Threat landscape
Software flaws hackers are using right now
The US government’s list of security flaws that attackers are actively using, with how serious each one is and which products it affects. Everything on this list has been seen in a real attack. None of it is a prediction.
- 1710
- Flaws on the list
- 7
- Added in 7 days
- 5
- Fix deadline within 7 days
- 360
- Used by ransomware gangs
| CVE | Affected | CVSS | Exploit odds | Added | Due | |
|---|---|---|---|---|---|---|
| CVE-2026-62437 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-62388 | Nltk Nltk | 7.5high | under 1% · top 61% | — | — | |
| CVE-2026-62384 | Nltk Nltk | 7.5high | under 1% · top 55% | — | — | |
| CVE-2026-62380 | Netty Netty | 7.5high | under 1% · top 83% | — | — | |
| CVE-2026-62317 | Not specified | 7.5high | under 1% · top 52% | — | — | |
| CVE-2026-62243 | Not specified | 7.5high | under 1% · top 95% | — | — | |
| CVE-2026-62196 | Openclaw Openclaw | 8.3high | under 1% · top 67% | — | — | |
| CVE-2026-62138 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-62111 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-62110 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-61792 | Not specified | 7.7high | under 1% · top 76% | — | — | |
| CVE-2026-61704 | Not specified | 7.5high | under 1% · top 66% | — | — | |
| CVE-2026-61686 | Not specified | 7.5high | under 1% · top 65% | — | — | |
| CVE-2026-61617 | Not specified | 7.7high | under 1% · top 84% | — | — | |
| CVE-2026-61397 | Apache Cloudstack | 7.5high | under 1% · top 73% | — | — | |
| CVE-2026-61331 | Oracle E-Business Suite | 7.7high | under 1% · top 82% | — | — | |
| CVE-2026-61296 | Oracle Enterprise Asset Management | 7.6high | under 1% · top 90% | — | — | |
| CVE-2026-61227 | Oracle Webcenter Portal | 7.6high | under 1% · top 81% | — | — | |
| CVE-2026-61199 | Oracle Webcenter Portal | 7.7high | under 1% · top 82% | — | — | |
| CVE-2026-60983 | Oracle Webcenter Content | 7.7high | under 1% · top 73% | — | — | |
| CVE-2026-60956 | Oracle Jd Edwards Enterpriseone Us Payroll | 7.5high | under 1% · top 74% | — | — | |
| CVE-2026-60909 | Oracle Webcenter Content | 7.6high | under 1% · top 81% | — | — | |
| CVE-2026-60906 | Oracle Webcenter Content | 7.5high | under 1% · top 67% | — | — | |
| CVE-2026-60808 | Oracle Siebel Apps - Marketing | 7.5high | under 1% · top 98% | — | — | |
| CVE-2026-60769 | Oracle General Ledger | 7.5high | under 1% · top 76% | — | — |