Vulnerabilities Exploited Instantly as Remediation Efforts Lag

• •Only 26% of detected vulnerabilities were fully remediated, with a median resolution time of 43 days.
• •Attackers now exploit vulnerabilities immediately upon public disclosure, with a median time of zero days.
• •Over 270,000 systems remain exposed to CVE-2020-0796, highlighting ongoing remediation challenges.

A recent analysis revealed that only 26% of detected vulnerabilities in CISA's Known Exploited Vulnerabilities catalogue were fully remediated, with the median time to resolution increasing from 32 to 43 days. Attackers are now exploiting vulnerabilities immediately upon public disclosure, with the median time between disclosure and exploitation dropping to zero days in 2026. The Verizon study highlighted that vulnerability exploitation was the most common initial access vector in breaches, accounting for 31% of incidents. Additionally, over 270,000 systems remained exposed to CVE-2020-0796, which was disclosed in March 2020. The rise of AI tools is accelerating the exploitation of these vulnerabilities, allowing attackers to create working exploits in under an hour. This situation poses significant challenges for organizations, as they struggle to keep up with the increasing volume of vulnerabilities and the speed at which they are exploited.