Rapid7 Reports Surge in Vulnerabilities and Exploitation Tactics in Q2 2026

Rapid7's Q2 2026 Threat Landscape Report reveals a significant increase in vulnerability disclosures, with 8,539 high- and critical-severity CVEs reported, doubling from the previous year. Nearly two-thirds of exploited vulnerabilities required no user interaction, highlighting a shift in attack methods. The report indicates that attackers are increasingly automating their exploitation processes, compressing the time between vulnerability disclosure and exploitation. State-aligned threat actors from Iran, North Korea, and Russia are actively targeting critical infrastructure sectors, including healthcare and finance. The report emphasizes the need for security teams to prioritize exposures that can be realistically exploited rather than relying on traditional patch cycles. The findings suggest a critical need for a preemptive security approach to manage risks effectively.

Key Points: • 8,539 new high- and critical-severity CVEs reported in Q2 2026, doubling year-over-year. • 62% of exploited vulnerabilities required no user interaction, indicating a shift in attack methods. • State-aligned actors from Iran, North Korea, and Russia are targeting critical infrastructure sectors.