator. In CISA KEV since 2026-09-22. ENISA EUVD lists it as exploited. EPSS 1.4% (higher than 72.2% of CVEs). CVSS 10.0 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 69.4 of 100.kevT1190T1068https://patchfirst.co/cve/CVE-2026-7273/CVE-2026-7273#kevMon, 21 Sep 2026 00:00:00 GMTZyxel · GS1900 Series Switches. In CISA KEV since 2026-09-21. ENISA EUVD lists it as exploited. EPSS 2.8% (higher than 86.4% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 76.4 of 100.kevpublic-exploitT1190T1059