https://patchfirst.co/technique/T1082/New and newly exploited CVEs that lead to ATT&CK T1082 System Information Discovery, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2024-23692/CVE-2024-23692#kevTue, 09 Jul 2024 00:00:00 GMTRejetto · HTTP File Server. In CISA KEV since 2024-07-09, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.5% (higher than 99.94% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1082 System Information Discovery; T1005 Data from Local System; T1105 Ingress Tool Transfer; T1496 Resource Hijacking. Priority 79.8 of 100.kevransomwarepublic-exploitT1082T1005T1105T1496https://patchfirst.co/cve/CVE-2023-43770/CVE-2023-43770#kevMon, 12 Feb 2024 00:00:00 GMTRoundcube · Webmail. In CISA KEV since 2024-02-12. ENISA EUVD lists it as exploited. EPSS 63.7% (higher than 99.22% of CVEs). CVSS 6.1 MEDIUM. Public exploit code exists. ATT&CK: T1189 Drive-by Compromise; T1059 Command and Scripting Interpreter; T1082 System Information Discovery. Priority 67.1 of 100.kevpublic-exploitT1189T1059T1082https://patchfirst.co/cve/CVE-2023-34362/CVE-2023-34362#kevFri, 02 Jun 2023 00:00:00 GMTProgress · MOVEit Transfer. In CISA KEV since 2023-06-02, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.97% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1005 Data from Local System; T1082 System Information Discovery; T1105 Ingress Tool Transfer; T1136 Create Account; +1 more. Named in 2 threat reports. Priority 86.0 of 100.kevransomwarepublic-exploitT1190T1059T1005T1082T1105T1136T1531https://patchfirst.co/cve/CVE-2023-21492/CVE-2023-21492#kevFri, 19 May 2023 00:00:00 GMTSamsung · Mobile Devices. In CISA KEV since 2023-05-19. ENISA EUVD lists it as exploited. EPSS 2.6% (higher than 85% of CVEs). CVSS 4.4 MEDIUM. ATT&CK: T1078 Valid Accounts; T1082 System Information Discovery. Priority 58.1 of 100.kevT1078T1082https://patchfirst.co/cve/CVE-2018-19322/CVE-2018-19322#kevMon, 24 Oct 2022 00:00:00 GMTGIGABYTE · Multiple Products. In CISA KEV since 2022-10-24, known ransomware use. ENISA EUVD lists it as exploited. EPSS 1.8% (higher than 78.7% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1082 System Information Discovery. Priority 74.2 of 100.kevransomwarepublic-exploitT1068T1082https://patchfirst.co/cve/CVE-2021-40449/CVE-2021-40449#kevWed, 17 Nov 2021 00:00:00 GMTMicrosoft · Windows. In CISA KEV since 2021-11-17, known ransomware use. ENISA EUVD lists it as exploited. EPSS 81.9% (higher than 99.65% of CVEs). CVSS 7.8 HIGH. Public exploit code exists. ATT&CK: T1566 Phishing; T1068 Exploitation for Privilege Escalation; T1016 System Network Configuration Discovery; T1027 Obfuscated Files or Information; T1059.003 Windows Command Shell; T1071.001 Web Protocols; +2 more. Priority 78.4 of 100.kevransomwarepublic-exploitT1566T1068T1016T1027T1059.003T1071.001T1082T1573.001https://patchfirst.co/cve/CVE-2020-8195/CVE-2020-8195#kevWed, 03 Nov 2021 00:00:00 GMTCitrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 33.0% (higher than 98.4% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1056 Input Capture; T1005 Data from Local System; T1082 System Information Discovery. Priority 77.2 of 100.kevpublic-exploitT1056T1005T1082https://patchfirst.co/cve/CVE-2020-8196/CVE-2020-8196#kevWed, 03 Nov 2021 00:00:00 GMTCitrix · Application Delivery Controller (ADC), Gateway, and SD-WAN WANOP Appliance. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 26.3% (higher than 98% of CVEs). CVSS 4.3 MEDIUM. Public exploit code exists. ATT&CK: T1056 Input Capture; T1082 System Information Discovery; T1005 Data from Local System. Priority 75.6 of 100.kevpublic-exploitT1056T1082T1005https://patchfirst.co/cve/CVE-2019-1653/CVE-2019-1653#kevWed, 03 Nov 2021 00:00:00 GMTCisco · Small Business RV320 and RV325 Routers. In CISA KEV since 2021-11-03. ENISA EUVD lists it as exploited. EPSS 99.9% (higher than 99.96% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1082 System Information Discovery; T1005 Data from Local System; T1007 System Service Discovery. Named in 1 threat report. Priority 72.1 of 100.kevpublic-exploitT1190T1082T1005T1007