https://patchfirst.co/technique/T1036.005/New and newly exploited CVEs that lead to ATT&CK T1036.005 Match Legitimate Resource Name or Location, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 22:22:55 GMThttps://patchfirst.co/cve/CVE-2023-26360/CVE-2023-26360Thu, 23 Mar 2023 00:00:00 GMTAdobe · ColdFusion. In CISA KEV since 2023-03-15. ENISA EUVD lists it as exploited. EPSS 97.3% (higher than 99.9% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059.007 JavaScript; T1003.001 LSASS Memory; T1036.005 Match Legitimate Resource Name or Location; T1046 Network Service Discovery; T1071.001 Web Protocols; +3 more. Priority 69.0 of 100.kevpublic-exploitT1190T1059.007T1003.001T1036.005T1046T1071.001T1105T1484.001T1505.003