https://patchfirst.co/technique/T1110/New and newly exploited CVEs that lead to ATT&CK T1110 Brute Force, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMThttps://patchfirst.co/cve/CVE-2020-0688/CVE-2020-0688#kevWed, 03 Nov 2021 00:00:00 GMTMicrosoft · Exchange Server. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.97% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1110 Brute Force; T1114 Email Collection; T1505.003 Web Shell. Named in 3 threat reports. Priority 86.9 of 100.kevransomwarepublic-exploitT1190T1110T1114T1505.003https://patchfirst.co/cve/CVE-2020-1472/CVE-2020-1472#kevWed, 03 Nov 2021 00:00:00 GMTMicrosoft · Netlogon. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.4% (higher than 99.94% of CVEs). CVSS 5.5 MEDIUM. Public exploit code exists. ATT&CK: T1110 Brute Force; T1133 External Remote Services; T1021 Remote Services; T1068 Exploitation for Privilege Escalation; T1087.002 Domain Account; T1486 Data Encrypted for Impact. Named in 8 threat reports. Priority 86.8 of 100.kevransomwarepublic-exploitT1110T1133T1021T1068T1087.002T1486https://patchfirst.co/cve/CVE-2020-15093/CVE-2020-15093Thu, 09 Jul 2020 00:00:00 GMTawslabs · tough. Not in CISA KEV. EPSS 1.4% (higher than 71.6% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1110 Brute Force; T1040 Network Sniffing; T1078 Valid Accounts; T1557 Adversary-in-the-Middle. Priority 20.3 of 100.T1110T1040T1078T1557https://patchfirst.co/cve/CVE-2020-5365/CVE-2020-5365Wed, 20 May 2020 00:00:00 GMTDell · Isilon OneFS. Not in CISA KEV. EPSS 1.0% (higher than 62.3% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1110 Brute Force; T1078.001 Default Accounts. Priority 16.2 of 100.T1110T1078.001https://patchfirst.co/cve/CVE-2020-11035/CVE-2020-11035Tue, 05 May 2020 00:00:00 GMTglpi-project · GLPI. Not in CISA KEV. EPSS 0.9% (higher than 59.6% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1110 Brute Force; T1040 Network Sniffing; T1078 Valid Accounts; T1557 Adversary-in-the-Middle. Priority 17.2 of 100.T1110T1040T1078T1557https://patchfirst.co/cve/CVE-2019-18263/CVE-2019-18263Fri, 20 Dec 2019 00:00:00 GMTNot in CISA KEV. EPSS 0.2% (higher than 9.2% of CVEs). ATT&CK: T1110 Brute Force. Priority 1.8 of 100.T1110https://patchfirst.co/cve/CVE-2019-16782/CVE-2019-16782Wed, 18 Dec 2019 00:00:00 GMTrack · rack. Not in CISA KEV. EPSS 3.7% (higher than 89.7% of CVEs). CVSS 6.3 MEDIUM. ATT&CK: T1110 Brute Force; T1563 Remote Service Session Hijacking. Priority 22.4 of 100.T1110T1563https://patchfirst.co/cve/CVE-2019-1715/CVE-2019-1715Fri, 03 May 2019 00:00:00 GMTCisco · Cisco Adaptive Security Appliance (ASA) Software. Not in CISA KEV. EPSS 1.7% (higher than 77.5% of CVEs). CVSS 5.3 MEDIUM. ATT&CK: T1110 Brute Force; T1040 Network Sniffing; T1078 Valid Accounts; T1557 Adversary-in-the-Middle. Priority 19.2 of 100.T1110T1040T1078T1557https://patchfirst.co/cve/CVE-2019-6563/CVE-2019-6563Tue, 05 Mar 2019 00:00:00 GMTICS-CERT · Moxa IKS, EDS. Not in CISA KEV. EPSS 1.7% (higher than 77.8% of CVEs). ATT&CK: T1110 Brute Force; T1539 Steal Web Session Cookie; T1078 Valid Accounts. Priority 15.6 of 100.T1110T1539T1078https://patchfirst.co/cve/CVE-2018-15800/CVE-2018-15800Mon, 10 Dec 2018 00:00:00 GMTCloud Foundry · Bits Service Release. Not in CISA KEV. EPSS 0.9% (higher than 60.5% of CVEs). CVSS 8.1 HIGH. ATT&CK: T1110 Brute Force; T1078 Valid Accounts. Priority 17.8 of 100.T1110T1078https://patchfirst.co/cve/CVE-2018-15795/CVE-2018-15795Tue, 13 Nov 2018 00:00:00 GMTPivotal Cloud Foundry · CredHub Service Broker. Not in CISA KEV. EPSS 1.3% (higher than 70.5% of CVEs). CVSS 8.1 HIGH. ATT&CK: T1110 Brute Force; T1078 Valid Accounts. Priority 19.8 of 100.T1110T1078https://patchfirst.co/cve/CVE-2018-11069/CVE-2018-11069Tue, 11 Sep 2018 00:00:00 GMTDell EMC · RSA BSAFE SSL-J. Not in CISA KEV. EPSS 1.3% (higher than 70% of CVEs). CVSS 5.9 MEDIUM. ATT&CK: T1110 Brute Force; T1600 Weaken Encryption. Priority 18.1 of 100.T1110T1600https://patchfirst.co/cve/CVE-2018-11045/CVE-2018-11045Wed, 11 Jul 2018 00:00:00 GMTPivotal · Pivotal Operations Manager. Not in CISA KEV. EPSS 0.9% (higher than 58.4% of CVEs). ATT&CK: T1110 Brute Force; T1078 Valid Accounts. Priority 11.7 of 100.T1110T1078https://patchfirst.co/cve/CVE-2018-8160/CVE-2018-8160Wed, 09 May 2018 00:00:00 GMTMicrosoft · Word. Not in CISA KEV. EPSS 8.5% (higher than 95% of CVEs). ATT&CK: T1566 Phishing; T1005 Data from Local System; T1110 Brute Force. Priority 19.0 of 100.T1566T1005T1110