NexaPulse
Subscribe

Threat landscape

Software flaws hackers are using right now

The US government’s list of security flaws that attackers are actively using, with how serious each one is and which products it affects. Everything on this list has been seen in a real attack. None of it is a prediction.

1710
Flaws on the list
11
Added in 7 days
6
Fix deadline within 7 days
360
Used by ransomware gangs
Any severityCriticalHighMediumLow
PriorityMost likelyRecently addedDue soonestCVSS
Exploited onlyUsed in ransomware
CVEAffectedCVSSExploit oddsAddedDue
CVE-2026-46303Linux Linux Kernel8.2highunder 1% · top 76%——
CVE-2026-46037Linux Linux Kernel8.2highunder 1% · top 63%——
CVE-2026-45798Wazuh Wazuh7.5highunder 1% · top 59%——
CVE-2026-45742Not specified7.5highunder 1% · top 53%——
CVE-2026-45741Not specified7.5highunder 1% · top 47%——
CVE-2026-45698Not specified7.5highunder 1% · top 81%——
CVE-2026-45137Anchor-Lang Anchor8.2highunder 1% · top 80%——
CVE-2026-44766Not specified6.5mediumNot scored——
CVE-2026-44763Not specified7.6highunder 1% · top 79%——
CVE-2026-42391Not specified7.5highunder 1% · top 69%——
CVE-2026-42013Not specified8.2highunder 1% · top 64%——
CVE-2026-41604Apache Thrift8.2highunder 1% · top 42%——
CVE-2026-41326Katacontainers Confidential Containers8.2highunder 1% · top 72%——
CVE-2026-41012Not specified7.7highunder 1% · top 99%——
CVE-2026-40998Broadcom Spring Web Services8.2highunder 1% · top 71%——
CVE-2026-40994Broadcom Spring Web Services8.2highunder 1% · top 86%——
CVE-2026-40463Not specified7.6highunder 1% · top 82%——
CVE-2026-38998Not specified6.5mediumNot scored——
CVE-2026-38822Not specified7.6highunder 1% · top 44%——
CVE-2026-38638Not specified7.5highunder 1% · top 62%——
CVE-2026-38636Not specified7.5highunder 1% · top 62%——
CVE-2026-38350Not specified7.5highunder 1% · top 75%——
CVE-2026-38349Not specified7.5highunder 1% · top 75%——
CVE-2026-38348Not specified7.5highunder 1% · top 75%——
CVE-2026-38347Not specified7.5highunder 1% · top 74%——
Page 332 of 750 · 18726 entriesPreviousNext