Google Threat Intelligence Group analyzed vulnerability disclosures from January 2025 through August 2026 and found that AI is changing both the pace and profile of vulnerability discovery. Monthly vulnerability disclosures doubled in 2026, with high-risk disclosures increasing by 167%. AI-discovered vulnerabilities show a different risk profile, with a higher proportion rated medium risk and a greater likelihood of enabling remote code execution (50% vs. 26%). Exploitation of vulnerabilities increased, particularly for n-days, likely due to AI tools automating analysis and weaponization. GTIG confirmed in-the-wild exploitation of AI-discovered vulnerabilities, including CVE-2026-1731. AI-related CVEs are rising, especially in AI orchestration frameworks, but zero-day exploitation of AI infrastructure remains unobserved. GTIG expects these trends to continue in the short to medium term.

The impact includes a faster rate of vulnerability discovery and exploitation, with AI-discovered vulnerabilities more likely to enable remote code execution, increasing the risk of severe attacks. The number of exploited vulnerabilities nearly doubled in 2026 compared to 2025, with a significant rise in exploitation of high-risk and n-day vulnerabilities. AI is enabling threat actors to more efficiently analyze and weaponize vulnerabilities, potentially increasing the frequency and severity of attacks. AI-related vulnerabilities in AI systems are also increasing, posing emerging risks to AI infrastructure.

No specific patch or remediation is provided as this is an observational report on trends rather than a single vulnerability. Organizations should monitor vendor advisories for patches on specific vulnerabilities, especially those discovered or weaponized using AI. Awareness of the changing threat landscape is critical, but no direct mitigation steps contradicting vendor guidance are indicated. Patch status is not applicable here; check vendor advisories for individual vulnerabilities mentioned.