Agent Vulnerability Disclosures Doubled in 2026. The Auth Stack Wasn’t Built for This.

Monthly CVE disclosures doubled in 2026, reaching 10,740 by August, according to the Google Threat Intelligence Group . High-risk vulnerabilities surged 241% in the same window. The most significant structural shift is in the attack surface: agent orchestration middleware now accounts for 50% of all AI-related flaws, representing a 347% increase in disclosures this year. Over 2,000 cumulative AI-related CVEs have been tracked from January 2025 through August 2026, with more than 1,500 appearing in 2026 alone. Microsoft’s Digital Defense Report 2026 projects approximately 72,000 CVEs for the full year, a record roughly double the prior year. One caveat: the GTI cautions that raw CVE counts are inflated by automated CNA assignment policies — thousands of Linux kernel CVEs, for instance, contributed to the doubling with zero observed exploited zero-days.

BeCrypto News shows a short excerpt and links to the publisher. The full report belongs to Forkast.