Exploits and vulnerabilities in Q2 2026

Kaspersky's Q2 2026 report tallies vulnerability, exploit, and C2 framework statistics, adding first-ever data on open-source AI framework flaws.

Kaspersky Securelist released its quarterly report on vulnerabilities, exploits, and C2 frameworks for Q2 2026. The report aggregates statistics on vulnerability disclosures and exploit activity for the quarter. For the first time, it also aggregates data on vulnerabilities in open-source AI agents and AI frameworks, extending coverage into the AI software supply chain.

• Quarterly statistics on vulnerabilities, exploits, and C2 frameworks
• First-ever aggregation of vulnerabilities in open-source AI agents
• Covers AI frameworks as an emerging attack surface
• Provides Q2 2026 trend baselines for defenders