https://patchfirst.co/vendor/october-cms/New and newly exploited October CMS CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMThttps://patchfirst.co/cve/CVE-2021-32648/CVE-2021-32648#kevTue, 18 Jan 2022 00:00:00 GMTOctober CMS · October CMS. In CISA KEV since 2022-01-18. ENISA EUVD lists it as exploited. EPSS 90.4% (higher than 99.8% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Named in 1 threat report. Priority 73.2 of 100.kevpublic-exploitT1190T1078https://patchfirst.co/cve/CVE-2020-11083/CVE-2020-11083Tue, 14 Jul 2020 00:00:00 GMTOctober CMS · October. Not in CISA KEV. EPSS 1.1% (higher than 66.8% of CVEs). CVSS 3.5 LOW. Public exploit code exists. ATT&CK: T1185 Browser Session Hijacking. Priority 20.8 of 100.public-exploitT1185