Threat landscape

Software flaws hackers are using right now

The US government’s list of security flaws that attackers are actively using, with how serious each one is and which products it affects. Everything on this list has been seen in a real attack. None of it is a prediction.

1710
Flaws on the list
7
Added in 7 days
5
Fix deadline within 7 days
360
Used by ransomware gangs
CVEAffectedCVSSExploit oddsAddedDue
CVE-2026-73497Not specified6.5mediumNot scored
CVE-2026-73408Not specified7.6highunder 1% · top 74%
CVE-2026-73337Joomla Joomla\!7.5highunder 1% · top 81%
CVE-2026-73326Not specified7.6highunder 1% · top 80%
CVE-2026-73321Xenforo Xenforo6.5mediumNot scored
CVE-2026-73303Not specified8.2highunder 1% · top 86%
CVE-2026-73292Not specified8.3highunder 1% · top 86%
CVE-2026-73267Not specified7.7highunder 1% · top 61%
CVE-2026-73198Redhat Enterprise Linux7.5highunder 1% · top 74%
CVE-2026-73197Redhat Enterprise Linux7.5highunder 1% · top 74%
CVE-2026-73137Not specified7.7highunder 1% · top 68%
CVE-2026-73136Zenhive Machine Payments Protocol7.5highunder 1% · top 65%
CVE-2026-73122Not specified7.7highunder 1% · top 80%
CVE-2026-73108Not specified7.5highunder 1% · top 57%
CVE-2026-73062Not specified7.5highunder 1% · top 80%
CVE-2026-73060Not specified7.5highunder 1% · top 69%
CVE-2026-73054Not specified7.5highunder 1% · top 76%
CVE-2026-73045Not specified7.5highunder 1% · top 77%
CVE-2026-72977Microsoft 365 Apps6.5mediumNot scored
CVE-2026-72975Microsoft 365 Apps6.5mediumNot scored
CVE-2026-72974Microsoft 365 Apps6.5mediumNot scored
CVE-2026-72956Microsoft 365 Apps6.5mediumNot scored
CVE-2026-72942Not specified6.5mediumNot scored
CVE-2026-72939Not specified6.5mediumNot scored
CVE-2026-72938Microsoft 365 Apps6.5mediumNot scored
Page 351 of 806 · 20130 entriesPreviousNext