https://patchfirst.co/technique/T1542.001/New and newly exploited CVEs that lead to ATT&CK T1542.001 System Firmware, with CISA KEV and EPSS context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMThttps://patchfirst.co/cve/CVE-2025-47827/CVE-2025-47827#kevTue, 14 Oct 2025 00:00:00 GMTIGEL · IGEL OS. In CISA KEV since 2025-10-14. ENISA EUVD lists it as exploited. EPSS 4.9% (higher than 92.1% of CVEs). CVSS 4.6 MEDIUM. Public exploit code exists. ATT&CK: T1542 Pre-OS Boot; T1542.001 System Firmware. Priority 64.6 of 100.kevpublic-exploitT1542T1542.001https://patchfirst.co/cve/CVE-2019-1736/CVE-2019-1736Wed, 23 Sep 2020 00:00:00 GMTCisco · Cisco Identity Services Engine Software. Not in CISA KEV. EPSS 0.2% (higher than 16% of CVEs). CVSS 6.2 MEDIUM. ATT&CK: T1542.001 System Firmware. Priority 7.5 of 100.T1542.001https://patchfirst.co/cve/CVE-2020-5379/CVE-2020-5379Wed, 02 Sep 2020 00:00:00 GMTDell · CPG BIOS. Not in CISA KEV. EPSS 0.4% (higher than 33.9% of CVEs). CVSS 6.8 MEDIUM. ATT&CK: T1542.001 System Firmware. Priority 11.5 of 100.T1542.001https://patchfirst.co/cve/CVE-2020-5376/CVE-2020-5376Wed, 02 Sep 2020 00:00:00 GMTDell · CPG BIOS. Not in CISA KEV. EPSS 0.4% (higher than 33.1% of CVEs). CVSS 6.8 MEDIUM. ATT&CK: T1542.001 System Firmware. Priority 11.4 of 100.T1542.001https://patchfirst.co/cve/CVE-2020-5378/CVE-2020-5378Wed, 02 Sep 2020 00:00:00 GMTDell · CPG BIOS. Not in CISA KEV. EPSS 0.4% (higher than 33.1% of CVEs). CVSS 6.8 MEDIUM. ATT&CK: T1542.001 System Firmware. Priority 11.4 of 100.T1542.001https://patchfirst.co/cve/CVE-2020-5326/CVE-2020-5326Fri, 21 Feb 2020 00:00:00 GMTDell · Dell Client Consumer and Commercial Platforms. Not in CISA KEV. EPSS 0.3% (higher than 28.6% of CVEs). CVSS 6.1 MEDIUM. ATT&CK: T1068 Exploitation for Privilege Escalation; T1542.001 System Firmware. Priority 10.0 of 100.T1068T1542.001