https://patchfirst.co/technique/T1059/New and newly exploited CVEs that lead to ATT&CK T1059 Command and Scripting Interpreter, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-97229/CVE-2026-97229#kevThu, 29 Oct 2026 00:00:00 GMTGitLab · Community Edition and Enterprise Edition. In CISA KEV since 2026-10-29. ENISA EUVD lists it as exploited. EPSS 26.6% (higher than 98% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.5 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-111497/CVE-2026-111497#kevTue, 27 Oct 2026 00:00:00 GMTGoogle · Brotli. In CISA KEV since 2026-10-27. ENISA EUVD lists it as exploited. EPSS 82.6% (higher than 99.67% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Priority 79.8 of 100.kevpublic-exploitT1190T1005T1059T1499.004https://patchfirst.co/cve/CVE-2026-48356/CVE-2026-48356#kevTue, 27 Oct 2026 00:00:00 GMTAdobe · Commerce and Magento. In CISA KEV since 2026-10-27. ENISA EUVD lists it as exploited. EPSS 44.6% (higher than 98.8% of CVEs). CVSS 9.3 CRITICAL. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 78.3 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2026-109618/CVE-2026-109618#kevMon, 26 Oct 2026 00:00:00 GMTPHP Group · PHP. In CISA KEV since 2026-10-26. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.9 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-109619/CVE-2026-109619#kevMon, 26 Oct 2026 00:00:00 GMTPHP Group · PHP. In CISA KEV since 2026-10-26. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 78.7 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-110447/CVE-2026-110447#kevFri, 23 Oct 2026 00:00:00 GMTCollabora · Collabora Online – Built-in CODE Server. In CISA KEV since 2026-10-23. ENISA EUVD lists it as exploited. EPSS 73.3% (higher than 99.46% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 89.4 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-96656/CVE-2026-96656#kevTue, 20 Oct 2026 00:00:00 GMTPlex · Media Server. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 1.8% (higher than 78.3% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 73.1 of 100.kevpublic-exploitT1078T1059https://patchfirst.co/cve/CVE-2026-106931/CVE-2026-106931#kevTue, 20 Oct 2026 00:00:00 GMTEG Secure Solutions · SiteGuard Server Edition. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 2.5% (higher than 84.9% of CVEs). CVSS 8.5 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 70.7 of 100.kevT1068T1059https://patchfirst.co/cve/CVE-2026-96654/CVE-2026-96654#kevTue, 20 Oct 2026 00:00:00 GMTPlex · Media Server. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 1.9% (higher than 80.2% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 68.0 of 100.kevT1190T1059https://patchfirst.co/cve/CVE-2026-110936/CVE-2026-110936#kevTue, 20 Oct 2026 00:00:00 GMTSiemens · Software Center. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 61.7% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1574.008 Path Interception by Search Order Hijacking. Priority 65.0 of 100.kevT1078T1059T1574.008https://patchfirst.co/cve/CVE-2026-105134/CVE-2026-105134#kevWed, 14 Oct 2026 00:00:00 GMTAhsay · AhsayCBS. In CISA KEV since 2026-10-14. ENISA EUVD lists it as exploited. EPSS 81.8% (higher than 99.64% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.9 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-76519/CVE-2026-76519#kevWed, 14 Oct 2026 00:00:00 GMTCisco · Secure Email Gateway. In CISA KEV since 2026-10-14. ENISA EUVD lists it as exploited. EPSS 2.2% (higher than 82.1% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1105 Ingress Tool Transfer. Priority 76.3 of 100.kevpublic-exploitT1190T1059T1105https://patchfirst.co/cve/CVE-2026-0322/CVE-2026-0322#kevWed, 14 Oct 2026 00:00:00 GMTPalo Alto Networks · PAN-OS. In CISA KEV since 2026-10-14. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 77.7% of CVEs). CVSS 7.2 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 73.6 of 100.kevpublic-exploitT1078T1059https://patchfirst.co/cve/CVE-2026-104935/CVE-2026-104935#kevTue, 13 Oct 2026 00:00:00 GMTIvanti · Connect Secure. In CISA KEV since 2026-10-13. ENISA EUVD lists it as exploited. EPSS 86.8% (higher than 99.74% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.0 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-96951/CVE-2026-96951#kevTue, 13 Oct 2026 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2026-10-13. ENISA EUVD lists it as exploited. EPSS 9.8% (higher than 95.5% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.001 Malicious Link; T1059 Command and Scripting Interpreter. Priority 73.3 of 100.kevT1204.001T1059https://patchfirst.co/cve/CVE-2021-3199/CVE-2021-3199#kevThu, 08 Oct 2026 00:00:00 GMTONLYOFFICE · Docs. In CISA KEV since 2026-10-08. ENISA EUVD lists it as exploited. EPSS 30.2% (higher than 98.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.5 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2016-3081/CVE-2016-3081#kevThu, 08 Oct 2026 00:00:00 GMTApache · Struts. In CISA KEV since 2026-10-08. ENISA EUVD lists it as exploited. EPSS 96.5% (higher than 99.88% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 73.6 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-102489/CVE-2026-102489#kevFri, 02 Oct 2026 00:00:00 GMTZammad GmbH · Zammad. In CISA KEV since 2026-10-02. ENISA EUVD lists it as exploited. EPSS 22.5% (higher than 97.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.4 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-102490/CVE-2026-102490#kevFri, 02 Oct 2026 00:00:00 GMTZammad GmbH · Zammad. In CISA KEV since 2026-10-02. ENISA EUVD lists it as exploited. EPSS 10.9% (higher than 95.9% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 72.6 of 100.kevT1068T1059https://patchfirst.co/cve/CVE-2026-86950/CVE-2026-86950#kevTue, 29 Sep 2026 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2026-09-29. ENISA EUVD lists it as exploited. EPSS 26.2% (higher than 98% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1059 Command and Scripting Interpreter. Priority 78.8 of 100.kevpublic-exploitT1204.002T1059https://patchfirst.co/cve/CVE-2026-88771/CVE-2026-88771#kevSun, 27 Sep 2026 00:00:00 GMTCitrix · NetScaler. In CISA KEV since 2026-09-27. ENISA EUVD lists it as exploited. EPSS 82.2% (higher than 99.66% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-88772/CVE-2026-88772#kevSun, 27 Sep 2026 00:00:00 GMTCitrix · NetScaler. In CISA KEV since 2026-09-27. ENISA EUVD lists it as exploited. EPSS 78.2% (higher than 99.58% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 78.6 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-87902/CVE-2026-87902#kevFri, 25 Sep 2026 00:00:00 GMTWordPress · Core. In CISA KEV since 2026-09-25. ENISA EUVD lists it as exploited. EPSS 95.8% (higher than 99.87% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 78.6 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-65660/CVE-2026-65660#kevFri, 25 Sep 2026 00:00:00 GMTMicrosoft · SharePoint. In CISA KEV since 2026-09-25. ENISA EUVD lists it as exploited. EPSS 8.2% (higher than 94.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 78.1 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-67279/CVE-2026-67279#kevFri, 25 Sep 2026 00:00:00 GMTMikroTik · RouterOS. In CISA KEV since 2026-09-25. ENISA EUVD lists it as exploited. EPSS 2.3% (higher than 83.1% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1565.001 Stored Data Manipulation. Priority 74.2 of 100.kevpublic-exploitT1190T1059T1565.001https://patchfirst.co/cve/CVE-2026-93616/CVE-2026-93616#kevTue, 22 Sep 2026 00:00:00 GMTCheck Point · Multiple Products. In CISA KEV since 2026-09-22. ENISA EUVD lists it as exploited. EPSS 91.6% (higher than 99.81% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-85102/CVE-2026-85102#kevTue, 22 Sep 2026 00:00:00 GMTCheck Point · Multiple Products. In CISA KEV since 2026-09-22. ENISA EUVD lists it as exploited. EPSS 54.1% (higher than 99.01% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.7 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-94127/CVE-2026-94127#kevTue, 22 Sep 2026 00:00:00 GMTF5 · BIG-IP APM. In CISA KEV since 2026-09-22. ENISA EUVD lists it as exploited. EPSS 24.9% (higher than 97.9% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.4 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-7273/CVE-2026-7273#kevMon, 21 Sep 2026 00:00:00 GMTZyxel · GS1900 Series Switches. In CISA KEV since 2026-09-21. ENISA EUVD lists it as exploited. EPSS 2.8% (higher than 86.4% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 76.4 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-76461/CVE-2026-76461#kevMon, 14 Sep 2026 00:00:00 GMTCisco · Secure Email Gateway. In CISA KEV since 2026-09-14. ENISA EUVD lists it as exploited. EPSS 29.5% (higher than 98.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.5 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-84869/CVE-2026-84869#kevFri, 11 Sep 2026 00:00:00 GMTConnectWise · ScreenConnect. In CISA KEV since 2026-09-11. ENISA EUVD lists it as exploited. EPSS 0.9% (higher than 60.4% of CVEs). CVSS 9.9 CRITICAL. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1105 Ingress Tool Transfer. Priority 67.0 of 100.kevT1078T1059T1105https://patchfirst.co/cve/CVE-2025-25249/CVE-2025-25249#kevWed, 09 Sep 2026 00:00:00 GMTFortinet · Multiple Products. In CISA KEV since 2026-09-09. ENISA EUVD lists it as exploited. EPSS 3.7% (higher than 89.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 77.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-87491/CVE-2026-87491#kevWed, 09 Sep 2026 00:00:00 GMTGoogle · Chromium V8. In CISA KEV since 2026-09-09. ENISA EUVD lists it as exploited. EPSS 3.5% (higher than 89.2% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 77.0 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2026-86218/CVE-2026-86218#kevTue, 08 Sep 2026 00:00:00 GMTN-able · N-central. In CISA KEV since 2026-09-08. ENISA EUVD lists it as exploited. EPSS 15.4% (higher than 96.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.2 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-75650/CVE-2026-75650#kevTue, 08 Sep 2026 00:00:00 GMTAdobe · Commerce and Magento. In CISA KEV since 2026-09-08. ENISA EUVD lists it as exploited. EPSS 3.9% (higher than 90.4% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 78.1 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-81963/CVE-2026-81963#kevTue, 08 Sep 2026 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2026-09-08. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 33.5% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1059 Command and Scripting Interpreter. Priority 65.2 of 100.kevpublic-exploitT1068T1059https://patchfirst.co/cve/CVE-2026-9586/CVE-2026-9586#kevWed, 02 Sep 2026 00:00:00 GMTSangoma · Switchvox. In CISA KEV since 2026-09-02. ENISA EUVD lists it as exploited. EPSS 19.0% (higher than 97.3% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.3 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-83549/CVE-2026-83549#kevWed, 02 Sep 2026 00:00:00 GMTSonicWall · SMA1000 Appliances. In CISA KEV since 2026-09-02. ENISA EUVD lists it as exploited. EPSS 9.9% (higher than 95.6% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter. Priority 77.6 of 100.kevpublic-exploitT1078T1059https://patchfirst.co/cve/CVE-2026-49869/CVE-2026-49869#kevWed, 02 Sep 2026 00:00:00 GMTKestra · Kestra OSS. In CISA KEV since 2026-09-02. ENISA EUVD lists it as exploited. EPSS 2.1% (higher than 81.6% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 76.3 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-82078/CVE-2026-82078#kevMon, 31 Aug 2026 00:00:00 GMTPaperCut · NG/MF. In CISA KEV since 2026-08-31. ENISA EUVD lists it as exploited. EPSS 63.0% (higher than 99.2% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Named in 1 threat report. Priority 83.1 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2021-23758/CVE-2021-23758#kevWed, 26 Aug 2026 00:00:00 GMTAjax.NET Professional · Ajax.NET Professional. In CISA KEV since 2026-08-26. ENISA EUVD lists it as exploited. EPSS 82.6% (higher than 99.67% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-60004/CVE-2026-60004Wed, 26 Aug 2026 00:00:00 GMTGitea · Gitea. In CISA KEV since 2026-08-25. ENISA EUVD lists it as exploited. EPSS 24.0% (higher than 97.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.4 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2019-1068/CVE-2019-1068#kevWed, 26 Aug 2026 00:00:00 GMTMicrosoft · SQL Server. In CISA KEV since 2026-08-26. ENISA EUVD lists it as exploited. EPSS 57.3% (higher than 99.07% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.0 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-73570/CVE-2026-73570#kevFri, 21 Aug 2026 00:00:00 GMTSynacor · Zimbra Collaboration Suite (ZCS). In CISA KEV since 2026-08-21. ENISA EUVD lists it as exploited. EPSS 71.7% (higher than 99.42% of CVEs). CVSS 8.9 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.1 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-72530/CVE-2026-72530#kevThu, 20 Aug 2026 00:00:00 GMTTrueConf · Server. In CISA KEV since 2026-08-20. ENISA EUVD lists it as exploited. EPSS 1.7% (higher than 77% of CVEs). CVSS 9.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.7 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-72529/CVE-2026-72529#kevThu, 20 Aug 2026 00:00:00 GMTTrueConf · Server. In CISA KEV since 2026-08-20. ENISA EUVD lists it as exploited. EPSS 1.5% (higher than 73.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 74.6 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-59310/CVE-2026-59310#kevTue, 18 Aug 2026 00:00:00 GMTBroadcom · VMware vCenter. In CISA KEV since 2026-08-18, known ransomware use. ENISA EUVD lists it as exploited. EPSS 2.6% (higher than 85.1% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 86.9 of 100.kevransomwarepublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-33824/CVE-2026-33824#kevTue, 18 Aug 2026 00:00:00 GMTMicrosoft · Internet Key Exchange (IKE) Service Extensions. In CISA KEV since 2026-08-18. ENISA EUVD lists it as exploited. EPSS 77.1% (higher than 99.55% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1210 Exploitation of Remote Services; T1059 Command and Scripting Interpreter. Priority 74.8 of 100.kevpublic-exploitT1210T1059https://patchfirst.co/cve/CVE-2025-62593/CVE-2025-62593#kevMon, 17 Aug 2026 00:00:00 GMTRay-Project · Ray. In CISA KEV since 2026-08-17. ENISA EUVD lists it as exploited. EPSS 60.2% (higher than 99.13% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter. Priority 74.0 of 100.kevpublic-exploitT1189T1059https://patchfirst.co/cve/CVE-2026-72898/CVE-2026-72898#kevTue, 11 Aug 2026 00:00:00 GMTMetabase · Metabase. In CISA KEV since 2026-08-11. ENISA EUVD lists it as exploited. EPSS 98.6% (higher than 99.92% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 80.0 of 100.kevpublic-exploitT1190T1059