https://patchfirst.co/vendor/saltstack/New and newly exploited SaltStack CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2020-16846/CVE-2020-16846#kevWed, 03 Nov 2021 00:00:00 GMTSaltStack · Salt. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 99.6% (higher than 99.95% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2020-11651/CVE-2020-11651#kevWed, 03 Nov 2021 00:00:00 GMTSaltStack · Salt. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 96.6% (higher than 99.88% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 69.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2020-11652/CVE-2020-11652#kevWed, 03 Nov 2021 00:00:00 GMTSaltStack · Salt. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 86.2% (higher than 99.73% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1005 Data from Local System; T1190 Exploit Public-Facing Application. Priority 67.5 of 100.kevpublic-exploitT1005T1190