Skip to main content

Cybersecurity statistics / AI Vulnerabilities

99.9% of AI vulnerabilities with an available fix remain unpatched.

PublisherOrca Security
Report2026 State of AI Security Report
Published9 July 2026
TopicsAI Vulnerabilities, Patch Management

Published by Orca Security in 2026 State of AI Security Report, 9 July 2026. The figure is taken from the report as published; the full methodology is in the source.

View the original report

Related statistics

In 2025, 14% of published AI vulnerabilities were MCP-related (315 MCP-related vulnerabilities).
Wallarm, 22/02/2026
Teams using attack intelligence to track emerging AI vulnerabilities increased by 10%.
Black Duck, 09/02/2026
28% of restaurant leaders delay security patches frequently to avoid disrupting service.
VikingCloud, 12/07/2026
78% of restaurant leaders delay security patches to avoid disrupting service.
VikingCloud, 12/07/2026
The end-to-end window from private disclosure to enterprise patch-in-production can stretch 90 to 150 days.
Tuskira, 28/06/2026
AI-driven discovery outpaces visible Mythos-attributed remediation by roughly 16.5x, with about 25.3 disclosures per day versus about 1.5 patches per day.
Tuskira, 28/06/2026

Get the newsletter

Weekly cybersecurity statistics by email.