https://patchfirst.co/technique/T1190/New and newly exploited CVEs that lead to ATT&CK T1190 Exploit Public-Facing Application, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2026-118527/CVE-2026-118527#kevFri, 30 Oct 2026 00:00:00 GMTIvanti · Connect Secure. In CISA KEV since 2026-10-30. No EPSS score. ATT&CK: T1190 Exploit Public-Facing Application; T1105 Ingress Tool Transfer. Priority 45.0 of 100.kevT1190T1105https://patchfirst.co/cve/CVE-2026-97229/CVE-2026-97229#kevThu, 29 Oct 2026 00:00:00 GMTGitLab · Community Edition and Enterprise Edition. In CISA KEV since 2026-10-29. ENISA EUVD lists it as exploited. EPSS 26.6% (higher than 98% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.5 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-76418/CVE-2026-76418#kevThu, 29 Oct 2026 00:00:00 GMTCisco · Secure Firewall ASA Software and Cisco Secure FTD Software. In CISA KEV since 2026-10-29. ENISA EUVD lists it as exploited. EPSS 0.9% (higher than 59.9% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 64.4 of 100.kevT1190T1499.004https://patchfirst.co/cve/CVE-2026-111497/CVE-2026-111497#kevTue, 27 Oct 2026 00:00:00 GMTGoogle · Brotli. In CISA KEV since 2026-10-27. ENISA EUVD lists it as exploited. EPSS 82.6% (higher than 99.67% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1059 Command and Scripting Interpreter; T1499.004 Application or System Exploitation. Priority 79.8 of 100.kevpublic-exploitT1190T1005T1059T1499.004https://patchfirst.co/cve/CVE-2026-109618/CVE-2026-109618#kevMon, 26 Oct 2026 00:00:00 GMTPHP Group · PHP. In CISA KEV since 2026-10-26. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.9 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-109619/CVE-2026-109619#kevMon, 26 Oct 2026 00:00:00 GMTPHP Group · PHP. In CISA KEV since 2026-10-26. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 78.7 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-110447/CVE-2026-110447#kevFri, 23 Oct 2026 00:00:00 GMTCollabora · Collabora Online – Built-in CODE Server. In CISA KEV since 2026-10-23. ENISA EUVD lists it as exploited. EPSS 73.3% (higher than 99.46% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 89.4 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-114625/CVE-2026-114625#kevFri, 23 Oct 2026 00:00:00 GMTArista · VeloCloud Orchestrator. In CISA KEV since 2026-10-23. ENISA EUVD lists it as exploited. EPSS 1.0% (higher than 63.5% of CVEs). CVSS 9.9 CRITICAL. Public exploit code exists. ATT&CK: T1078 Valid Accounts; T1068 Exploitation for Privilege Escalation; T1190 Exploit Public-Facing Application. Priority 72.5 of 100.kevpublic-exploitT1078T1068T1190https://patchfirst.co/cve/CVE-2026-96652/CVE-2026-96652#kevTue, 20 Oct 2026 00:00:00 GMTPlex · Media Server. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 1.8% (higher than 78.7% of CVEs). CVSS 4.3 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1090 Proxy. Priority 71.2 of 100.kevpublic-exploitT1190T1090https://patchfirst.co/cve/CVE-2026-96654/CVE-2026-96654#kevTue, 20 Oct 2026 00:00:00 GMTPlex · Media Server. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 1.9% (higher than 80.2% of CVEs). CVSS 6.5 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 68.0 of 100.kevT1190T1059https://patchfirst.co/cve/CVE-2026-96655/CVE-2026-96655#kevTue, 20 Oct 2026 00:00:00 GMTPlex · Media Server. In CISA KEV since 2026-10-20. ENISA EUVD lists it as exploited. EPSS 1.6% (higher than 76.3% of CVEs). CVSS 4.3 MEDIUM. ATT&CK: T1190 Exploit Public-Facing Application; T1090 Proxy. Priority 65.7 of 100.kevT1190T1090https://patchfirst.co/cve/CVE-2026-102764/CVE-2026-102764#kevFri, 16 Oct 2026 00:00:00 GMTBeyondTrust · Remote Support. In CISA KEV since 2026-10-16. ENISA EUVD lists it as exploited. EPSS 18.9% (higher than 97.3% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 79.3 of 100.kevpublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2026-21589/CVE-2026-21589#kevThu, 15 Oct 2026 00:00:00 GMTAtlassian · Multiple Products. In CISA KEV since 2026-10-15. ENISA EUVD lists it as exploited. EPSS 99.5% (higher than 99.94% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 78.2 of 100.kevpublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2026-105134/CVE-2026-105134#kevWed, 14 Oct 2026 00:00:00 GMTAhsay · AhsayCBS. In CISA KEV since 2026-10-14. ENISA EUVD lists it as exploited. EPSS 81.8% (higher than 99.64% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.9 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-105133/CVE-2026-105133#kevWed, 14 Oct 2026 00:00:00 GMTAhsay · AhsayCBS. In CISA KEV since 2026-10-14. ENISA EUVD lists it as exploited. EPSS 79.5% (higher than 99.6% of CVEs). CVSS 7.3 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 78.0 of 100.kevpublic-exploitT1190T1078https://patchfirst.co/cve/CVE-2026-76519/CVE-2026-76519#kevWed, 14 Oct 2026 00:00:00 GMTCisco · Secure Email Gateway. In CISA KEV since 2026-10-14. ENISA EUVD lists it as exploited. EPSS 2.2% (higher than 82.1% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1105 Ingress Tool Transfer. Priority 76.3 of 100.kevpublic-exploitT1190T1059T1105https://patchfirst.co/cve/CVE-2026-104935/CVE-2026-104935#kevTue, 13 Oct 2026 00:00:00 GMTIvanti · Connect Secure. In CISA KEV since 2026-10-13. ENISA EUVD lists it as exploited. EPSS 86.8% (higher than 99.74% of CVEs). CVSS 8.6 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.0 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2015-3306/CVE-2015-3306#kevThu, 08 Oct 2026 00:00:00 GMTProFTPD · ProFTPD. In CISA KEV since 2026-10-08. ENISA EUVD lists it as exploited. EPSS 99.5% (higher than 99.94% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 80.0 of 100.kevpublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2021-3199/CVE-2021-3199#kevThu, 08 Oct 2026 00:00:00 GMTONLYOFFICE · Docs. In CISA KEV since 2026-10-08. ENISA EUVD lists it as exploited. EPSS 30.2% (higher than 98.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.5 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2016-3081/CVE-2016-3081#kevThu, 08 Oct 2026 00:00:00 GMTApache · Struts. In CISA KEV since 2026-10-08. ENISA EUVD lists it as exploited. EPSS 96.5% (higher than 99.88% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 73.6 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2015-5477/CVE-2015-5477#kevThu, 08 Oct 2026 00:00:00 GMTISC · BIND. In CISA KEV since 2026-10-08. ENISA EUVD lists it as exploited. EPSS 99.6% (higher than 99.95% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1499.004 Application or System Exploitation. Priority 68.2 of 100.kevpublic-exploitT1190T1499.004https://patchfirst.co/cve/CVE-2026-88779/CVE-2026-88779#kevSun, 04 Oct 2026 00:00:00 GMTCitrix · NetScaler. In CISA KEV since 2026-10-04. ENISA EUVD lists it as exploited. EPSS 11.4% (higher than 96% of CVEs). CVSS 7.5 HIGH. ATT&CK: T1190 Exploit Public-Facing Application. Priority 72.4 of 100.kevT1190https://patchfirst.co/cve/CVE-2026-102489/CVE-2026-102489#kevFri, 02 Oct 2026 00:00:00 GMTZammad GmbH · Zammad. In CISA KEV since 2026-10-02. ENISA EUVD lists it as exploited. EPSS 22.5% (higher than 97.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.4 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-104286/CVE-2026-104286#kevThu, 01 Oct 2026 00:00:00 GMTFortinet · FortiMail. In CISA KEV since 2026-10-01. ENISA EUVD lists it as exploited. EPSS 4.6% (higher than 91.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1565.001 Stored Data Manipulation. Priority 78.2 of 100.kevpublic-exploitT1190T1565.001https://patchfirst.co/cve/CVE-2026-76504/CVE-2026-76504#kevWed, 30 Sep 2026 00:00:00 GMTCisco · Catalyst SD-WAN Manager. In CISA KEV since 2026-09-30. ENISA EUVD lists it as exploited. EPSS 38.9% (higher than 98.6% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 79.6 of 100.kevpublic-exploitT1190T1078https://patchfirst.co/cve/CVE-2026-88771/CVE-2026-88771#kevSun, 27 Sep 2026 00:00:00 GMTCitrix · NetScaler. In CISA KEV since 2026-09-27. ENISA EUVD lists it as exploited. EPSS 82.2% (higher than 99.66% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-88772/CVE-2026-88772#kevSun, 27 Sep 2026 00:00:00 GMTCitrix · NetScaler. In CISA KEV since 2026-09-27. ENISA EUVD lists it as exploited. EPSS 78.2% (higher than 99.58% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 78.6 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-87902/CVE-2026-87902#kevFri, 25 Sep 2026 00:00:00 GMTWordPress · Core. In CISA KEV since 2026-09-25. ENISA EUVD lists it as exploited. EPSS 95.8% (higher than 99.87% of CVEs). CVSS 8.1 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 78.6 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-65660/CVE-2026-65660#kevFri, 25 Sep 2026 00:00:00 GMTMicrosoft · SharePoint. In CISA KEV since 2026-09-25. ENISA EUVD lists it as exploited. EPSS 8.2% (higher than 94.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 78.1 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-67279/CVE-2026-67279#kevFri, 25 Sep 2026 00:00:00 GMTMikroTik · RouterOS. In CISA KEV since 2026-09-25. ENISA EUVD lists it as exploited. EPSS 2.3% (higher than 83.1% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1565.001 Stored Data Manipulation. Priority 74.2 of 100.kevpublic-exploitT1190T1059T1565.001https://patchfirst.co/cve/CVE-2026-5430/CVE-2026-5430#kevThu, 24 Sep 2026 00:00:00 GMTWSO2 · Multiple Products. In CISA KEV since 2026-09-24. ENISA EUVD lists it as exploited. EPSS 22.4% (higher than 97.7% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts; T1550 Use Alternate Authentication Material. Priority 79.5 of 100.kevpublic-exploitT1190T1078T1550https://patchfirst.co/cve/CVE-2026-71362/CVE-2026-71362#kevThu, 24 Sep 2026 00:00:00 GMTAdobe · Commerce and Magento . In CISA KEV since 2026-09-24. ENISA EUVD lists it as exploited. EPSS 90.5% (higher than 99.8% of CVEs). CVSS 9.1 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 79.3 of 100.kevpublic-exploitT1190T1068https://patchfirst.co/cve/CVE-2026-93616/CVE-2026-93616#kevTue, 22 Sep 2026 00:00:00 GMTCheck Point · Multiple Products. In CISA KEV since 2026-09-22. ENISA EUVD lists it as exploited. EPSS 91.6% (higher than 99.81% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-85102/CVE-2026-85102#kevTue, 22 Sep 2026 00:00:00 GMTCheck Point · Multiple Products. In CISA KEV since 2026-09-22. ENISA EUVD lists it as exploited. EPSS 54.1% (higher than 99.01% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.7 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-94127/CVE-2026-94127#kevTue, 22 Sep 2026 00:00:00 GMTF5 · BIG-IP APM. In CISA KEV since 2026-09-22. ENISA EUVD lists it as exploited. EPSS 24.9% (higher than 97.9% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.4 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-93952/CVE-2026-93952#kevTue, 22 Sep 2026 00:00:00 GMTArista · VeloCloud Orchestrator. In CISA KEV since 2026-09-22. ENISA EUVD lists it as exploited. EPSS 1.4% (higher than 72.2% of CVEs). CVSS 10.0 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 69.4 of 100.kevT1190T1068https://patchfirst.co/cve/CVE-2026-7273/CVE-2026-7273#kevMon, 21 Sep 2026 00:00:00 GMTZyxel · GS1900 Series Switches. In CISA KEV since 2026-09-21. ENISA EUVD lists it as exploited. EPSS 2.8% (higher than 86.4% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 76.4 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2025-39682/CVE-2025-39682#kevFri, 18 Sep 2026 00:00:00 GMTLinux · Kernel. In CISA KEV since 2026-09-18. ENISA EUVD lists it as exploited. EPSS 3.3% (higher than 88.3% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Priority 77.5 of 100.kevpublic-exploitT1190https://patchfirst.co/cve/CVE-2026-76460/CVE-2026-76460#kevWed, 16 Sep 2026 00:00:00 GMTCisco · Identity Services Engine. In CISA KEV since 2026-09-16. ENISA EUVD lists it as exploited. EPSS 75.6% (higher than 99.52% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1078 Valid Accounts. Priority 79.9 of 100.kevpublic-exploitT1190T1078https://patchfirst.co/cve/CVE-2026-76461/CVE-2026-76461#kevMon, 14 Sep 2026 00:00:00 GMTCisco · Secure Email Gateway. In CISA KEV since 2026-09-14. ENISA EUVD lists it as exploited. EPSS 29.5% (higher than 98.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.5 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-85706/CVE-2026-85706Sat, 12 Sep 2026 00:00:00 GMTGitLab · Community Edition and Enterprise Edition. In CISA KEV since 2026-09-11. ENISA EUVD lists it as exploited. EPSS 97.4% (higher than 99.9% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System. Priority 80.0 of 100.kevpublic-exploitT1190T1005https://patchfirst.co/cve/CVE-2026-42018/CVE-2026-42018#kevFri, 11 Sep 2026 00:00:00 GMTJFrog · Artifactory. In CISA KEV since 2026-09-11. ENISA EUVD lists it as exploited. EPSS 9.8% (higher than 95.5% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1528 Steal Application Access Token. Priority 77.4 of 100.kevpublic-exploitT1190T1528https://patchfirst.co/cve/CVE-2026-86060/CVE-2026-86060#kevThu, 10 Sep 2026 00:00:00 GMTMikroTik · RouterOS. In CISA KEV since 2026-09-10. ENISA EUVD lists it as exploited. EPSS 6.4% (higher than 93.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1068 Exploitation for Privilege Escalation. Priority 78.6 of 100.kevpublic-exploitT1190T1068https://patchfirst.co/cve/CVE-2026-67277/CVE-2026-67277#kevThu, 10 Sep 2026 00:00:00 GMTMikroTik · RouterOS. In CISA KEV since 2026-09-10. ENISA EUVD lists it as exploited. EPSS 1.6% (higher than 75.2% of CVEs). CVSS 8.2 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1499.004 Application or System Exploitation. Priority 73.8 of 100.kevpublic-exploitT1190T1005T1499.004https://patchfirst.co/cve/CVE-2026-20079/CVE-2026-20079#kevWed, 09 Sep 2026 00:00:00 GMTCisco · Secure Firewall Management Center (FMC) and Security Cloud Control (SCC) Firewall Management. In CISA KEV since 2026-09-09. ENISA EUVD lists it as exploited. EPSS 88.7% (higher than 99.77% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Named in 1 threat report. Priority 83.8 of 100.kevpublic-exploitT1190https://patchfirst.co/cve/CVE-2025-25249/CVE-2025-25249#kevWed, 09 Sep 2026 00:00:00 GMTFortinet · Multiple Products. In CISA KEV since 2026-09-09. ENISA EUVD lists it as exploited. EPSS 3.7% (higher than 89.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 77.8 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-86218/CVE-2026-86218#kevTue, 08 Sep 2026 00:00:00 GMTN-able · N-central. In CISA KEV since 2026-09-08. ENISA EUVD lists it as exploited. EPSS 15.4% (higher than 96.8% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.2 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-75650/CVE-2026-75650#kevTue, 08 Sep 2026 00:00:00 GMTAdobe · Commerce and Magento. In CISA KEV since 2026-09-08. ENISA EUVD lists it as exploited. EPSS 3.9% (higher than 90.4% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 78.1 of 100.kevpublic-exploitT1190T1059https://patchfirst.co/cve/CVE-2026-48710/CVE-2026-48710#kevWed, 02 Sep 2026 00:00:00 GMTKludex · Starlette. In CISA KEV since 2026-09-02. ENISA EUVD lists it as exploited. EPSS 70.3% (higher than 99.38% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Priority 82.4 of 100.kevpublic-exploitT1190https://patchfirst.co/cve/CVE-2026-9586/CVE-2026-9586#kevWed, 02 Sep 2026 00:00:00 GMTSangoma · Switchvox. In CISA KEV since 2026-09-02. ENISA EUVD lists it as exploited. EPSS 19.0% (higher than 97.3% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter. Priority 79.3 of 100.kevpublic-exploitT1190T1059