https://patchfirst.co/technique/T1505/New and newly exploited CVEs that lead to ATT&CK T1505 Server Software Component, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2025-49706/CVE-2025-49706#kevTue, 22 Jul 2025 00:00:00 GMTMicrosoft · SharePoint. In CISA KEV since 2025-07-22, known ransomware use. ENISA EUVD lists it as exploited. EPSS 99.1% (higher than 99.93% of CVEs). CVSS 6.5 MEDIUM. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application; T1505 Server Software Component; T1059.003 Windows Command Shell. Named in 1 threat report. Priority 81.4 of 100.kevransomwarepublic-exploitT1190T1505T1059.003https://patchfirst.co/cve/CVE-2022-29303/CVE-2022-29303#kevThu, 13 Jul 2023 00:00:00 GMTSolarView · Compact. In CISA KEV since 2023-07-13. ENISA EUVD lists it as exploited. EPSS 98.0% (higher than 99.91% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. ATT&CK: T1505 Server Software Component; T1059 Command and Scripting Interpreter; T1496 Resource Hijacking. Priority 69.8 of 100.kevpublic-exploitT1505T1059T1496