71% of vulnerability exploitation starts within a week of disclosure

As cited

Copy frozen at 2026-10-27 08:34 UTC (site build).

vulnerabilities

71% of vulnerability exploitation starts within a week of disclosure

Rapid7's Q3 2026 Quarterly Threat Landscape Report found that 71% of high- and critical-severity vulnerability exploitation occurs within the first week of public disclosure, with an average of three days between disclosure and active exploitation of 43 tracked vulnerabilities. The rapid attack timeline compresses the window for organizations to develop, test, and deploy patches before threat actors strike.

Why it matters: Security teams managing patch cycles need to prioritize high- and critical-severity vulnerabilities for immediate assessment and deployment, as the three-day average to exploitation leaves minimal time for standard change management windows.

Source published

2026-10-27 05:30 UTC

First seen by Cybersecurity Tracker

2026-10-27 07:17 UTC