https://patchfirst.co/vendor/gnu/New and newly exploited GNU CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMThttps://patchfirst.co/cve/CVE-2026-24061/CVE-2026-24061#kevMon, 26 Jan 2026 00:00:00 GMTGNU · InetUtils. In CISA KEV since 2026-01-26. ENISA EUVD lists it as exploited. EPSS 99.0% (higher than 99.93% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 84.8 of 100.kevpublic-exploitT1190T1078https://patchfirst.co/cve/CVE-2014-6278/CVE-2014-6278#kevThu, 02 Oct 2025 00:00:00 GMTGNU · GNU Bash. In CISA KEV since 2025-10-02. ENISA EUVD lists it as exploited. EPSS 99.7% (higher than 99.95% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1059.004 Unix Shell. Named in 1 threat report. Priority 73.0 of 100.kevpublic-exploitT1059.004https://patchfirst.co/cve/CVE-2023-4911/CVE-2023-4911#kevTue, 21 Nov 2023 00:00:00 GMTGNU · GNU C Library. In CISA KEV since 2023-11-21. ENISA EUVD lists it as exploited. EPSS 63.8% (higher than 99.22% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation. Priority 78.3 of 100.kevpublic-exploitT1068https://patchfirst.co/cve/CVE-2014-6271/CVE-2014-6271#kevFri, 28 Jan 2022 00:00:00 GMTGNU · Bourne-Again Shell (Bash). In CISA KEV since 2022-01-28. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1059.004 Unix Shell. Named in 2 threat reports. Priority 76.0 of 100.kevpublic-exploitT1133T1190T1059.004https://patchfirst.co/cve/CVE-2014-7169/CVE-2014-7169#kevFri, 28 Jan 2022 00:00:00 GMTGNU · Bourne-Again Shell (Bash). In CISA KEV since 2022-01-28. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1190 Exploit Public-Facing Application; T1059.004 Unix Shell. Priority 69.9 of 100.kevpublic-exploitT1133T1190T1059.004