Agent Vulnerability Disclosures Doubled in 2026. The Auth Stack Wasn’t Built for This.
Photo: Pixabay (illustration)
Monthly CVE disclosures doubled in 2026, reaching 10,740 by August, according to the Google Threat Intelligence Group . High-risk vulnerabilities surged 241% in the same window. The most significant structural shift is in the attack surface: agent orchestration middleware now accounts for 50% of all AI-related flaws, representing a 347% increase in disclosures this year. Over 2,000 cumulative AI-related CVEs have been tracked from January 2025 through August 2026, with more than 1,500 appearing in 2026 alone. Microsoft’s Digital Defense Report 2026 projects approximately 72,000 CVEs for the full year, a record roughly double the prior year.
Source: Forkast
