https://patchfirst.co/technique/T1498/New and newly exploited CVEs that lead to ATT&CK T1498 Network Denial of Service, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMThttps://patchfirst.co/cve/CVE-2025-6543/CVE-2025-6543#kevMon, 30 Jun 2025 00:00:00 GMTCitrix · NetScaler ADC and Gateway. In CISA KEV since 2025-06-30. ENISA EUVD lists it as exploited. EPSS 10.4% (higher than 95.7% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1498 Network Denial of Service; T1059 Command and Scripting Interpreter. Priority 69.0 of 100.kevpublic-exploitT1498T1059https://patchfirst.co/cve/CVE-2024-11120/CVE-2024-11120#kevWed, 07 May 2025 00:00:00 GMTGeoVision · Multiple Devices. In CISA KEV since 2025-05-07. ENISA EUVD lists it as exploited. EPSS 28.4% (higher than 98.1% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1498 Network Denial of Service. Priority 69.5 of 100.kevpublic-exploitT1133T1498https://patchfirst.co/cve/CVE-2023-49897/CVE-2023-49897#kevThu, 21 Dec 2023 00:00:00 GMTFXC · AE1021, AE1021PE. In CISA KEV since 2023-12-21. ENISA EUVD lists it as exploited. EPSS 50.4% (higher than 98.9% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1496 Resource Hijacking; T1498 Network Denial of Service. Priority 68.9 of 100.kevpublic-exploitT1496T1498https://patchfirst.co/cve/CVE-2023-47565/CVE-2023-47565#kevThu, 21 Dec 2023 00:00:00 GMTQNAP · VioStor NVR. In CISA KEV since 2023-12-21. ENISA EUVD lists it as exploited. EPSS 73.3% (higher than 99.46% of CVEs). CVSS 8.8 HIGH. ATT&CK: T1496 Resource Hijacking; T1498 Network Denial of Service. Priority 64.1 of 100.kevT1496T1498https://patchfirst.co/cve/CVE-2023-1389/CVE-2023-1389#kevMon, 01 May 2023 00:00:00 GMTTP-Link · Archer AX21. In CISA KEV since 2023-05-01. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 8.8 HIGH. Public exploit code exists. ATT&CK: T1106 Native API; T1496 Resource Hijacking; T1041 Exfiltration Over C2 Channel; T1070 Indicator Removal; T1498 Network Denial of Service. Priority 69.2 of 100.kevpublic-exploitT1106T1496T1041T1070T1498https://patchfirst.co/cve/CVE-2022-0028/CVE-2022-0028#kevMon, 22 Aug 2022 00:00:00 GMTPalo Alto Networks · PAN-OS. In CISA KEV since 2022-08-22. ENISA EUVD lists it as exploited. EPSS 2.7% (higher than 85.9% of CVEs). CVSS 8.6 HIGH. ATT&CK: T1190 Exploit Public-Facing Application; T1498 Network Denial of Service. Priority 61.2 of 100.kevT1190T1498https://patchfirst.co/cve/CVE-2022-26143/CVE-2022-26143#kevFri, 25 Mar 2022 00:00:00 GMTMitel · MiCollab, MiVoice Business Express. In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 87.3% (higher than 99.75% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1498 Network Denial of Service. Priority 69.8 of 100.kevpublic-exploitT1190T1498https://patchfirst.co/cve/CVE-2019-0708/CVE-2019-0708#kevWed, 03 Nov 2021 00:00:00 GMTMicrosoft · Remote Desktop Services. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS >99.9% (higher than 99.99% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1133 External Remote Services; T1498 Network Denial of Service. Named in 2 threat reports. Priority 86.0 of 100.kevransomwarepublic-exploitT1133T1498https://patchfirst.co/cve/CVE-2021-22205/CVE-2021-22205#kevWed, 03 Nov 2021 00:00:00 GMTGitLab · Community and Enterprise Editions. In CISA KEV since 2021-11-03, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.7% (higher than 99.95% of CVEs). CVSS 10.0 CRITICAL. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1059 Command and Scripting Interpreter; T1498 Network Denial of Service; T1496 Resource Hijacking. Priority 80.0 of 100.kevransomwarepublic-exploitT1190T1059T1498T1496