Surge in Exploitation of Vulnerabilities in 2026

• •32.1% of vulnerabilities were exploited before detection in the first half of 2025.
• •Microsoft and Cisco were among the top targeted vendors for vulnerabilities.
• •The rise in zero-day exploitation emphasizes the need for improved threat intelligence.

In 2026, threat actors increasingly exploit vulnerabilities, with a significant rise in exploitation. A report by VulnCheck indicates that 32.1% of vulnerabilities in the Known Exploited Vulnerabilities (KEV) catalog were weaponized before detection or within 24 hours of disclosure. This marks a 8.5% increase from the previous year. The first half of 2025 saw 432 new vulnerabilities added to the KEV list, already surpassing half of the total CVEs exploited in 2024. Major targets include Microsoft and Cisco, with a notable focus on content management systems and network edge devices. The trend highlights the growing urgency for organizations to enhance their threat intelligence capabilities and response strategies against fast-evolving threats.