Threat landscape
Software flaws hackers are using right now
The US government’s list of security flaws that attackers are actively using, with how serious each one is and which products it affects. Everything on this list has been seen in a real attack. None of it is a prediction.
- 1710
- Flaws on the list
- 11
- Added in 7 days
- 6
- Fix deadline within 7 days
- 360
- Used by ransomware gangs
| CVE | Affected | CVSS | Exploit odds | Added | Due | |
|---|---|---|---|---|---|---|
| CVE-2026-61199 | Oracle Webcenter Portal | 7.7high | under 1% · top 82% | — | — | |
| CVE-2026-60983 | Oracle Webcenter Content | 7.7high | under 1% · top 73% | — | — | |
| CVE-2026-60956 | Oracle Jd Edwards Enterpriseone Us Payroll | 7.5high | under 1% · top 74% | — | — | |
| CVE-2026-60909 | Oracle Webcenter Content | 7.6high | under 1% · top 81% | — | — | |
| CVE-2026-60906 | Oracle Webcenter Content | 7.5high | Not scored | — | — | |
| CVE-2026-60808 | Oracle Siebel Apps - Marketing | 7.5high | Not scored | — | — | |
| CVE-2026-60769 | Oracle General Ledger | 7.5high | Not scored | — | — | |
| CVE-2026-60765 | Oracle Siebel Apps - Marketing | 7.5high | Not scored | — | — | |
| CVE-2026-60748 | Oracle General Ledger | 7.6high | under 1% · top 75% | — | — | |
| CVE-2026-60590 | Oracle Hospitality Simphony | 7.5high | under 1% · top 67% | — | — | |
| CVE-2026-60393 | Oracle Hyperion Infrastructure Technology | 7.5high | Not scored | — | — | |
| CVE-2026-60391 | Oracle Hyperion Financial Management | 7.5high | Not scored | — | — | |
| CVE-2026-59902 | Not specified | 7.5high | under 1% · top 69% | — | — | |
| CVE-2026-59780 | Apache Cloudstack | 7.5high | under 1% · top 73% | — | — | |
| CVE-2026-59765 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2026-59657 | Apache Cloudstack | 7.5high | under 1% · top 89% | — | — | |
| CVE-2026-59655 | Apache Cloudstack | 7.5high | under 1% · top 73% | — | — | |
| CVE-2026-59654 | Apache Cloudstack | 7.5high | under 1% · top 74% | — | — | |
| CVE-2026-59289 | Vmware Spring For Graphql | 7.5high | under 1% · top 72% | — | — | |
| CVE-2026-59284 | Broadcom Spring Cloud Commons | 7.6high | under 1% · top 74% | — | — | |
| CVE-2026-59282 | Vmware Spring Framework | 7.5high | under 1% · top 75% | — | — | |
| CVE-2026-59279 | Not specified | 7.5high | under 1% · top 68% | — | — | |
| CVE-2026-59256 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2026-58649 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-58592 | Not specified | 8.3high | under 1% · top 56% | — | — |