Threat landscape
Software flaws hackers are using right now
The US government’s list of security flaws that attackers are actively using, with how serious each one is and which products it affects. Everything on this list has been seen in a real attack. None of it is a prediction.
- 1710
- Flaws on the list
- 7
- Added in 7 days
- 5
- Fix deadline within 7 days
- 360
- Used by ransomware gangs
| CVE | Affected | CVSS | Exploit odds | Added | Due | |
|---|---|---|---|---|---|---|
| CVE-2026-60765 | Oracle Siebel Apps - Marketing | 7.5high | under 1% · top 92% | — | — | |
| CVE-2026-60748 | Oracle General Ledger | 7.6high | under 1% · top 75% | — | — | |
| CVE-2026-60590 | Oracle Hospitality Simphony | 7.5high | under 1% · top 67% | — | — | |
| CVE-2026-60393 | Oracle Hyperion Infrastructure Technology | 7.5high | under 1% · top 65% | — | — | |
| CVE-2026-60391 | Oracle Hyperion Financial Management | 7.5high | under 1% · top 67% | — | — | |
| CVE-2026-59902 | Not specified | 7.5high | under 1% · top 69% | — | — | |
| CVE-2026-59780 | Apache Cloudstack | 7.5high | under 1% · top 73% | — | — | |
| CVE-2026-59765 | Not specified | 7.5high | under 1% · top 77% | — | — | |
| CVE-2026-59657 | Apache Cloudstack | 7.5high | under 1% · top 89% | — | — | |
| CVE-2026-59655 | Apache Cloudstack | 7.5high | under 1% · top 73% | — | — | |
| CVE-2026-59654 | Apache Cloudstack | 7.5high | under 1% · top 74% | — | — | |
| CVE-2026-59289 | Vmware Spring For Graphql | 7.5high | under 1% · top 72% | — | — | |
| CVE-2026-59284 | Broadcom Spring Cloud Commons | 7.6high | under 1% · top 74% | — | — | |
| CVE-2026-59282 | Vmware Spring Framework | 7.5high | under 1% · top 75% | — | — | |
| CVE-2026-59279 | Not specified | 7.5high | under 1% · top 68% | — | — | |
| CVE-2026-59256 | Not specified | 7.5high | under 1% · top 81% | — | — | |
| CVE-2026-58649 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-58592 | Not specified | 8.3high | under 1% · top 56% | — | — | |
| CVE-2026-58500 | Appium Appium-Mcp | 8.2high | under 1% · top 72% | — | — | |
| CVE-2026-58438 | Not specified | 7.5high | under 1% · top 81% | — | — | |
| CVE-2026-58436 | Not specified | 7.5high | under 1% · top 73% | — | — | |
| CVE-2026-58434 | Not specified | 7.5high | under 1% · top 79% | — | — | |
| CVE-2026-58417 | Not specified | 7.5high | under 1% · top 73% | — | — | |
| CVE-2026-58314 | Not specified | 7.7high | under 1% · top 78% | — | — | |
| CVE-2026-58085 | Freebsd Freebsd | 7.5high | under 1% · top 87% | — | — |