VulnerabilitiesJun 12, 2026

May 2026 CVE Landscape

41 high-impact vulnerabilities identified in May 2026, with 22 actively exploited.

In May 2026, Insikt Group identified 41 high-impact vulnerabilities, an 11% increase from the previous month. Of these, 22 were actively exploited, including 12 that allowed for remote code execution. Notably, five vulnerabilities were over 15 years old, highlighting the continued exploitation of legacy weaknesses. The vulnerabilities affected products from 20 vendors, with Vercel and Microsoft products being significantly impacted.

AI summary of the linked source. Not reviewed by an editor. How this works

Read at source

Vendor Watch

Run Microsoft?

Get an email when a new story names Microsoft, usually within the hour.

Free. Your list stays private and never appears in a subject line. One click stops it. How Vendor Watch works Privacy

The lesson from this incident

Full lesson

May 2026 saw a significant spike in actively exploited vulnerabilities, with 22 of 41 high-impact CVEs being weaponized by attackers. The most concerning finding was that five vulnerabilities were over 15 years old, demonstrating how legacy systems continue to provide attack vectors for threat actors. This highlights critical gaps in vulnerability management programs, where organizations fail to maintain comprehensive asset inventories and systematic patching processes. The presence of decade-plus-old vulnerabilities in active exploitation indicates that many organizations are running unsupported or poorly maintained systems.

What helps against this

How we list vendors

Cisco affected Microsoft affected Palo Alto Networks affected Recorded Future research

Vulnerability scanning and prioritisation
You know which systems are vulnerable, and which ones to fix first.
For exampleTenable Vulnerability Management Rapid7 Exposure Command (InsightVM)Axonius Exposures all options
Automated patch management
Known holes get closed in days, not months.
For exampleIvanti Neurons for Patch Management Action1 Patch Management Qualys Patch Management all options
Endpoint detection and response (EDR and XDR)
Malware and hands-on-keyboard attackers on laptops and servers get spotted and stopped.
For exampleESET PROTECT Elastic Security Microsoft Defender for Endpoint all options

Indicators of Compromise

Extracted by AI from the linked source. Not reviewed by an editor. How this works

cve — CVE-2008-4250
cve — CVE-2009-1537
cve — CVE-2009-3459
cve — CVE-2010-0249
cve — CVE-2010-0806
cve — CVE-2025-34291
cve — CVE-2026-0257
cve — CVE-2026-0300
cve — CVE-2026-20182
cve — CVE-2026-31431
cve — CVE-2026-34926
cve — CVE-2026-41091
cve — CVE-2026-42208
cve — CVE-2026-42897
cve — CVE-2026-45321
cve — CVE-2026-45498
cve — CVE-2026-48027
cve — CVE-2026-48172
cve — CVE-2026-6973
cve — CVE-2026-8398
cve — CVE-2026-9082
cve — CVE-2026-26980

Entities

Next.js (product)Vercel (vendor)Microsoft (vendor)Adobe (vendor)Palo Alto Networks (vendor)Trend Micro (vendor)