FIRST Inc. projects approximately 59,000 new vulnerabilities will be discovered in 2026, with worst-case scenarios reaching 117,673. The statistical model also forecasts upper bounds of 138,703 in 2027 and 192,993 in 2028, driven partly by wider AI adoption in vulnerability discovery. AI coding tools are already increasing the number of vulnerabilities introduced into code, while adversaries are using AI to accelerate exploit creation, narrowing the window between disclosure and exploitation. Cybersecurity teams are advised to revisit remediation workflows and consider auto-remediation for lower-risk vulnerabilities.
Sort: