Rapid7 Report Details Rising Exploit Vulnerabilities
A new threat landscape report shows a significant increase in high-severity vulnerability exploitation for Q3 2026.
Updated on Oct. 22, 2026 in Cybersecurity
Live Poll
Do you trust your organization's current cybersecurity measures to defend against rapidly evolving digital threats?
Rapid7 released a report on October 22, 2026, detailing that attackers exploited 43 newly identified vulnerabilities during Q3 2026. This data reflects a 19% year-over-year increase in overall exploitation activity.
Why it matters
Attackers are increasingly prioritizing vulnerabilities that allow for remote, unauthenticated access without user interaction. This shift forces organizations to rapidly address newly disclosed security flaws to stay ahead of automated exploitation tactics.
High-severity CVEs rated 7 through 10 rose 133% year-over-year, while publicly available proof-of-concept code increased by 86%. Attackers now exploit these flaws within an average of three days, with 71% of activity occurring within one week of disclosure.
The players
Rapid7
A cybersecurity analytics and automation company that provides visibility and threat intelligence to security teams.
CISA
The Cybersecurity and Infrastructure Security Agency is the United States federal body responsible for protecting critical infrastructure.
The details
Nearly 80% of vulnerabilities exploited in Q3 required no authentication or user interaction to compromise systems. Attackers are effectively using vendor advisories and the CISA KEV catalog to quickly repackage and deploy exploits against targets.
Timeline
Q3 2026 marked the period during which 43 new vulnerabilities were exploited.
October 22, 2026, saw the publication of the quarterly threat landscape report.
The Tech Race
This activity follows a pattern set by the CISA KEV catalog, which has become a primary target for threat actors looking to weaponize disclosures. The speed at which attackers now move marks a departure from historical exploit windows, effectively turning vulnerability management into a high-stakes race against automated tools.
Security teams must adopt faster patching cycles to mitigate the risk of automated exploits that occur within three days of a disclosure. Businesses should also prioritize securing remote access points, as nearly 80% of current attacks target unauthenticated vulnerabilities.
The takeaway
Organizations should assume that any newly disclosed high-severity vulnerability will be targeted within a matter of days. Maintaining a robust and automated patch management process is now essential for defending against AI-enabled and rapid-exploit attack techniques.
Further reading
For more context on current threats, explore the Cybersecurity section.
Live Poll
Do you trust your organization's current cybersecurity measures to defend against rapidly evolving digital threats?
