Skip to content
CVE Count Triples in 2026, Over 37,000 Vulnerabilities Logged

CVE Count Triples in 2026, Over 37,000 Vulnerabilities Logged

First seen 12 Nov 2026, 15:50 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •November 12, 2026 at 15:51 UTC
  • •CVE count reached nearly 37,000 in Q3 2026, tripling from Q3 2025.
  • •AI advancements are significantly accelerating vulnerability discovery.
  • •Traditional patch cycles are no longer viable due to the overwhelming volume of new CVEs.

In Q3 2026, the CVE registry reported nearly 37,000 vulnerabilities, tripling from the same period in 2025. This surge is attributed to advancements in artificial intelligence, which accelerates vulnerability discovery faster than organizations can remediate. The total CVEs for the first nine months of 2026 reached 75,242, representing about 20% of all vulnerabilities since the CVE program's inception in 1999. The increased pace of vulnerability discovery has rendered traditional patch cycles obsolete, with many organizations unable to keep up with the volume of reported flaws. Major companies like Booking.com and Siemens are investing in AI-based defenses to combat this growing threat. The situation is exacerbated by the rise of bug bounty programs, which are inundated with reports. The overall operational landscape for cybersecurity teams is becoming increasingly strained as they face a deluge of machine-discovered vulnerabilities.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated 4h ago How this analysis works

Timeline

2026-10-21
PHP vulnerabilities disclosed
Two flaws in PHP were found using AI, prompting global site shutdowns for fixes.
Pasqualepillitteri.It
2026-11-05
CVE count reported by Reuters
Reuters reported nearly 37,000 vulnerabilities logged in Q3 2026, a significant increase from the previous year.
Pasqualepillitteri.It
2026-11-12
Vulnerability management practices discussed
The New Stack highlighted the death of the traditional two-week patch cycle due to overwhelming CVE volume.
Thenewstack

More articles in this cluster (3)

Following this threat?

Track Ahold Delhaize in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (23)

1 / 3

Common questions

What caused the increase in CVEs?
The increase is primarily due to advancements in AI, which accelerates the discovery of vulnerabilities.
How are organizations responding to this surge?
Many organizations are adopting AI-based monitoring and patching solutions to keep up with the increased volume of vulnerabilities.
What should security teams prioritize?
Security teams should focus on implementing automated solutions and enhancing their vulnerability management processes to cope with the rapid discovery of new CVEs.