https://patchfirst.co/vendor/xstream/New and newly exploited XStream CVEs, with CISA KEV, EPSS and ATT&CK context. Newest 50 by publication or KEV listing.en-gb360Sat, 31 Oct 2026 13:00:36 GMThttps://patchfirst.co/cve/CVE-2021-39144/CVE-2021-39144#kevFri, 10 Mar 2023 00:00:00 GMTXStream · XStream. In CISA KEV since 2023-03-10. ENISA EUVD lists it as exploited. EPSS 98.1% (higher than 99.91% of CVEs). CVSS 8.5 HIGH. Public exploit code exists. ATT&CK: T1190 Exploit Public-Facing Application. Priority 68.9 of 100.kevpublic-exploitT1190https://patchfirst.co/cve/CVE-2019-10173/CVE-2019-10173Tue, 23 Jul 2019 00:00:00 GMTxstream · xstream. Not in CISA KEV. EPSS 95.0% (higher than 99.86% of CVEs). CVSS 7.3 HIGH. Priority 25.1 of 100.