IBM analysis finds 55.2% of AI-discovered vulnerabilities rated high or critical
IBM•IBM’s Q3 2026 Open Source Security Signals report found that 55.2% of 223 vulnerabilities discovered using frontier AI models were rated high or critical. It modeled reusable fixes reducing remediation time to 10 days, compared with an industry average of 54.81 days.
1. AI vulnerability findings
IBM’s Q3 2026 Open Source Security Signals report, published October 15, found that 55.2% of 223 vulnerabilities discovered using frontier AI models were rated high or critical. The report said reusable fixes could accelerate remediation to a modeled 10 days, compared with a 54.81-day industry average for high- and critical-severity vulnerabilities.
2. Open-source remediation
Separate research found that third-party software flaws had a remediation half-life of 358 days.
