VulnerabilitiesSep 25, 2026
Only 26% of Detected CISA Known Exploited Vulnerabilities Were Fully Remediated
Only 26% of CISA KEVs were fully remediated, making exploitation the top initial access vector.
Summary
A recent Verizon study revealed that exploiting known vulnerabilities has become the most common method for initial access in cyberattacks, accounting for 31% of incidents. Compounding this issue, a separate analysis found that a mere 26% of vulnerabilities listed on the CISA Known Exploited Vulnerabilities (KEV) catalog were fully remediated by organizations.