https://patchfirst.co/technique/T1071.001/New and newly exploited CVEs that lead to ATT&CK T1071.001 Web Protocols, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 22:22:55 GMThttps://patchfirst.co/cve/CVE-2024-4577/CVE-2024-4577#kevWed, 12 Jun 2024 00:00:00 GMTPHP Group · PHP. In CISA KEV since 2024-06-12, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1003 OS Credential Dumping; T1003.001 LSASS Memory; T1033 System Owner/User Discovery; T1041 Exfiltration Over C2 Channel; +6 more. Priority 79.9 of 100.kevransomwarepublic-exploitT1190T1059T1003T1003.001T1033T1041T1053T1068T1071.001T1112T1543T1570https://patchfirst.co/cve/CVE-2024-4978/CVE-2024-4978#kevWed, 29 May 2024 00:00:00 GMTJustice AV Solutions · Viewer . In CISA KEV since 2024-05-29. ENISA EUVD lists it as exploited. EPSS 26.9% (higher than 98% of CVEs). CVSS 8.4 HIGH. Public exploit code exists. ATT&CK: T1195.002 Compromise Software Supply Chain; T1105 Ingress Tool Transfer; T1005 Data from Local System; T1071.001 Web Protocols. Priority 68.5 of 100.kevpublic-exploitT1195.002T1105T1005T1071.001https://patchfirst.co/cve/CVE-2023-38035/CVE-2023-38035#kevTue, 22 Aug 2023 00:00:00 GMTIvanti · Sentry. In CISA KEV since 2023-08-22, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1018 Remote System Discovery; T1046 Network Service Discovery; T1071.001 Web Protocols; T1105 Ingress Tool Transfer; +2 more. Priority 79.9 of 100.kevransomwarepublic-exploitT1190T1059T1018T1046T1071.001T1105T1496T1571https://patchfirst.co/cve/CVE-2023-26360/CVE-2023-26360Thu, 23 Mar 2023 00:00:00 GMTAdobe · ColdFusion. In CISA KEV since 2023-03-15. ENISA EUVD lists it as exploited. EPSS 97.3% (higher than 99.9% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059.007 JavaScript; T1003.001 LSASS Memory; T1036.005 Match Legitimate Resource Name or Location; T1046 Network Service Discovery; T1071.001 Web Protocols; +3 more. Priority 69.0 of 100.kevpublic-exploitT1190T1059.007T1003.001T1036.005T1046T1071.001T1105T1484.001T1505.003https://patchfirst.co/cve/CVE-2022-42475/CVE-2022-42475Mon, 02 Jan 2023 00:00:00 GMTFortinet · FortiOS. In CISA KEV since 2022-12-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.5% (higher than 99.94% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow; T1071.001 Web Protocols; T1622 Debugger Evasion. Named in 4 threat reports. Priority 88.8 of 100.kevransomwarepublic-exploitT1190T1574T1071.001T1622https://patchfirst.co/cve/CVE-2009-4324/CVE-2009-4324#kevWed, 08 Jun 2022 00:00:00 GMTAdobe · Acrobat and Reader. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 81.9% (higher than 99.65% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1071.001 Web Protocols. Priority 53.4 of 100.kevpublic-exploitT1204.002T1071.001https://patchfirst.co/cve/CVE-2015-3113/CVE-2015-3113#kevWed, 13 Apr 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-04-13. ENISA EUVD lists it as exploited. EPSS 99.8% (higher than 99.96% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1071.001 Web Protocols; T1497 Virtualization/Sandbox Evasion; T1622 Debugger Evasion. Named in 3 threat reports. Priority 77.6 of 100.kevpublic-exploitT1071.001T1497T1622https://patchfirst.co/cve/CVE-2015-5119/CVE-2015-5119#kevThu, 03 Mar 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 98.6% (higher than 99.92% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059.007 JavaScript; T1566.002 Spearphishing Link; T1105 Ingress Tool Transfer; T1055.001 Dynamic-link Library Injection; T1071.001 Web Protocols. Named in 5 threat reports. Priority 74.8 of 100.kevpublic-exploitT1059.007T1566.002T1105T1055.001T1071.001https://patchfirst.co/cve/CVE-2021-35394/CVE-2021-35394#kevFri, 10 Dec 2021 00:00:00 GMTRealtek · Jungle Software Development Kit (SDK). In CISA KEV since 2021-12-10. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.96% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1071.001 Web Protocols; T1105 Ingress Tool Transfer; T1496 Resource Hijacking; T1499 Endpoint Denial of Service; +1 more. Priority 69.9 of 100.kevpublic-exploitT1190T1059T1071.001T1105T1496T1499T1569.002https://patchfirst.co/cve/CVE-2021-40449/CVE-2021-40449#kevWed, 17 Nov 2021 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2021-11-17, known ransomware use. ENISA EUVD lists it as exploited. EPSS 81.9% (higher than 99.65% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1566 Phishing; T1068 Exploitation for Privilege Escalation; T1016 System Network Configuration Discovery; T1027 Obfuscated Files or Information; T1059.003 Windows Command Shell; T1071.001 Web Protocols; +2 more. Priority 78.4 of 100.kevransomwarepublic-exploitT1566T1068T1016T1027T1059.003T1071.001T1082T1573.001