https://patchfirst.co/vendor/kaseya/New and newly exploited Kaseya CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2017-18362/CVE-2017-18362#kevTue, 24 May 2022 00:00:00 GMTKaseya · Virtual System/Server Administrator (VSA). In CISA KEV since 2022-05-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 86.8% (higher than 99.74% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1005 Data from Local System; T1059 Command and Scripting Interpreter; T1190 Exploit Public-Facing Application. Priority 79.8 of 100.kevransomwarepublic-exploitT1005T1059T1190https://patchfirst.co/cve/CVE-2018-20753/CVE-2018-20753#kevWed, 13 Apr 2022 00:00:00 GMTKaseya · Virtual System/Server Administrator (VSA). In CISA KEV since 2022-04-13, known ransomware use. ENISA EUVD lists it as exploited. EPSS 29.6% (higher than 98.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059.001 PowerShell. Priority 79.5 of 100.kevransomwarepublic-exploitT1190T1059.001https://patchfirst.co/cve/CVE-2021-30116/CVE-2021-30116#kevWed, 03 Nov 2021 00:00:00 GMTKaseya · Virtual System/Server Administrator (VSA). In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 85.7% (higher than 99.73% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1552 Unsecured Credentials. Named in 1 threat report. Priority 83.7 of 100.kevransomwarepublic-exploitT1190T1552