Hackers Are Exploiting Nearly One in Four Vulnerabilities Before Defenders Get a CVE

Attackers are exploiting a significant portion of vulnerabilities even before defenders receive a published CVE (Common Vulnerabilities and Exposures). In the first half of 2026, 23.43% of known exploited vulnerabilities had evidence of active exploitation on or before the day their CVE was published. This figure is slightly lower than the 28.93% recorded in 2025, but overall, the pace of exploitation is increasing. The median time between CVE publication and a vulnerability being included in VulnCheck’s Known Exploited Vulnerabilities (KEV) database dropped from 120 days in 2025 to just 80 days in the first six months of 2026. During this period, VulnCheck identified 495 vulnerabilities that were confirmed to be exploited in...

Les hele artikkelen hos kilden.