https://patchfirst.co/technique/T1018/New and newly exploited CVEs that lead to ATT&CK T1018 Remote System Discovery, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2025-0282/CVE-2025-0282#kevWed, 08 Jan 2025 00:00:00 GMTIvanti · Connect Secure, Policy Secure, and ZTA Gateways. In CISA KEV since 2025-01-08, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.98% of CVEs). CVSS 9.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1595 Active Scanning; T1003 OS Credential Dumping; T1055 Process Injection; T1018 Remote System Discovery; T1046 Network Service Discovery. Named in 2 threat reports. Priority 85.4 of 100.kevransomwarepublic-exploitT1190T1595T1003T1055T1018T1046https://patchfirst.co/cve/CVE-2023-38035/CVE-2023-38035#kevTue, 22 Aug 2023 00:00:00 GMTIvanti · Sentry. In CISA KEV since 2023-08-22, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1018 Remote System Discovery; T1046 Network Service Discovery; T1071.001 Web Protocols; T1105 Ingress Tool Transfer; +2 more. Priority 79.9 of 100.kevransomwarepublic-exploitT1190T1059T1018T1046T1071.001T1105T1496T1571