CrowdStrike says 91% of exploited vulnerabilities with public POCs are weaponized within 48 hours
CRWD•CrowdStrike said attackers exploited 91% of observed vulnerabilities with public proof-of-concept exploits within 48 hours in the first half of 2026. The fastest observed exploitation came 35 minutes after publication.
1. Exploitation after disclosure
CrowdStrike's cybersecurity analysis found attackers exploited 91% of observed vulnerabilities with public proof-of-concept exploits within 48 hours in the first half of 2026. The fastest observed exploitation occurred 35 minutes after publication, the company said.
2. Prioritizing patches
CrowdStrike said patch prioritization should emphasize real-world exploitability, public exploit availability and adversary intent rather than rely solely on vulnerability severity scores. It also said AI-assisted research is accelerating vulnerability discovery and weaponization, expanding access to exploitation among attackers with varying skills and resources.
