https://patchfirst.co/technique/T1037/New and newly exploited CVEs that lead to ATT&CK T1037 Boot or Logon Initialization Scripts, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2024-20353/CVE-2024-20353#kevWed, 24 Apr 2024 00:00:00 GMTCisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD). In CISA KEV since 2024-04-24. ENISA EUVD lists it as exploited. EPSS 69.8% (higher than 99.37% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1653 Power Settings; T1037 Boot or Logon Initialization Scripts; T1608.001 Upload Malware. Named in 2 threat reports. Priority 85.0 of 100.kevpublic-exploitT1190T1653T1037T1608.001https://patchfirst.co/cve/CVE-2024-20359/CVE-2024-20359#kevWed, 24 Apr 2024 00:00:00 GMTCisco · Adaptive Security Appliance (ASA) and Firepower Threat Defense (FTD). In CISA KEV since 2024-04-24. ENISA EUVD lists it as exploited. EPSS 18.8% (higher than 97.3% of CVEs). CVSS 6.0 MEDIUM. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1037 Boot or Logon Initialization Scripts. Named in 2 threat reports. Priority 82.8 of 100.kevpublic-exploitT1078T1059T1037https://patchfirst.co/cve/CVE-2022-41328/CVE-2022-41328#kevTue, 14 Mar 2023 00:00:00 GMTFortinet · FortiOS. In CISA KEV since 2023-03-14. ENISA EUVD lists it as exploited. EPSS 10.7% (higher than 95.8% of CVEs). CVSS 7.1 HIGH. ATT&CK: T1574 Hijack Execution Flow; T1037 Boot or Logon Initialization Scripts; T1049 System Network Connections Discovery; T1565.001 Stored Data Manipulation. Named in 1 threat report. Priority 66.0 of 100.kevT1574T1037T1049T1565.001