Wire · opportunities
Root Evidence Finds the “Vulnpocalypse” Isn't Showing Up in the Data
◆ Sectors
◆ Geography
◆ Source
◆ Verified
Fusion42 · 4 September 2026 · Fusion42 review
New research from Root Evidence analyzing over 250,000 CVEs from 2018 to 2026 reveals that less than 2% of vulnerabilities are exploited, with most exploited flaws having patches available well before attacks. The study finds no evidence that AI advances have accelerated exploitation rates and highlights that adversaries repeatedly target a small set of vendors and specific vulnerability classes.
This Wire brief sits within Fusion42's coverage of Cybersecurity.
◆ ◆ The Wire takeaway
You can focus on a narrow set of vulnerabilities that attackers actually exploit instead of chasing every CVE. Your security team can reprioritise patching efforts to reduce risk without being overwhelmed by volume.
◆ Coverage
1 source · 3 Sep 2026
◆ Related on Wire
◆ Topics