We're releasing our 2026 Vulnerability Forecast today.

[firstdotorg@infosec.exchange]

We're releasing our 2026 Vulnerability Forecast today.

Key Projections:
Median forecast: ~59,427 CVEs in 2026
90% confidence interval: 30,012 to 117,673
Realistic scenarios suggest 70,000-100,000 vulnerabilities are possible

What Organizations Should Do:
Assess capacity to handle 50,000+ CVEs
Prioritize based on environmental risk, not just CVSS scores
Build contingency plans for higher-volume scenarios

Throughout 2026, we'll publish quarterly updates with refined predictions to help the community stay ahead. Special thanks to Éireann Leverett, FIRST Liaison and Lead Member of FIRST's Vulnerability Forecasting Team, as well as, Founder and CTO of Concinnity Risks, and the vulnerability forecasting team.

Read more: https://go.first.org/NvZWb

#cybersecurity #infosec
#ThreatIntelligence #VulnerabilityManagement