Hackers Exploit Vulnerabilities Before CVE Publication in 2026

In the first half of 2026, 23.43% of known exploited vulnerabilities were actively exploited on or before the day their CVE was published. This is a decrease from 28.93% in 2025, indicating a persistent threat to cybersecurity. The data comes from VulnCheck's State of Exploitation report, which identified 495 Known Exploited Vulnerabilities (KEVs) during this period. The rapid exploitation of vulnerabilities poses significant risks to organizations, as attackers are leveraging flaws before defenders can respond. This trend highlights the need for improved vulnerability management and timely patching processes to protect systems from exploitation. The report emphasizes the urgency for organizations to prioritize their cybersecurity measures.

Key Points: • 23.43% of vulnerabilities were exploited before CVE publication in H1 2026. • VulnCheck identified 495 Known Exploited Vulnerabilities in the same period. • The percentage of pre-CVE exploitation decreased from 28.93% in 2025.