FIRST Forecasts Record-Breaking 50,000+ CVEs in 2026

FIRST's 2026 Vulnerability Forecast projects a median of approximately 59,427 new CVEs in 2026 (90% confidence interval: 30,012–117,673), potentially making 2026 the first year to exceed 50,000 published CVEs; the report outlines its statistical methodology and past accuracy, projects further increases through 2028, and provides practical recommendations for organizations to assess capacity, prioritize vulnerabilities, and prepare contingency plans.