https://patchfirst.co/technique/T1574.008/New and newly exploited CVEs that lead to ATT&CK T1574.008 Path Interception by Search Order Hijacking, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-110936/CVE-2026-110936#kevTue, 20 Oct 2026 00:00:00 GMTSiemens · Software Center. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 61.7% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1059 Command and Scripting Interpreter; T1574.008 Path Interception by Search Order Hijacking. Priority 65.0 of 100.kevT1078T1059T1574.008https://patchfirst.co/cve/CVE-2019-1794/CVE-2019-1794Thu, 18 Apr 2019 00:00:00 GMTCisco · Cisco Directory Connector. Not in CISA KEV. EPSS 0.4% (higher than 32.4% of CVEs). CVSS 5.1 MEDIUM. ATT&CK: T1078 Valid Accounts; T1574.008 Path Interception by Search Order Hijacking. Priority 10.0 of 100.T1078T1574.008