NexaPulse
Subscribe

Threat landscape

Software flaws hackers are using right now

The US government’s list of security flaws that attackers are actively using, with how serious each one is and which products it affects. Everything on this list has been seen in a real attack. None of it is a prediction.

1710
Flaws on the list
7
Added in 7 days
5
Fix deadline within 7 days
360
Used by ransomware gangs
Any severityCriticalHighMediumLow
PriorityMost likelyRecently addedDue soonestCVSS
Exploited onlyUsed in ransomware
CVEAffectedCVSSExploit oddsAddedDue
CVE-2026-43677Apple Macos6.5mediumNot scored——
CVE-2026-42391Not specified7.5highunder 1% · top 69%——
CVE-2026-42013Not specified8.2highunder 1% · top 64%——
CVE-2026-41604Apache Thrift8.2highunder 1% · top 42%——
CVE-2026-41326Katacontainers Confidential Containers8.2highunder 1% · top 72%——
CVE-2026-41012Not specified7.7highunder 1% · top 99%——
CVE-2026-40998Broadcom Spring Web Services8.2highunder 1% · top 71%——
CVE-2026-40994Broadcom Spring Web Services8.2highunder 1% · top 86%——
CVE-2026-40463Not specified7.6highunder 1% · top 82%——
CVE-2026-38998Not specified6.5mediumNot scored——
CVE-2026-38822Not specified7.6highunder 1% · top 44%——
CVE-2026-38638Not specified7.5highunder 1% · top 62%——
CVE-2026-38636Not specified7.5highunder 1% · top 62%——
CVE-2026-38350Not specified7.5highunder 1% · top 75%——
CVE-2026-38349Not specified7.5highunder 1% · top 75%——
CVE-2026-38348Not specified7.5highunder 1% · top 75%——
CVE-2026-38347Not specified7.5highunder 1% · top 74%——
CVE-2026-38346Not specified7.5highunder 1% · top 75%——
CVE-2026-38344Not specified7.5highunder 1% · top 75%——
CVE-2026-37736Not specified7.5highunder 1% · top 72%——
CVE-2026-37237Not specified7.5highunder 1% · top 57%——
CVE-2026-37198Not specified7.5highunder 1% · top 62%——
CVE-2026-37012Not specified7.5highunder 1% · top 70%——
CVE-2026-36851Not specified7.5highunder 1% · top 64%——
CVE-2026-34982Vim Vim8.2highunder 1% · top 61%——
Page 339 of 769 · 19215 entriesPreviousNext