Threat landscape
Software flaws hackers are using right now
The US government’s list of security flaws that attackers are actively using, with how serious each one is and which products it affects. Everything on this list has been seen in a real attack. None of it is a prediction.
- 1710
- Flaws on the list
- 7
- Added in 7 days
- 5
- Fix deadline within 7 days
- 360
- Used by ransomware gangs
| CVE | Affected | CVSS | Exploit odds | Added | Due | |
|---|---|---|---|---|---|---|
| CVE-2026-73497 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-73408 | Not specified | 7.6high | under 1% · top 74% | — | — | |
| CVE-2026-73337 | Joomla Joomla\! | 7.5high | under 1% · top 81% | — | — | |
| CVE-2026-73326 | Not specified | 7.6high | under 1% · top 80% | — | — | |
| CVE-2026-73321 | Xenforo Xenforo | 6.5medium | Not scored | — | — | |
| CVE-2026-73303 | Not specified | 8.2high | under 1% · top 86% | — | — | |
| CVE-2026-73292 | Not specified | 8.3high | under 1% · top 86% | — | — | |
| CVE-2026-73267 | Not specified | 7.7high | under 1% · top 61% | — | — | |
| CVE-2026-73198 | Redhat Enterprise Linux | 7.5high | under 1% · top 74% | — | — | |
| CVE-2026-73197 | Redhat Enterprise Linux | 7.5high | under 1% · top 74% | — | — | |
| CVE-2026-73137 | Not specified | 7.7high | under 1% · top 68% | — | — | |
| CVE-2026-73136 | Zenhive Machine Payments Protocol | 7.5high | under 1% · top 65% | — | — | |
| CVE-2026-73122 | Not specified | 7.7high | under 1% · top 80% | — | — | |
| CVE-2026-73108 | Not specified | 7.5high | under 1% · top 57% | — | — | |
| CVE-2026-73062 | Not specified | 7.5high | under 1% · top 80% | — | — | |
| CVE-2026-73060 | Not specified | 7.5high | under 1% · top 69% | — | — | |
| CVE-2026-73054 | Not specified | 7.5high | under 1% · top 76% | — | — | |
| CVE-2026-73045 | Not specified | 7.5high | under 1% · top 77% | — | — | |
| CVE-2026-72977 | Microsoft 365 Apps | 6.5medium | Not scored | — | — | |
| CVE-2026-72975 | Microsoft 365 Apps | 6.5medium | Not scored | — | — | |
| CVE-2026-72974 | Microsoft 365 Apps | 6.5medium | Not scored | — | — | |
| CVE-2026-72956 | Microsoft 365 Apps | 6.5medium | Not scored | — | — | |
| CVE-2026-72942 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-72939 | Not specified | 6.5medium | Not scored | — | — | |
| CVE-2026-72938 | Microsoft 365 Apps | 6.5medium | Not scored | — | — |