https://patchfirst.co/technique/T1040/New and newly exploited CVEs that lead to ATT&CK T1040 Network Sniffing, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-34486/CVE-2026-34486#kevTue, 04 Aug 2026 00:00:00 GMTApache · Tomcat. In CISA KEV since 2026-08-04. ENISA EUVD lists it as exploited. EPSS 98.5% (higher than 99.92% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1040 Network Sniffing; T1557 Adversary-in-the-Middle. Priority 73.2 of 100.kevpublic-exploitT1040T1557https://patchfirst.co/cve/CVE-2021-32030/CVE-2021-32030#kevMon, 02 Jun 2025 00:00:00 GMTASUS · Routers. In CISA KEV since 2025-06-02. ENISA EUVD lists it as exploited. EPSS 99.4% (higher than 99.94% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1040 Network Sniffing; T1098 Account Manipulation. Priority 69.8 of 100.kevpublic-exploitT1068T1040T1098https://patchfirst.co/cve/CVE-2022-1040/CVE-2022-1040#kevThu, 31 Mar 2022 00:00:00 GMTSophos · Firewall. In CISA KEV since 2022-03-31. ENISA EUVD lists it as exploited. EPSS 99.8% (higher than 99.96% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1040 Network Sniffing; T1078 Valid Accounts; T1557 Adversary-in-the-Middle; T1574 Hijack Execution Flow. Priority 79.9 of 100.kevpublic-exploitT1190T1059T1040T1078T1557T1574https://patchfirst.co/cve/CVE-2018-18325/CVE-2018-18325#kevWed, 03 Nov 2021 00:00:00 GMTDotNetNuke (DNN) · DotNetNuke (DNN). In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 74.0% (higher than 99.48% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1040 Network Sniffing. Priority 68.1 of 100.kevpublic-exploitT1190T1040https://patchfirst.co/cve/CVE-2020-15094/CVE-2020-15094Wed, 02 Sep 2020 00:00:00 GMTsymfony · symfony. Not in CISA KEV. EPSS 3.0% (higher than 87.5% of CVEs). CVSS 8.0 HIGH. ATT&CK: T1040 Network Sniffing; T1059 Command and Scripting Interpreter. Priority 23.1 of 100.T1040T1059https://patchfirst.co/cve/CVE-2020-15093/CVE-2020-15093Thu, 09 Jul 2020 00:00:00 GMTawslabs · tough. Not in CISA KEV. EPSS 1.4% (higher than 71.6% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1110 Brute Force; T1040 Network Sniffing; T1078 Valid Accounts; T1557 Adversary-in-the-Middle. Priority 20.3 of 100.T1110T1040T1078T1557https://patchfirst.co/cve/CVE-2020-11035/CVE-2020-11035Tue, 05 May 2020 00:00:00 GMTglpi-project · GLPI. Not in CISA KEV. EPSS 0.9% (higher than 59.6% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1110 Brute Force; T1040 Network Sniffing; T1078 Valid Accounts; T1557 Adversary-in-the-Middle. Priority 17.2 of 100.T1110T1040T1078T1557https://patchfirst.co/cve/CVE-2020-5261/CVE-2020-5261Wed, 25 Mar 2020 00:00:00 GMTSustainsys · Saml2. Not in CISA KEV. EPSS 1.5% (higher than 74.2% of CVEs). CVSS 8.2 HIGH. ATT&CK: T1040 Network Sniffing; T1190 Exploit Public-Facing Application. Priority 20.6 of 100.T1040T1190https://patchfirst.co/cve/CVE-2020-0884/CVE-2020-0884Thu, 12 Mar 2020 00:00:00 GMTMicrosoft · Microsoft Visual Studio 2017 version 15.9 (includes 15.1 - 15.8). Not in CISA KEV. EPSS 1.7% (higher than 76.8% of CVEs). ATT&CK: T1040 Network Sniffing; T1528 Steal Application Access Token. Priority 15.4 of 100.T1040T1528https://patchfirst.co/cve/CVE-2019-1715/CVE-2019-1715Fri, 03 May 2019 00:00:00 GMTCisco · Cisco Adaptive Security Appliance (ASA) Software. Not in CISA KEV. EPSS 1.7% (higher than 77.5% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1110 Brute Force; T1040 Network Sniffing; T1078 Valid Accounts; T1557 Adversary-in-the-Middle. Priority 19.2 of 100.T1110T1040T1078T1557https://patchfirst.co/cve/CVE-2018-14781/CVE-2018-14781Mon, 13 Aug 2018 00:00:00 GMTMedtronic · MMT- 508 - MiniMed pump. Not in CISA KEV. EPSS 0.7% (higher than 53.6% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1040 Network Sniffing; T1190 Exploit Public-Facing Application. Priority 14.4 of 100.T1040T1190