Google: AI-Found Vulnerabilities Twice as Likely to Enable RCE

Google Threat Intelligence Group found that 50% of likely AI-discovered vulnerabilities enable remote code execution, versus 26% of other CVEs. Disclosures doubled from 5,045 in January 2026 to 10,740 in August, while exploited vulnerabilities rose from 10.5 to 18 per month.

• 50% of likely AI-found flaws enable RCE, versus 26% of other CVEs
• Disclosures rose from 5,045 in January 2026 to 10,740 in August
• Exploited vulnerabilities grew from 10.5 to 18 per month in 2026
• 782 of 1,500+ AI-related flaws hit agent orchestration frameworks