{"version":"https://jsonfeed.org/version/1.1","title":"Patchfirst: CVEs linked to T1574.008 Path Interception by Search Order Hijacking","home_page_url":"https://patchfirst.co/technique/T1574.008/","feed_url":"https://patchfirst.co/feed/technique/T1574.008.json","description":"New and newly exploited CVEs that lead to ATT&CK T1574.008 Path Interception by Search Order Hijacking, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.","language":"en-GB","items":[{"id":"CVE-2026-110936#kev","url":"https://patchfirst.co/cve/CVE-2026-110936/","title":"[KEV] CVE-2026-110936: Siemens Software Center Uncontrolled Search Path Element Vulnerability","content_text":"Siemens · Software Center. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 61.7% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1574.008 Path Interception by Search Order Hijacking. Priority 65.0 of 100.","summary":"Siemens Software Center Uncontrolled Search Path Element Vulnerability","date_published":"2026-10-20T00:00:00.000Z","date_modified":"2026-10-21T13:10:11.000Z","tags":["kev","T1078","T1059","T1574.008"],"_patchfirst":{"reason":"kev","priority":65,"kev":{"dateAdded":"2026-10-20","ransomware":false},"epss":{"score":0.00967,"percentile":0.6171},"cvss":{"score":6.7,"severity":"MEDIUM","version":"3.1"},"vendor":"Siemens","product":"Software Center","techniqueIds":["T1078","T1059","T1574.008"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":true}},{"id":"CVE-2019-1794","url":"https://patchfirst.co/cve/CVE-2019-1794/","title":"CVE-2019-1794: Cisco Directory Connector Search Order Hijacking Vulnerability","content_text":"Cisco · Cisco Directory Connector. Not in CISA KEV. EPSS 0.4% (higher than 32.4% of CVEs). CVSS 5.1 MEDIUM. ATT&CK: T1078 Valid Accounts; T1574.008 Path Interception by Search Order Hijacking. Priority 10.0 of 100.","summary":"Cisco Directory Connector Search Order Hijacking Vulnerability","date_published":"2019-04-18T00:00:00.000Z","date_modified":"2024-11-21T19:38:39.000Z","tags":["T1078","T1574.008"],"_patchfirst":{"reason":"published","priority":10,"kev":null,"epss":{"score":0.00383,"percentile":0.32362},"cvss":{"score":5.1,"severity":"MEDIUM","version":"3.0"},"vendor":"Cisco","product":"Cisco Directory Connector","techniqueIds":["T1078","T1574.008"],"reportCount":0,"hasPublicExploit":false,"euvdExploited":false}}]}