Security1 hOctober 30, 2026, 16:54

Disclosed vulnerabilities doubled in 2026 as AI-credited finds jumped 22-fold

From January to 23 October 2026, 86,292 CVEs were published — 2.2 times the same window in 2025. AI-credited findings rose from 34 to 769, yet only about 0.23% of 2026 CVEs were observed exploited; the bigger shift is the shrinking time from disclosure to attack.

DEV Community

Open source

Disclosed vulnerabilities doubled in 2026 as AI-credited finds jumped 22-fold

86,292 CVEs in 2026 versus 38,569 in the same 2025 window
Critical CVEs reached 9,599, up from 3,348 a year earlier
AI credited in 769 CVEs: Anthropic/Claude 335, AISLE 296, OpenAI 112
Only 0.23% of 2026 CVEs were seen exploited in the wild

#Anthropic#OpenAI#PHP#CISA

Citrix discloses eight NetScaler vulnerabilities, two already exploited

Security

CISA confirms PHP2Shell vulnerabilities exploited in attacks

Security

Vendors and regulators respond to PHP2Shell vulnerabilities

Security

Disclosed vulnerabilities doubled in 2026 as AI-credited finds jumped 22-fold

Citrix discloses eight NetScaler vulnerabilities, two already exploited

CISA confirms PHP2Shell vulnerabilities exploited in attacks

Vendors and regulators respond to PHP2Shell vulnerabilities

Google: vulnerability disclosures doubled in eight months of 2026