https://patchfirst.co/technique/T1070/New and newly exploited CVEs that lead to ATT&CK T1070 Indicator Removal, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2023-1389/CVE-2023-1389#kevMon, 01 May 2023 00:00:00 GMTTP-Link · Archer AX21. In CISA KEV since 2023-05-01. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1106 Native API; T1496 Resource Hijacking; T1041 Exfiltration Over C2 Channel; T1070 Indicator Removal; T1498 Network Denial of Service. Priority 69.2 of 100.kevpublic-exploitT1106T1496T1041T1070T1498https://patchfirst.co/cve/CVE-2022-41128/CVE-2022-41128Wed, 09 Nov 2022 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2022-11-08. ENISA EUVD lists it as exploited. EPSS 24.6% (higher than 97.9% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1566 Phishing; T1203 Exploitation for Client Execution; T1070 Indicator Removal. Priority 63.7 of 100.kevT1566T1203T1070https://patchfirst.co/cve/CVE-2021-45382/CVE-2021-45382#kevMon, 04 Apr 2022 00:00:00 GMTD-Link · Multiple Routers. In CISA KEV since 2022-04-04. ENISA EUVD lists it as exploited. EPSS 97.8% (higher than 99.91% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1070 Indicator Removal; T1071 Application Layer Protocol; T1499.002 Service Exhaustion Flood; T1543 Create or Modify System Process. Priority 69.8 of 100.kevpublic-exploitT1190T1059T1070T1071T1499.002T1543