{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1556 Modify Authentication Process","home_page_url":"https://patchfirst.co/technique/T1556/","feed_url":"https://patchfirst.co/feed/technique/T1556.json","description":"New and newly exploited CVEs that lead to ATT&CK T1556 Modify Authentication Process, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2020-12812#kev","url":"https://patchfirst.co/cve/CVE-2020-12812/","title":"[KEV] CVE-2020-12812: Fortinet FortiOS SSL VPN Improper Authentication Vulnerability","content_text":"Fortinet · FortiOS. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 45.4% (higher than 98.8% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1556 Modify Authentication Process. Named in 1 threat report. Priority 78.5 of 100.","summary":"Fortinet FortiOS SSL VPN Improper Authentication Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-10-02T14:54:53.000Z","tags":["kev","ransomware","T1556"],"_patchfirst":{"reason":"kev","priority":78.5,"kev":{"dateAdded":"2021-11-03","ransomware":true},"epss":{"score":0.45379,"percentile":0.98788},"cvss":{"score":9.8,"severity":"CRITICAL","version":"3.1"},"vendor":"Fortinet","product":"FortiOS","techniqueIds":["T1556"],"reportCount":1,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2020-8193#kev","url":"https://patchfirst.co/cve/CVE-2020-8193/","title":"[KEV] CVE-2020-8193: Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","content_text":"Citrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 88.3% (higher than 99.77% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1556 Modify Authentication Process; T1005 Data from Local System. Priority 67.5 of 100.","summary":"Citrix ADC, Gateway, and SD-WAN WANOP Appliance Authorization Bypass Vulnerability","date_published":"2021-11-03T00:00:00.000Z","date_modified":"2026-06-17T03:26:01.000Z","tags":["kev","public-exploit","T1556","T1005"],"_patchfirst":{"reason":"kev","priority":67.5,"kev":{"dateAdded":"2021-11-03","ransomware":false},"epss":{"score":0.88269,"percentile":0.99768},"cvss":{"score":6.5,"severity":"MEDIUM","version":"3.1"},"vendor":"Citrix","product":"Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance","techniqueIds":["T1556","T1005"],"reportCount":0,"hasPublicExploit":true,"euvdExploited":true}}]}