Data reports computed from the verified CVE corpus behind our daily briefings. Every number is reproducible from the public JSON dataset; methods and sample sizes are stated inline.
109 NVD- and CISA-checked CVEs from Apr–Jun 2026: 39% confirmed exploited, median CVSS 8.8, and where exploitation speed and CVSS rank disagree.
135 NVD- and CISA-checked vulnerabilities from our first three months of daily briefings: exploitation speed (median disclosure-to-KEV lag of 4 days), AI severity inflation caught by the evidence layer 65 times, and where CVSS and EPSS disagree.
Want the underlying data? Every tracked CVE is in the free JSON data feed (CC BY 4.0). How the corpus is verified is on the methodology page.
The corpus behind this report grows by one briefing every day at 04:00 UTC. Free for security professionals.