July 2026 CVE Landscape

Recorded Future’s Insikt Group identified 85 high-impact vulnerabilities actively exploited in July 2026 (36 rated Very Critical), spanning 61 vendors and numerous products; 57 of these enabled remote code execution. The report links multiple exploitation campaigns and malware families (for example Dysphoria, Cloud Atlas, Armored Likho, JADEPUFFER, Cl0p), highlights common weakness classes and PoC availability, and advises prioritizing remediation based on exploitation likelihood and attack surface visibility.