The Q3 Vulnerability Pulse: Discovery ≠ Exploitation
Talos says 2026 CVE volume passed 70,000 while KEV growth lagged, so discovery is not exploitation.
Cisco Talos’s Threat Source newsletter argues that record CVE volume is not a zero-day apocalypse. By late September 2026, published CVEs had passed 70,000 and were up 105% year over year, while CISA KEV grew 37%; CVEs from 2025 or earlier still made up 33% of KEV, and networking-gear CVEs rose to 27%. The same edition flags UAT-6275 espionage against CIS government and critical infrastructure using macro documents, GitHub scripts, and a WinRAR flaw, plus headlines on CVE-2026-104935 in Ivanti Connect Secure and an actively attacked maximum-severity SonicWall SMA SSRF.
58