Google Reports AI Identifying Medium-Risk Vulnerabilities

• •AI tools are finding primarily medium-risk vulnerabilities, with 58% classified as such.
• •The total number of known vulnerabilities has doubled over the past 18 months, exceeding 10,000.
• •Organizations must modernize their defense strategies to address the increasing number of CVEs.

Google's analysis reveals that artificial intelligence tools are primarily discovering medium-risk vulnerabilities, with 58% of AI-identified flaws classified as medium risk and only 4% as high risk. Over the past 18 months, the number of known vulnerabilities has doubled, surpassing 10,000 in July 2026. Despite concerns of a 'vulnpocalypse,' the increase in AI-discovered vulnerabilities has not led to a significant rise in hacking incidents. Google emphasizes that organizations need to adapt their defense strategies to manage the growing number of Common Vulnerabilities and Exposures (CVEs). The research also identified 782 vulnerabilities in AI orchestration and agent frameworks, which are particularly susceptible to exploitation through prompt injection attacks. Threat actors are likely using AI to enhance their capabilities in analyzing vulnerabilities and exploiting flaws. Organizations are advised to implement efficient patch management plans and maintain a clear understanding of their assets' internet accessibility.