The Q1 vulnerability pulse
Summary: Cisco Talos reports that Known Exploited Vulnerabilities in Q1 2026 stayed roughly in line with 2025 numbers, with networking gear accounting for 20% of KEV-related vulnerabilities and that share expected to climb. Overall CVE counts rose in Q1 with March showing the sharpest climb, roughly 25% of tracked CVEs date to 2024 or earlier, and 121 CVEs with AI relevance were identified in Q1, more than Q1 2025.
What you should know: A quarter of the CVEs Talos is tracking date to 2024 or earlier, with disclosure dates reaching back to 2009 - old vulnerabilities don't retire, they wait, and networking gear at 20% of KEVs is the exposure sitting in front of everything else.
Read the original at Cisco Talos ↗
- Topics
- Supply Chain & AppSec
- Related
- Kitesurf is now open source Cyber Risks · Nov 13, 2026Trained to betray: How post-training supply chain attacks hijack coding agents Cyber Risks · Nov 12, 2026ZDI-26-913: (0Day) Meta fairseq load_audio_path Code Injection Remote Code Execution Vulnerability Cyber Risks · Nov 11, 2026