https://patchfirst.co/technique/T1105/New and newly exploited CVEs that lead to ATT&CK T1105 Ingress Tool Transfer, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-118527/CVE-2026-118527#kevFri, 30 Oct 2026 00:00:00 GMTIvanti · Connect Secure. In CISA KEV since 2026-10-30. No EPSS score. ATT&CK: T1190 Exploit Public-Facing Application; T1105 Ingress Tool Transfer. Priority 45.0 of 100.kevT1190T1105https://patchfirst.co/cve/CVE-2026-76519/CVE-2026-76519#kevWed, 14 Oct 2026 00:00:00 GMTCisco · Secure Email Gateway. In CISA KEV since 2026-10-14. ENISA EUVD lists it as exploited. EPSS 2.2% (higher than 82.1% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1105 Ingress Tool Transfer. Priority 76.3 of 100.kevpublic-exploitT1190T1059T1105https://patchfirst.co/cve/CVE-2026-84869/CVE-2026-84869#kevFri, 11 Sep 2026 00:00:00 GMTConnectWise · ScreenConnect. In CISA KEV since 2026-09-11. ENISA EUVD lists it as exploited. EPSS 0.9% (higher than 60.4% of CVEs). CVSS 9.9 CRITICAL. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1105 Ingress Tool Transfer. Priority 67.0 of 100.kevT1078T1059T1105https://patchfirst.co/cve/CVE-2026-20230/CVE-2026-20230#kevThu, 25 Jun 2026 00:00:00 GMTCisco · Unified Communications Manager. In CISA KEV since 2026-06-25. ENISA EUVD lists it as exploited. EPSS 88.5% (higher than 99.77% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1105 Ingress Tool Transfer. Priority 74.0 of 100.kevpublic-exploitT1190T1105https://patchfirst.co/cve/CVE-2024-7399/CVE-2024-7399#kevFri, 24 Apr 2026 00:00:00 GMTSamsung · MagicINFO 9 Server. In CISA KEV since 2026-04-24. ENISA EUVD lists it as exploited. EPSS 91.9% (higher than 99.82% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1105 Ingress Tool Transfer. Priority 69.8 of 100.kevpublic-exploitT1190T1105https://patchfirst.co/cve/CVE-2025-55177/CVE-2025-55177#kevTue, 02 Sep 2025 00:00:00 GMTMeta Platforms · WhatsApp. In CISA KEV since 2025-09-02. ENISA EUVD lists it as exploited. EPSS 13.5% (higher than 96.4% of CVEs). CVSS 5.4 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1105 Ingress Tool Transfer. Priority 66.1 of 100.kevpublic-exploitT1190T1105https://patchfirst.co/cve/CVE-2025-43200/CVE-2025-43200#kevMon, 16 Jun 2025 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2025-06-16. ENISA EUVD lists it as exploited. EPSS 1.2% (higher than 67.9% of CVEs). CVSS 4.2 MEDIUM. ATT&CK: T1203 Exploitation for Client Execution; T1105 Ingress Tool Transfer; T1005 Data from Local System. Priority 54.5 of 100.kevT1203T1105T1005https://patchfirst.co/cve/CVE-2025-31200/CVE-2025-31200#kevThu, 17 Apr 2025 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2025-04-17. ENISA EUVD lists it as exploited. EPSS 20.9% (higher than 97.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1105 Ingress Tool Transfer; T1001 Data Obfuscation; T1059 Command and Scripting Interpreter; T1106 Native API; T1557 Adversary-in-the-Middle. Priority 69.4 of 100.kevpublic-exploitT1105T1001T1059T1106T1557https://patchfirst.co/cve/CVE-2025-31201/CVE-2025-31201#kevThu, 17 Apr 2025 00:00:00 GMTApple · Multiple Products. In CISA KEV since 2025-04-17. ENISA EUVD lists it as exploited. EPSS 14.0% (higher than 96.5% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1105 Ingress Tool Transfer; T1001 Data Obfuscation; T1059 Command and Scripting Interpreter; T1106 Native API; T1557 Adversary-in-the-Middle. Priority 69.2 of 100.kevpublic-exploitT1105T1001T1059T1106T1557https://patchfirst.co/cve/CVE-2024-11667/CVE-2024-11667#kevTue, 03 Dec 2024 00:00:00 GMTZyxel · Multiple Firewalls. In CISA KEV since 2024-12-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 2.9% (higher than 87.1% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1105 Ingress Tool Transfer. Priority 72.3 of 100.kevransomwareT1190T1005T1105https://patchfirst.co/cve/CVE-2024-23692/CVE-2024-23692#kevTue, 09 Jul 2024 00:00:00 GMTRejetto · HTTP File Server. In CISA KEV since 2024-07-09, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.5% (higher than 99.94% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1082 System Information Discovery; T1005 Data from Local System; T1105 Ingress Tool Transfer; T1496 Resource Hijacking. Priority 79.8 of 100.kevransomwarepublic-exploitT1082T1005T1105T1496https://patchfirst.co/cve/CVE-2024-4978/CVE-2024-4978#kevWed, 29 May 2024 00:00:00 GMTJustice AV Solutions · Viewer . In CISA KEV since 2024-05-29. ENISA EUVD lists it as exploited. EPSS 26.9% (higher than 98% of CVEs). CVSS 8.4 HIGH. Public exploit code exists. ATT&CK: T1195.002 Compromise Software Supply Chain; T1105 Ingress Tool Transfer; T1005 Data from Local System; T1071.001 Web Protocols. Priority 68.5 of 100.kevpublic-exploitT1195.002T1105T1005T1071.001https://patchfirst.co/cve/CVE-2023-48788/CVE-2023-48788#kevMon, 25 Mar 2024 00:00:00 GMTFortinet · FortiClient EMS. In CISA KEV since 2024-03-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 98.4% (higher than 99.92% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1105 Ingress Tool Transfer. Named in 1 threat report. Priority 83.7 of 100.kevransomwarepublic-exploitT1190T1059T1105https://patchfirst.co/cve/CVE-2023-29300/CVE-2023-29300#kevMon, 08 Jan 2024 00:00:00 GMTAdobe · ColdFusion. In CISA KEV since 2024-01-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1105 Ingress Tool Transfer. Priority 79.9 of 100.kevransomwarepublic-exploitT1190T1105https://patchfirst.co/cve/CVE-2023-38203/CVE-2023-38203#kevMon, 08 Jan 2024 00:00:00 GMTAdobe · ColdFusion. In CISA KEV since 2024-01-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS 97.1% (higher than 99.89% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1105 Ingress Tool Transfer. Priority 79.8 of 100.kevransomwarepublic-exploitT1190T1105https://patchfirst.co/cve/CVE-2023-7101/CVE-2023-7101#kevTue, 02 Jan 2024 00:00:00 GMTSpreadsheet::ParseExcel · Spreadsheet::ParseExcel. In CISA KEV since 2024-01-02. ENISA EUVD lists it as exploited. EPSS 19.0% (higher than 97.3% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1059 Command and Scripting Interpreter; T1105 Ingress Tool Transfer. Priority 67.9 of 100.kevpublic-exploitT1059T1105https://patchfirst.co/cve/CVE-2023-22518/CVE-2023-22518#kevTue, 07 Nov 2023 00:00:00 GMTAtlassian · Confluence Data Center and Server. In CISA KEV since 2023-11-07, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1033 System Owner/User Discovery; T1105 Ingress Tool Transfer. Priority 79.9 of 100.kevransomwarepublic-exploitT1190T1033T1105https://patchfirst.co/cve/CVE-2023-38831/CVE-2023-38831#kevThu, 24 Aug 2023 00:00:00 GMTRARLAB · WinRAR. In CISA KEV since 2023-08-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.8% (higher than 99.96% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204 User Execution; T1005 Data from Local System; T1041 Exfiltration Over C2 Channel; T1053 Scheduled Task/Job; T1105 Ingress Tool Transfer; T1112 Modify Registry; +1 more. Named in 1 threat report. Priority 82.3 of 100.kevransomwarepublic-exploitT1204T1005T1041T1053T1105T1112T1486https://patchfirst.co/cve/CVE-2023-38035/CVE-2023-38035#kevTue, 22 Aug 2023 00:00:00 GMTIvanti · Sentry. In CISA KEV since 2023-08-22, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1018 Remote System Discovery; T1046 Network Service Discovery; T1071.001 Web Protocols; T1105 Ingress Tool Transfer; +2 more. Priority 79.9 of 100.kevransomwarepublic-exploitT1190T1059T1018T1046T1071.001T1105T1496T1571https://patchfirst.co/cve/CVE-2023-3519/CVE-2023-3519#kevWed, 19 Jul 2023 00:00:00 GMTCitrix · NetScaler ADC and NetScaler Gateway. In CISA KEV since 2023-07-19, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.7% (higher than 99.95% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1574 Hijack Execution Flow; T1105 Ingress Tool Transfer; T1087.002 Domain Account. Named in 6 threat reports. Priority 89.9 of 100.kevransomwarepublic-exploitT1190T1574T1105T1087.002https://patchfirst.co/cve/CVE-2023-20867/CVE-2023-20867#kevFri, 23 Jun 2023 00:00:00 GMTVMware · Tools. In CISA KEV since 2023-06-23. ENISA EUVD lists it as exploited. EPSS 13.6% (higher than 96.5% of CVEs). CVSS 3.9 LOW. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1105 Ingress Tool Transfer. Named in 2 threat reports. Priority 76.2 of 100.kevT1078T1059T1105https://patchfirst.co/cve/CVE-2023-34362/CVE-2023-34362#kevFri, 02 Jun 2023 00:00:00 GMTProgress · MOVEit Transfer. In CISA KEV since 2023-06-02, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1082 System Information Discovery; T1105 Ingress Tool Transfer; T1136 Create Account; +1 more. Named in 2 threat reports. Priority 86.0 of 100.kevransomwarepublic-exploitT1190T1059T1005T1082T1105T1136T1531https://patchfirst.co/cve/CVE-2023-2868/CVE-2023-2868#kevFri, 26 May 2023 00:00:00 GMTBarracuda Networks · Email Security Gateway (ESG) Appliance. In CISA KEV since 2023-05-26. ENISA EUVD lists it as exploited. EPSS 86.8% (higher than 99.74% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1566.001 Spearphishing Attachment; T1059 Command and Scripting Interpreter; T1041 Exfiltration Over C2 Channel; T1105 Ingress Tool Transfer. Priority 69.8 of 100.kevpublic-exploitT1566.001T1059T1041T1105https://patchfirst.co/cve/CVE-2023-27350/CVE-2023-27350#kevFri, 21 Apr 2023 00:00:00 GMTPaperCut · MF/NG. In CISA KEV since 2023-04-21, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1105 Ingress Tool Transfer. Priority 79.9 of 100.kevransomwarepublic-exploitT1190T1059T1105https://patchfirst.co/cve/CVE-2023-26360/CVE-2023-26360Thu, 23 Mar 2023 00:00:00 GMTAdobe · ColdFusion. In CISA KEV since 2023-03-15. ENISA EUVD lists it as exploited. EPSS 97.3% (higher than 99.9% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059.007 JavaScript; T1003.001 LSASS Memory; T1036.005 Match Legitimate Resource Name or Location; T1046 Network Service Discovery; T1071.001 Web Protocols; +3 more. Priority 69.0 of 100.kevpublic-exploitT1190T1059.007T1003.001T1036.005T1046T1071.001T1105T1484.001T1505.003https://patchfirst.co/cve/CVE-2022-26352/CVE-2022-26352#kevThu, 25 Aug 2022 00:00:00 GMTdotCMS · dotCMS. In CISA KEV since 2022-08-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 91.2% (higher than 99.81% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1105 Ingress Tool Transfer. Priority 79.8 of 100.kevransomwarepublic-exploitT1190T1105https://patchfirst.co/cve/CVE-2022-30190/CVE-2022-30190#kevTue, 14 Jun 2022 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2022-06-14, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.2% (higher than 99.93% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1105 Ingress Tool Transfer. Named in 4 threat reports. Priority 87.4 of 100.kevransomwarepublic-exploitT1204.002T1105https://patchfirst.co/cve/CVE-2010-1297/CVE-2010-1297#kevWed, 08 Jun 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 82.5% (higher than 99.66% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1204.002 Malicious File; T1105 Ingress Tool Transfer. Named in 1 threat report. Priority 72.3 of 100.kevpublic-exploitT1189T1204.002T1105https://patchfirst.co/cve/CVE-2012-0754/CVE-2012-0754#kevWed, 08 Jun 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-06-08. ENISA EUVD lists it as exploited. EPSS 91.1% (higher than 99.81% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1105 Ingress Tool Transfer. Priority 53.6 of 100.kevpublic-exploitT1105https://patchfirst.co/cve/CVE-2015-8651/CVE-2015-8651#kevWed, 25 May 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-05-25. ENISA EUVD lists it as exploited. EPSS 67.7% (higher than 99.31% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1189 Drive-by Compromise; T1105 Ingress Tool Transfer; T1486 Data Encrypted for Impact. Named in 3 threat reports. Priority 81.8 of 100.kevT1189T1105T1486https://patchfirst.co/cve/CVE-2016-0984/CVE-2016-0984#kevWed, 25 May 2022 00:00:00 GMTAdobe · Flash Player and AIR. In CISA KEV since 2022-05-25. ENISA EUVD lists it as exploited. EPSS 54.5% (higher than 99.02% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1105 Ingress Tool Transfer. Priority 69.0 of 100.kevpublic-exploitT1204.002T1105https://patchfirst.co/cve/CVE-2017-11317/CVE-2017-11317#kevMon, 11 Apr 2022 00:00:00 GMTTelerik · User Interface (UI) for ASP.NET AJAX. In CISA KEV since 2022-04-11. ENISA EUVD lists it as exploited. EPSS 84.2% (higher than 99.69% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1105 Ingress Tool Transfer. Priority 69.8 of 100.kevpublic-exploitT1190T1059T1105https://patchfirst.co/cve/CVE-2010-2861/CVE-2010-2861#kevFri, 25 Mar 2022 00:00:00 GMTAdobe · ColdFusion. In CISA KEV since 2022-03-25, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.7% (higher than 99.95% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1105 Ingress Tool Transfer; T1119 Automated Collection. Priority 79.9 of 100.kevransomwarepublic-exploitT1190T1105T1119https://patchfirst.co/cve/CVE-2010-0188/CVE-2010-0188#kevThu, 03 Mar 2022 00:00:00 GMTAdobe · Reader and Acrobat. In CISA KEV since 2022-03-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 88.2% (higher than 99.77% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1105 Ingress Tool Transfer. Named in 2 threat reports. Priority 84.5 of 100.kevransomwarepublic-exploitT1189T1105https://patchfirst.co/cve/CVE-2016-1019/CVE-2016-1019#kevThu, 03 Mar 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-03-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 22.3% (higher than 97.7% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1105 Ingress Tool Transfer; T1486 Data Encrypted for Impact. Named in 4 threat reports. Priority 83.4 of 100.kevransomwareT1105T1486https://patchfirst.co/cve/CVE-2011-0611/CVE-2011-0611#kevThu, 03 Mar 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 99.4% (higher than 99.94% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1105 Ingress Tool Transfer. Named in 3 threat reports. Priority 76.9 of 100.kevpublic-exploitT1204.002T1105https://patchfirst.co/cve/CVE-2015-5119/CVE-2015-5119#kevThu, 03 Mar 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 98.6% (higher than 99.92% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1059.007 JavaScript; T1566.002 Spearphishing Link; T1105 Ingress Tool Transfer; T1055.001 Dynamic-link Library Injection; T1071.001 Web Protocols. Named in 5 threat reports. Priority 74.8 of 100.kevpublic-exploitT1059.007T1566.002T1105T1055.001T1071.001https://patchfirst.co/cve/CVE-2016-4117/CVE-2016-4117#kevThu, 03 Mar 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-03-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 94.3% (higher than 99.85% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1105 Ingress Tool Transfer. Named in 3 threat reports. Priority 72.6 of 100.kevransomwarepublic-exploitT1105https://patchfirst.co/cve/CVE-2012-1535/CVE-2012-1535#kevThu, 03 Mar 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 70.4% (higher than 99.39% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1105 Ingress Tool Transfer. Priority 53.3 of 100.kevpublic-exploitT1204.002T1105https://patchfirst.co/cve/CVE-2013-0641/CVE-2013-0641#kevThu, 03 Mar 2022 00:00:00 GMTAdobe · Reader. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 32.3% (higher than 98.3% of CVEs). CVSS 7.8 HIGH. ATT&CK: T1204.002 Malicious File; T1105 Ingress Tool Transfer; T1048 Exfiltration Over Alternative Protocol. Named in 1 threat report. Priority 52.0 of 100.kevT1204.002T1105T1048https://patchfirst.co/cve/CVE-2017-11292/CVE-2017-11292#kevThu, 03 Mar 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-03-03. ENISA EUVD lists it as exploited. EPSS 11.9% (higher than 96.1% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.002 Malicious File; T1566.001 Spearphishing Attachment; T1105 Ingress Tool Transfer; T1005 Data from Local System. Priority 48.4 of 100.kevT1204.002T1566.001T1105T1005https://patchfirst.co/cve/CVE-2018-15982/CVE-2018-15982#kevTue, 15 Feb 2022 00:00:00 GMTAdobe · Flash Player. In CISA KEV since 2022-02-15, known ransomware use. ENISA EUVD lists it as exploited. EPSS 89.6% (higher than 99.79% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1204.002 Malicious File; T1105 Ingress Tool Transfer. Priority 63.4 of 100.kevransomwarepublic-exploitT1204.002T1105https://patchfirst.co/cve/CVE-2021-44515/CVE-2021-44515Sun, 12 Dec 2021 00:00:00 GMTZoho · Desktop Central. In CISA KEV since 2021-12-10. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.96% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1105 Ingress Tool Transfer; T1003 OS Credential Dumping; T1069 Permission Groups Discovery; T1087 Account Discovery. Priority 69.9 of 100.kevpublic-exploitT1190T1105T1003T1069T1087https://patchfirst.co/cve/CVE-2021-35394/CVE-2021-35394#kevFri, 10 Dec 2021 00:00:00 GMTRealtek · Jungle Software Development Kit (SDK). In CISA KEV since 2021-12-10. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.96% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1071.001 Web Protocols; T1105 Ingress Tool Transfer; T1496 Resource Hijacking; T1499 Endpoint Denial of Service; +1 more. Priority 69.9 of 100.kevpublic-exploitT1190T1059T1071.001T1105T1496T1499T1569.002https://patchfirst.co/cve/CVE-2021-20022/CVE-2021-20022#kevWed, 03 Nov 2021 00:00:00 GMTSonicWall · SonicWall Email Security. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 16.6% (higher than 97% of CVEs). CVSS 7.2 HIGH. ATT&CK: T1078 Valid Accounts; T1105 Ingress Tool Transfer. Priority 72.4 of 100.kevransomwareT1078T1105https://patchfirst.co/cve/CVE-2019-1620/CVE-2019-1620Thu, 27 Jun 2019 00:00:00 GMTCisco · Cisco Data Center Network Manager. Not in CISA KEV. EPSS 83.8% (higher than 99.69% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1105 Ingress Tool Transfer; T1059 Command and Scripting Interpreter. Priority 32.5 of 100.public-exploitT1105T1059https://patchfirst.co/cve/CVE-2019-1689/CVE-2019-1689Mon, 25 Feb 2019 00:00:00 GMTCisco · Cisco Webex Teams. Not in CISA KEV. EPSS 1.6% (higher than 75.4% of CVEs). CVSS 7.3 HIGH. ATT&CK: T1105 Ingress Tool Transfer; T1531 Account Access Removal; T1565.001 Stored Data Manipulation. Priority 20.2 of 100.T1105T1531T1565.001