EPSS had scores for 329,934 CVEs as of May 1, 2026.

June 20, 2026

EPSS had scores for 329,934 CVEs as of May 1, 2026. — This cybersecurity statistic was published by FIRST in June 2026. It covers topics including Exploitability, Vulnerability Scoring. The original data appears in The 2026 Vulnerability Forecast Update: Navigating the AI Epoch . For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 6/15/2026

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

EPSS had scores for 329,934 CVEs as of May 1, 2026. This data was published by FIRST and covers Exploitability, Vulnerability Scoring.

Where does this data come from?

This statistic comes from The 2026 Vulnerability Forecast Update: Navigating the AI Epoch , published by FIRST on June 20, 2026. You can view the original report at https://www.first.org/blog/20260615-vulnerability-forecast-update.

What cybersecurity topics does this cover?

This statistic relates to Exploitability, Vulnerability Scoring. Browse more statistics on Exploitability or from FIRST.

CYBERSTATS

EPSS had scores for 329,934 CVEs as of May 1, 2026.

Source

Share or Copy this stat

Frequently Asked Questions

Want More Statistics Like This?

Related Statistics

High-risk vulnerabilities (flaws that are both severe and highly exploitable) increased 36% year-over-year.

97% of API vulnerabilities can be exploited with a single request.

98% of API vulnerabilities are easy or trivial to exploit.

63% of mid-sized AppSec teams (11–50 members) that use SCA cite the inability to verify if vulnerabilities are exploitable in production as their biggest pain point.

73% of SCA users lack visibility into whether flagged vulnerabilities are exploitable in production.

60% of ASPM platform users say issues are still ranked by theoretical severity instead of real exposure or exploitability.

Browse by Topic

Stay Ahead of Cyber Threats