--- title: Vulnerability Discovery and Exploitation Trends in the... description: Google Threat Intelligence Group's analysis of vulnerability disclosure and exploitation data from January 2025 through August 2026 finds AI measurably... canonical: https://daily.dev/posts/vulnerability-discovery-and-exploitation-trends-in-the-ai-era-myquob41c twitter:card: summary_large_image twitter:site: @dailydotdev og:type: website og:site_name: daily.dev og:title: Vulnerability Discovery and Exploitation Trends in the AI Era | daily.dev og:description: Google Threat Intelligence Group's analysis of vulnerability disclosure and exploitation data from January 2025 through August 2026 finds AI measurably... og:url: https://daily.dev/posts/vulnerability-discovery-and-exploitation-trends-in-the-ai-era-myquob41c og:image: https://api.daily.dev/og/posts/MyQUOB41c.png og:image:alt: Vulnerability Discovery and Exploitation Trends in the AI Era og:image:width: 1200 og:image:height: 630 og:locale: en --- > ## Documentation Index > Fetch the complete documentation index at: https://daily.dev/llms.txt > Use this file to discover all available pages before exploring further. # Vulnerability Discovery and Exploitation Trends in the AI Era **[Google Cloud](https://daily.dev/sources/gcp)** · 15 min read · 0 upvotes · 0 comments ## Summary Google Threat Intelligence Group's analysis of vulnerability disclosure and exploitation data from January 2025 through August 2026 finds AI measurably reshaping the vulnerability landscape. Monthly CVE disclosures doubled from 5,045 in January 2026 to over 10,700 by August 2026, while in-the-wild exploitation nearly doubled to an average of 18 per month. Zero-day exploitation rose more modestly, from 8 to 11 per month, suggesting attackers are increasingly weaponizing n-days rather than discovering new zero-days. AI-assisted vulnerability discovery skews toward more consequential findings: 50% of AI-discovered vulnerabilities lead to remote code execution versus 26% for the broader CVE ecosystem, and AI agents surface proportionally fewer low-risk bugs. A case study on CVE-2026-1731, an unauthenticated command injection flaw in BeyondTrust PRA discovered by an autonomous research agent, shows threat actors weaponizing it within days of disclosure. The AI/LLM operational stack itself is also emerging as an attack surface, with over 1,500 AI-related CVEs disclosed in 2026 alone, concentrated in agent orchestration frameworks like Flowise and Langflow, AI gateways, and inference servers such as vLLM and LiteLLM. The report recommends shifting from mass-patching to threat-intelligence-driven triage and proactive AI-assisted code review. ## Full article daily.dev links to this article rather than hosting it. Read it at the original source: ## Questions this post answers ### How much did vulnerability exploitation increase in 2026 compared to 2025? In-the-wild exploitation of disclosed vulnerabilities rose from an average of 10.5 per month in 2025 to 18 per month from January to August 2026, a nearly two-fold increase. By August 2026, 141 distinct vulnerabilities had already been exploited that year, surpassing the full-year 2025 total of 127. Zero-day exploitation grew more modestly, from 8 to 11 per month. _daily.dev surfaces threat intelligence like this for teams rethinking patch prioritization as exploitation accelerates._ ### What is CVE-2026-1731 and how was it discovered? CVE-2026-1731 is an unauthenticated OS command injection vulnerability in BeyondTrust Privileged Remote Access and Remote Support, discovered autonomously by the third-party research agent Hacktron AI. Within four days of public disclosure, one threat cluster began exploiting it, followed by five additional clusters within a week, using it for privilege escalation, data exfiltration, and dropping payloads like SNOWLIGHT, SPARKRAT, and cryptominers. _security teams tracking fast-moving n-day exploits like this rely on daily.dev to keep pace with disclosures._ ### Which AI infrastructure components have the most disclosed vulnerabilities? Agent orchestration middleware, such as Flowise and Langflow, accounts for 50% of all AI-related vulnerability disclosures and saw a 347% surge in 2026, largely due to dynamic code execution nodes exploitable via prompt injection. Backend serving infrastructure like vLLM, Triton, LiteLLM, and Ollama had 212 disclosed vulnerabilities, nearly a quarter stemming from unauthenticated API endpoints or SSRF flaws. _teams securing AI pipelines can follow daily.dev to stay ahead of emerging risks in orchestration and inference tooling._ ## Similar posts on daily.dev - [The Vulnerability Curve Bent With the AI Curve — ProjectDiscovery Blog](https://daily.dev/posts/the-vulnerability-curve-bent-with-the-ai-curve-projectdiscovery-blog-6crwmllob) · ProjectDiscovery Blog · 0 upvotes · 0 comments - [Analyzing the vulnerability landscape in Q2 2026](https://daily.dev/posts/analyzing-the-vulnerability-landscape-in-q2-2026-mknnem6b6) · Securelist · 0 upvotes · 0 comments - [Did AI Just Break Software Security For Ever?](https://daily.dev/posts/did-ai-just-break-software-security-for-ever--6pxwdikky) · Foojay.io · 0 upvotes · 0 comments - [Report: Approximately 59K Additional Vulnerabilities Will Be Discovered in 2026](https://daily.dev/posts/report-approximately-59k-additional-vulnerabilities-will-be-discovered-in-2026-ehu6tupug) · Security Boulevard · 1 upvotes · 0 comments --- Tags: [#security](https://daily.dev/tags/security), [#ai-security](https://daily.dev/tags/ai-security) [View this post on daily.dev](https://daily.dev/posts/vulnerability-discovery-and-exploitation-trends-in-the-ai-era-myquob41c) ```json {"@context":"https://schema.org","@graph":[{"@type":"Organization","@id":"https://daily.dev/#organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180},"sameAs":["https://twitter.com/dailydotdev","https://github.com/dailydotdev","https://www.linkedin.com/company/daily-dev-ltd"]},{"@type":"WebSite","@id":"https://daily.dev/#website","url":"https://daily.dev","name":"daily.dev","publisher":{"@id":"https://daily.dev/#organization"},"potentialAction":{"@type":"SearchAction","target":{"@type":"EntryPoint","urlTemplate":"https://daily.dev/search?q={search_term_string}"},"query-input":"required name=search_term_string"}}]} {"@context":"https://schema.org","@type":"TechArticle","headline":"Vulnerability Discovery and Exploitation Trends in the AI Era","url":"https://daily.dev/posts/vulnerability-discovery-and-exploitation-trends-in-the-ai-era-myquob41c","mainEntityOfPage":{"@type":"WebPage","@id":"https://daily.dev/posts/vulnerability-discovery-and-exploitation-trends-in-the-ai-era-myquob41c"},"datePublished":"2026-09-30T14:13:11.115Z","dateModified":"2026-10-11T12:38:41.900Z","description":"Google Threat Intelligence Group's analysis of vulnerability disclosure and exploitation data from January 2025 through August 2026 finds AI measurably...","image":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/efb6ebdd31507ed6cdc6e0fe53ac3537?_a=AQAEuop","thumbnailUrl":"https://media.daily.dev/image/upload/f_auto,q_auto/v1/posts/efb6ebdd31507ed6cdc6e0fe53ac3537?_a=AQAEuop","isAccessibleForFree":true,"articleSection":"Google Cloud","inLanguage":"en","publisher":{"@type":"Organization","name":"daily.dev","url":"https://daily.dev","logo":{"@type":"ImageObject","url":"https://daily.dev/apple-touch-icon.png","width":180,"height":180}},"author":{"@type":"Organization","name":"Google Cloud","logo":"https://media.daily.dev/image/upload/t_logo,f_auto/v1/logos/gcp","url":"https://daily.dev/sources/gcp"},"commentCount":0,"discussionUrl":"https://daily.dev/posts/vulnerability-discovery-and-exploitation-trends-in-the-ai-era-myquob41c","interactionStatistic":[{"@type":"InteractionCounter","interactionType":{"@type":"LikeAction"},"userInteractionCount":0},{"@type":"InteractionCounter","interactionType":{"@type":"CommentAction"},"userInteractionCount":0}],"keywords":"security,ai-security","timeRequired":"PT15M"} {"@context":"https://schema.org","@type":"BreadcrumbList","itemListElement":[{"@type":"ListItem","position":1,"name":"Home","item":"https://daily.dev"},{"@type":"ListItem","position":2,"name":"Google Cloud","item":"https://daily.dev/sources/gcp"},{"@type":"ListItem","position":3,"name":"Vulnerability Discovery and Exploitation Trends in the AI Era"}]} {"@context":"https://schema.org","@type":"FAQPage","@id":"https://daily.dev/posts/vulnerability-discovery-and-exploitation-trends-in-the-ai-era-myquob41c#faq","mainEntity":[{"@type":"Question","name":"How much did vulnerability exploitation increase in 2026 compared to 2025?","acceptedAnswer":{"@type":"Answer","text":"In-the-wild exploitation of disclosed vulnerabilities rose from an average of 10.5 per month in 2025 to 18 per month from January to August 2026, a nearly two-fold increase. By August 2026, 141 distinct vulnerabilities had already been exploited that year, surpassing the full-year 2025 total of 127. Zero-day exploitation grew more modestly, from 8 to 11 per month. daily.dev surfaces threat intelligence like this for teams rethinking patch prioritization as exploitation accelerates."}},{"@type":"Question","name":"What is CVE-2026-1731 and how was it discovered?","acceptedAnswer":{"@type":"Answer","text":"CVE-2026-1731 is an unauthenticated OS command injection vulnerability in BeyondTrust Privileged Remote Access and Remote Support, discovered autonomously by the third-party research agent Hacktron AI. Within four days of public disclosure, one threat cluster began exploiting it, followed by five additional clusters within a week, using it for privilege escalation, data exfiltration, and dropping payloads like SNOWLIGHT, SPARKRAT, and cryptominers. security teams tracking fast-moving n-day exploits like this rely on daily.dev to keep pace with disclosures."}},{"@type":"Question","name":"Which AI infrastructure components have the most disclosed vulnerabilities?","acceptedAnswer":{"@type":"Answer","text":"Agent orchestration middleware, such as Flowise and Langflow, accounts for 50% of all AI-related vulnerability disclosures and saw a 347% surge in 2026, largely due to dynamic code execution nodes exploitable via prompt injection. Backend serving infrastructure like vLLM, Triton, LiteLLM, and Ollama had 212 disclosed vulnerabilities, nearly a quarter stemming from unauthenticated API endpoints or SSRF flaws. teams securing AI pipelines can follow daily.dev to stay ahead of emerging risks in orchestration and inference tooling."}}]} ```