https://patchfirst.co/technique/T1495/New and newly exploited CVEs that lead to ATT&CK T1495 Firmware Corruption, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2024-54085/CVE-2024-54085#kevWed, 25 Jun 2025 00:00:00 GMTAMI · MegaRAC SPx. In CISA KEV since 2025-06-25. ENISA EUVD lists it as exploited. EPSS 60.7% (higher than 99.15% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1068 Exploitation for Privilege Escalation; T1210 Exploitation of Remote Services; T1495 Firmware Corruption; T1499 Endpoint Denial of Service; T1608.001 Upload Malware. Priority 69.7 of 100.kevpublic-exploitT1068T1210T1495T1499T1608.001https://patchfirst.co/cve/CVE-2025-21480/CVE-2025-21480#kevTue, 03 Jun 2025 00:00:00 GMTQualcomm · Multiple Chipsets. In CISA KEV since 2025-06-03. ENISA EUVD lists it as exploited. EPSS 0.4% (higher than 37.1% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1055 Process Injection; T1495 Firmware Corruption. Priority 51.4 of 100.kevT1055T1495