https://patchfirst.co/technique/T1556/New and newly exploited CVEs that lead to ATT&CK T1556 Modify Authentication Process, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2020-12812/CVE-2020-12812#kevWed, 03 Nov 2021 00:00:00 GMTFortinet · FortiOS. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 45.4% (higher than 98.8% of CVEs). CVSS 9.8 CRITICAL. ATT&CK: T1556 Modify Authentication Process. Named in 1 threat report. Priority 78.5 of 100.kevransomwareT1556https://patchfirst.co/cve/CVE-2020-8193/CVE-2020-8193#kevWed, 03 Nov 2021 00:00:00 GMTCitrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 88.3% (higher than 99.77% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1556 Modify Authentication Process; T1005 Data from Local System. Priority 67.5 of 100.kevpublic-exploitT1556T1005