Report by VulnCheck
2026 VulnCheck Exploit Intelligence Report
4 FINDINGSPublished Feb 25, 2026
View Original Report →Key Findings
Roughly one-third of 2025 ransomware CVEs lack public or commercial exploits as of January 2026
Ransomware CVEsExploit Availability
56.4% of 2025 ransomware CVEs are first identified through active zero-day exploitation
Ransomware CVEsZero-Day Exploitation
New vulnerabilities linked to named state-sponsored groups decreased by 13%.
State-Sponsored ThreatsVulnerability Trends
Only 1% of vulnerabilities are confirmed to be exploited in the wild in 2025
Vulnerability ManagementExploit Activity