Threat landscape
Software flaws hackers are using right now
The US government’s list of security flaws that attackers are actively using, with how serious each one is and which products it affects. Everything on this list has been seen in a real attack. None of it is a prediction.
- 1710
- Flaws on the list
- 11
- Added in 7 days
- 6
- Fix deadline within 7 days
- 360
- Used by ransomware gangs
| CVE | Affected | CVSS | Exploit odds | Added | Due | |
|---|---|---|---|---|---|---|
| CVE-2026-69109 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2026-69104 | Not specified | 7.6high | under 1% · top 93% | — | — | |
| CVE-2026-68900 | Not specified | 7.6high | under 1% · top 76% | — | — | |
| CVE-2026-68898 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-68863 | Dell Powerprotect One | 7.5high | under 1% · top 80% | — | — | |
| CVE-2026-68784 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-68781 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-68780 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-68779 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-68778 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-68777 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-68776 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-68763 | Apache Tomcat | 7.5high | under 1% · top 44% | — | — | |
| CVE-2026-68757 | Jfrog Artifactory | 7.5high | under 1% · top 91% | — | — | |
| CVE-2026-68570 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-68005 | Not specified | 7.5high | under 1% · top 66% | — | — | |
| CVE-2026-67918 | Not specified | 7.5high | 1.0% · top 38% | — | — | |
| CVE-2026-67648 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-67645 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-67641 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-67633 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-67630 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-67629 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-67624 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-67581 | Zenhive Machine Payments Protocol | 7.5high | under 1% · top 66% | — | — |