VulnCheck-State-of-Exploitation-2026.md

VulnCheck's 2026 'State of Exploitation' report documents that 884 KEVs were first observed exploited in 2025, with 28.96% exploited on or before CVE publication; the report details exploitation timelines, first reporters (118 unique sources), top targeted technologies (notably network edge devices, CMS, and open source software), comparisons showing VulnCheck often predates CISA, and notes real-host exploitation indicators and evolving ransomware attribution.