Threat landscape
Software flaws hackers are using right now
The US government’s list of security flaws that attackers are actively using, with how serious each one is and which products it affects. Everything on this list has been seen in a real attack. None of it is a prediction.
- 1710
- Flaws on the list
- 11
- Added in 7 days
- 6
- Fix deadline within 7 days
- 360
- Used by ransomware gangs
| CVE | Affected | CVSS | Exploit odds | Added | Due | |
|---|---|---|---|---|---|---|
| CVE-2026-51616 | Not specified | 7.5high | under 1% · top 70% | — | — | |
| CVE-2026-51615 | Not specified | 7.5high | under 1% · top 70% | — | — | |
| CVE-2026-51367 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2026-5132 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-5097 | Not specified | 7.5high | under 1% · top 65% | — | — | |
| CVE-2026-50776 | Not specified | 7.5high | 1.6% · top 25% | — | — | |
| CVE-2026-50578 | Not specified | 7.5high | under 1% · top 92% | — | — | |
| CVE-2026-50222 | Apache Cloudstack | 7.5high | under 1% · top 76% | — | — | |
| CVE-2026-50142 | Not specified | 7.5high | under 1% · top 55% | — | — | |
| CVE-2026-50018 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-49463 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-49329 | Not specified | 7.5high | under 1% · top 64% | — | — | |
| CVE-2026-49227 | Not specified | 7.6high | under 1% · top 78% | — | — | |
| CVE-2026-49223 | Not specified | 7.6high | under 1% · top 69% | — | — | |
| CVE-2026-49222 | Not specified | 7.6high | under 1% · top 69% | — | — | |
| CVE-2026-49217 | Not specified | 7.5high | under 1% · top 83% | — | — | |
| CVE-2026-48771 | Not specified | 8.2high | under 1% · top 89% | — | — | |
| CVE-2026-48763 | Not specified | 8.2high | under 1% · top 68% | — | — | |
| CVE-2026-48486 | Not specified | 7.5high | under 1% · top 90% | — | — | |
| CVE-2026-48447 | Adobe Lightroom | 7.7high | under 1% · top 96% | — | — | |
| CVE-2026-48439 | Adobe C2pa | 7.5high | Not scored | — | — | |
| CVE-2026-48438 | Adobe C2pa | 7.5high | Not scored | — | — | |
| CVE-2026-48416 | Not specified | 7.5high | Not scored | — | — | |
| CVE-2026-48415 | Not specified | 7.6high | under 1% · top 72% | — | — | |
| CVE-2026-48414 | Not specified | 7.7high | under 1% · top 57% | — | — |