https://patchfirst.co/technique/T1011/New and newly exploited CVEs that lead to ATT&CK T1011 Exfiltration Over Other Network Medium, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2024-53150/CVE-2024-53150#kevWed, 09 Apr 2025 00:00:00 GMTLinux · Kernel. In CISA KEV since 2025-04-09. ENISA EUVD lists it as exploited. EPSS 1.4% (higher than 71.6% of CVEs). CVSS 7.1 HIGH. ATT&CK: T1005 Data from Local System; T1011 Exfiltration Over Other Network Medium. Priority 57.3 of 100.kevT1005T1011https://patchfirst.co/cve/CVE-2024-50302/CVE-2024-50302#kevTue, 04 Mar 2025 00:00:00 GMTLinux · Kernel. In CISA KEV since 2025-03-04. ENISA EUVD lists it as exploited. EPSS 0.8% (higher than 56.9% of CVEs). CVSS 5.5 MEDIUM. ATT&CK: T1005 Data from Local System; T1011 Exfiltration Over Other Network Medium. Priority 53.2 of 100.kevT1005T1011https://patchfirst.co/cve/CVE-2024-40891/CVE-2024-40891#kevTue, 11 Feb 2025 00:00:00 GMTZyxel · DSL CPE Devices. In CISA KEV since 2025-02-11. ENISA EUVD lists it as exploited. EPSS 22.9% (higher than 97.7% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1055 Process Injection; T1011 Exfiltration Over Other Network Medium. Priority 68.7 of 100.kevpublic-exploitT1055T1011https://patchfirst.co/cve/CVE-2024-40890/CVE-2024-40890#kevTue, 11 Feb 2025 00:00:00 GMTZyxel · DSL CPE Devices. In CISA KEV since 2025-02-11. ENISA EUVD lists it as exploited. EPSS 20.7% (higher than 97.5% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1055 Process Injection; T1011 Exfiltration Over Other Network Medium. Priority 63.7 of 100.kevT1055T1011