The Top Four CVEs Attackers Exploit | Huntress

This article summarizes four widely exploited 2018–2020 vulnerabilities that impacted remote-work infrastructure — Citrix ADC RCE (CVE-2019-19781), Pulse Secure VPN arbitrary file read (CVE-2019-11510), Fortinet SSL VPN path traversal (CVE-2018-13379), and a Windows BITS privilege escalation (CVE-2020-0787) — describing their technical effects, real-world risks (credential theft, remote code execution, privilege escalation), and mitigation steps such as applying patches and rotating credentials.