Patchfirst: Arcserve vulnerabilitieshttps://patchfirst.co/vendor/arcserve/New and newly exploited Arcserve CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 05:11:25 GMTCVE-2024-0799: Authentication Bypass via wizardLogin in Arcserve Unified Data Protectionhttps://patchfirst.co/cve/CVE-2024-0799/CVE-2024-0799Wed, 13 Mar 2024 00:00:00 GMTArcserve · Unified Data Protection. Not in CISA KEV. EPSS 4.3% (higher than 91.2% of CVEs). CVSS 9.8 CRITICAL. Public exploit code exists. Priority 65.1 of 100.public-exploitCVE-2024-0801: Unauthenticated DoS in Arcserve Unified Data Protectionhttps://patchfirst.co/cve/CVE-2024-0801/CVE-2024-0801Wed, 13 Mar 2024 00:00:00 GMTArcserve · Unified Data Protection. Not in CISA KEV. EPSS 41.8% (higher than 98.7% of CVEs). CVSS 7.5 HIGH. Public exploit code exists. Priority 65.0 of 100.public-exploitCVE-2024-0800: Authentication Bypass via wizardLogin in Arcserve Unified Data Protectionhttps://patchfirst.co/cve/CVE-2024-0800/CVE-2024-0800Wed, 13 Mar 2024 00:00:00 GMTArcserve · Unified Data Protection. Not in CISA KEV. EPSS 1.0% (higher than 63.8% of CVEs). CVSS 8.8 HIGH. Priority 53.9 of 100.[KEV] CVE-2015-4068: Arcserve Unified Data Protection (UDP) Directory Traversal Vulnerabilityhttps://patchfirst.co/cve/CVE-2015-4068/CVE-2015-4068#kevFri, 25 Mar 2022 00:00:00 GMTArcserve · Unified Data Protection (UDP). In CISA KEV since 2022-03-25. ENISA EUVD lists it as exploited. EPSS 63.6% (higher than 99.22% of CVEs). CVSS 9.1 CRITICAL. ATT&CK: T1190 Exploit Public-Facing Application; T1005 Data from Local System; T1499.004 Application or System Exploitation. Priority 64.2 of 100.kevT1190T1005T1499.004CVE-2020-27858: This vulnerability allows remote attackers to disclose sensitive information on affected installations of CA Arcserve…https://patchfirst.co/cve/CVE-2020-27858/CVE-2020-27858Wed, 20 Jan 2021 00:00:00 GMTArcserve · D2D. Not in CISA KEV. EPSS 73.8% (higher than 99.48% of CVEs). CVSS 7.5 HIGH. Priority 25.1 of 100.