https://patchfirst.co/technique/T1608/New and newly exploited CVEs that lead to ATT&CK T1608 Stage Capabilities, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2019-16009/CVE-2019-16009Wed, 23 Sep 2020 00:00:00 GMTCisco · Cisco IOS 12.2(15)B. Not in CISA KEV. EPSS 1.0% (higher than 62% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1204.001 Malicious Link; T1608 Stage Capabilities. Priority 19.9 of 100.T1204.001T1608https://patchfirst.co/cve/CVE-2020-3379/CVE-2020-3379Thu, 16 Jul 2020 00:00:00 GMTCisco · Cisco SD-WAN Solution. Not in CISA KEV. EPSS 0.4% (higher than 28.7% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1078 Valid Accounts; T1608 Stage Capabilities. Priority 9.5 of 100.T1078T1608https://patchfirst.co/cve/CVE-2019-15288/CVE-2019-15288Tue, 26 Nov 2019 00:00:00 GMTCisco · Cisco TelePresence TC Software. Not in CISA KEV. EPSS 1.7% (higher than 77.8% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1078 Valid Accounts; T1133 External Remote Services; T1608 Stage Capabilities. Priority 21.7 of 100.T1078T1133T1608https://patchfirst.co/cve/CVE-2019-1768/CVE-2019-1768Thu, 16 May 2019 00:00:00 GMTCisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 1.0% (higher than 61.5% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1608 Stage Capabilities; T1059 Command and Scripting Interpreter. Priority 17.0 of 100.T1078T1608T1059https://patchfirst.co/cve/CVE-2019-1781/CVE-2019-1781Wed, 15 May 2019 00:00:00 GMTCisco · Cisco NX-OS Software. Not in CISA KEV. EPSS 0.5% (higher than 40.2% of CVEs). CVSS 6.7 MEDIUM. ATT&CK: T1078 Valid Accounts; T1608 Stage Capabilities; T1059 Command and Scripting Interpreter. Priority 12.7 of 100.T1078T1608T1059https://patchfirst.co/cve/CVE-2019-1857/CVE-2019-1857Fri, 03 May 2019 00:00:00 GMTCisco · Cisco HyperFlex HX-Series. Not in CISA KEV. EPSS 0.6% (higher than 48.3% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1204.001 Malicious Link; T1608 Stage Capabilities. Priority 15.3 of 100.T1204.001T1608https://patchfirst.co/cve/CVE-2018-15466/CVE-2018-15466Fri, 11 Jan 2019 00:00:00 GMTCisco · Cisco Policy Suite (CPS) Software. Not in CISA KEV. EPSS 1.9% (higher than 80% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1608 Stage Capabilities; T1005 Data from Local System. Priority 19.7 of 100.T1608T1005https://patchfirst.co/cve/CVE-2018-15401/CVE-2018-15401Fri, 05 Oct 2018 00:00:00 GMTCisco · Cisco Hosted Collaboration Mediation Fulfillment. Not in CISA KEV. EPSS 0.5% (higher than 42.9% of CVEs). ATT&CK: T1204.001 Malicious Link; T1608 Stage Capabilities. Priority 9.9 of 100.T1204.001T1608