Google traces most of 2026's exploitation growth to fast n-day weaponization
Google's threat intelligence group counts 18 exploited flaws a month in 2026, up from 10.5 in 2025, while zero-days rose only from eight to 11. GTIG attributes most of the added attacks to fast weaponization of disclosed n-days, so the exposure sits in the days after a patch ships.
The Watch · Security desk
What happened
- Half of the vulnerabilities GTIG judged likely AI-discovered led to remote code execution, against 26% of other CVEs.
- Total vulnerability disclosures doubled from 5,045 in January 2026 to 10,477 in July, then reached 10,740 in August.
- Zero-day exploitation spiked to 22 in August alone.
- Edge and security appliances made up 14% of exploited vulnerabilities in 2026, and over 65% of those flaws were rated high or critical.
Why it matters
- Who has to decide decision Patch targets set by zero-day volume track the slower-growing category; n-day weaponization, which supplied most of the increase, now sets the deadline.
- What doesn't add up contradiction August's 22 zero-days, double the 2026 monthly average, cut against a purely n-day explanation, and one month cannot show whether the spike holds.
- What it limits constraint Google ties the RCE skew partly to where researchers aim their agents, so the 50% rate cannot be read as a forecast for AI-found bugs at large.
- What it costs cost NetScaler owners pay for a compromise hunt before the upgrade, because Mandiant says patching alone may not remove an intruder already inside.
Taking zero-days out of GTIG's monthly averages leaves 2.5 exploited flaws a month in 2025 and 7 in 2026 [22]. Those non-zero-days supplied 4.5 of the 7.5 extra flaws exploited each month, or 60% of the rise [23]. Zero-days are still the larger group, 11 of the 18 a month, about 61% [21]. GTIG suggested the growth came mostly from rapid weaponization of n-days, possibly aided by AI tools that analyze patches and proof-of-concept code [3].
CVE-2026-1731 is an unauthenticated command injection flaw in BeyondTrust Privileged Remote Access and Remote Support, found autonomously by Hacktron AI [5]. Six threat clusters were exploiting it within seven days of disclosure [15]. A deployment still unpatched on day five was already inside the first cluster's window [16]. Google called confirmed exploitation of AI-discovered flaws an early indicator, not yet an established trend [13].
On GTIG's own risk ratings, which are not CVSS scores, medium-risk flaws were 58% of likely AI-discovered vulnerabilities from January to August, against 28% of the rest [8]. Low-risk flaws were 39% and 69% [8]. That leaves the same 3% of each group outside those two tiers, so the shift in the AI-found set is from low to medium [18]. Google said the distribution likely reflects, in large part, how researchers deploy autonomous agents, aiming them at critical infrastructure instead of running broad scans [9]. It also said public data undercounts AI-discovered vulnerabilities [12]. The published figures do not say how much of the doubling in total disclosures came from AI-assisted discovery [1].
Bugs in AI software itself are a small part of the exploitation count so far. GTIG tracked more than 1,500 AI-related vulnerabilities disclosed in 2026 [10]. Agent orchestration frameworks accounted for 782 and inference and serving infrastructure for 212, nearly a quarter of those involving unauthenticated APIs or server-side request forgery [10]. Only a handful have been confirmed exploited, and GTIG has yet to see zero-day exploitation of AI infrastructure [11].
The research followed Citrix's fixes for two exploited NetScaler zero-days. GTIG and Mandiant have tracked one of them in active attacks [19]. "Given the active exploitation, NetScaler customers should prioritize examining their systems for compromise before upgrading/patching," Charles Carmakal, CTO at Mandiant, wrote on LinkedIn on September 27 [20]. "Patching alone may not eradicate the threat actor from your environment," he wrote [20].
What to watch
- Whether GTIG's September zero-day count stays near August's 22 or falls back toward the 11-a-month average.
- First confirmed zero-day exploitation of AI orchestration or inference infrastructure, where GTIG has so far seen only a handful of exploited flaws.
- Direct evidence that attackers use AI patch-analysis tools to shorten n-day timelines, a link GTIG has so far only suggested.
Clarity's read
What the record supports and how the coverage leans. The claims behind it follow.
Reality
- Evidence72
- Adoption
- Not scored
- Hype gap+30
- Incentives35
- Confidence65
Perspective Coverage
4 publishers- Builder
- Builder 33%
- Operator
- Operator 61%
- Investor
- Investor 6%
Claim ledger
Ranked by verification strength, evidence, and original report placement.
- [1]
Vulnerability disclosures doubled from 5,045 in January 2026 to 10,477 in July, reaching 10,740 in August.
- [2]
Exploited vulnerabilities rose from an average of 10.5 a month in 2025 to 18 a month so far in 2026.
- [3]
GTIG suggested most of the growth in exploitation came from the rapid weaponization of n-days, possibly aided by AI tools that analyze patches and proof-of-concept code.
- [4]
In research published September 30, Google Threat Intelligence Group (GTIG) found that 50% of vulnerabilities it identified as likely AI-discovered resulted in remote code execution, against 26% of other CVEs.
- [5]
CVE-2026-1731 is an unauthenticated command injection flaw in BeyondTrust Privileged Remote Access and Remote Support that Hacktron AI discovered autonomously.
- [6]
One threat cluster exploited CVE-2026-1731 within four days of disclosure, and five more followed within seven days.
- [7]
Zero-day exploitation rose only marginally, from eight to 11 a month, although it jumped to 22 in August.
- [8]
Medium-risk flaws accounted for 58% of likely AI-discovered vulnerabilities between January and August 2026, compared with 28% of those not attributed to AI, while low-risk flaws made up 39% and 69%, respectively. The ratings are GTIG's, not CVSS scores.
- [9]
Google said the distribution likely reflects, in large part, how researchers deploy autonomous agents, pointing them at critical infrastructure rather than running broad scans.
- [10]
GTIG tracked more than 1,500 AI-related vulnerabilities disclosed in 2026. Agent orchestration frameworks accounted for 782, while inference and serving infrastructure accounted for 212, nearly a quarter of which involved unauthenticated APIs or server-side request forgery.
- [11]
Only a handful of AI-related vulnerabilities have been confirmed as exploited, and GTIG has yet to see zero-day exploitation of AI infrastructure.
- [12]
Google said public data undercounts AI-discovered vulnerabilities.
- [13]
Google described confirmed exploitation of AI-discovered flaws as an early indicator rather than an established trend.
- [14]
Edge and security appliances made up 14% of exploited vulnerabilities in 2026, and over 65% of those edge flaws were rated high or critical risk.
- [15]
Six threat clusters exploited CVE-2026-1731 within seven days of disclosure.
- [16]
A CVE-2026-1731 deployment still unpatched on day five after disclosure was inside the window in which the first cluster was already exploiting the flaw.
- [17]
August's 22 zero-days were double the 2026 monthly average of 11.
- [18]
Medium and low ratings together cover 97% of both the likely AI-discovered set and the rest, leaving 3% of each outside those tiers; the AI-found set's shift is from low to medium.
- [19]
The research follows Citrix's fixes for two exploited NetScaler zero-days, one of which GTIG and Mandiant have tracked in active attacks.
- [20]
"Given the active exploitation, NetScaler customers should prioritize examining their systems for compromise before upgrading/patching," Charles Carmakal, CTO at Mandiant, wrote on LinkedIn on September 27. "Patching alone may not eradicate the threat actor from your environment."
- [21]
Zero-days are 11 of the 18 exploited vulnerabilities a month in 2026, about 61%.
- [22]
Exploited vulnerabilities other than zero-days averaged 2.5 a month in 2025 and 7 a month in 2026.
- [23]
Non-zero-day flaws account for 4.5 of the 7.5 additional exploited vulnerabilities per month, or 60% of the increase.
Get this ledger inside ChatGPT. Ask about any of our stories and the answer brings its figure, each claim’s verdict and the sources. Free, no account.
Sources
4 independent publishers whose own reporting we read for this story.
- helpnetsecurity.comThe vulnerabilities AI finds are the ones attackers want
1 article · September 30, 2026
- infosecurity-magazine.comAI-Found Vulnerabilities More Likely to Enable RCE, Google Says
1 article · September 30, 2026
- securityweek.comGoogle: AI Is Changing the Pace and Profile of Vulnerability Discovery
1 article · September 30, 2026
- therecord.mediaGoogle: Vulnerability disclosures double to 10,000 per month as AI fuels exploitation
1 article · September 30, 2026
Topics and entities
Follow any of these and your For You feed starts watching them — no settings page required.
Topics
- Edge and IoT Device SecurityFollow
- AI-Assisted Vulnerability DiscoveryFollow
- AI Infrastructure SecurityFollow
- Vulnerability Exploitation TrendsFollow