Vulnerabilities
AI-Generated Vulnerabilities Skew Toward Remote Code Execution, Google Report Finds
Google’s Threat Intelligence Group reports that vulnerabilities discovered with AI are increasingly capable of remote code execution. Monthly disclosures and high‑risk findings have both doubled in 2026, raising the urgency for rapid patching and enhanced monitoring.
What Happened
Google’s GTIG analysis of vulnerability disclosures from January 2025 to August 2026 shows a 100% increase in monthly CVE assignments, from 5,045 in January 2026 to 10,740 in August. AI‑assisted discovery now accounts for a growing share of these findings, with a marked shift toward remote code execution (RCE) capabilities.
Impact
High‑risk AI‑identified vulnerabilities rose 167%, from 131 in January to 350 in August. While open‑source CVE inflation can inflate raw counts, the trend indicates attackers are exploiting AI‑found flaws more aggressively, especially in enterprise software and kernel components.
What Defenders Should Do
1. Prioritize AI‑generated CVEs in your vulnerability management pipeline.
2. Verify whether a disclosed flaw enables RCE before patching.
3. Apply patches for high‑risk AI‑identified issues within 48 hours of release.
Mitigation Steps
- Enable automated CVE monitoring with AI‑discovery filters.
- Cross‑check CVE descriptions for RCE indicators (e.g., “remote code execution”, “buffer overflow”).
- Deploy runtime protection and network segmentation to contain potential exploitation.
- Maintain an up‑to‑date inventory of affected assets, especially Linux kernel and critical services.
Related vulnerabilities
Google Pauses OSS VRP Due to AI-Generated Submissions
Google has temporarily paused submissions to its Open Source Vulnerability Reward Program (OSS VRP) due to a surge in low-quality, largely AI-generated vulnerability reports. This follows similar actions by other projects like curl and Intel, highlighting a growing challenge in vulnerability disclosure programs. Defenders should anticipate similar disruptions and prepare for increased triage demands.
Read briefing
CERT-FR Issues Advisory for Multiple Vulnerabilities Across IBM Products
CERT-FR has released an advisory warning of multiple security flaws affecting various IBM software products. The vulnerabilities allow malicious actors to trigger remote code execution, privilege escalation, and remote denial of service conditions. System administrators managing IBM deployments should immediately review vendor security bulletins and apply necessary patches.
Read briefing
Ubuntu Kernel Vulnerabilities - Oct 2026
Multiple vulnerabilities have been disclosed affecting the Linux kernel in Ubuntu. These vulnerabilities allow for potential remote code execution, privilege escalation, and denial-of-service conditions. Defenders should prioritize patching systems according to the provided Ubuntu Security Notices.
Read briefing
Cisco Releases Patches for 35 Vulnerabilities, Including 12 Critical Bugs
Cisco issued updates for 35 security flaws across its product line, 12 of which are critical. The patches address memory corruption, authentication bypass, and DoS vulnerabilities that could allow unauthorized access, privilege escalation, and remote code execution. Defenders should update affected devices immediately and verify patch deployment.
Read briefing