A notable surge in high-impact vulnerabilities was observed in May 2026, with 41 identified as Very Critical by the Recorded Future Risk Score, marking an 11% increase from the previous month. These vulnerabilities affected products from 20 major vendors, highlighting the widespread nature of the issue. Notably, 21 of these vulnerabilities were included in the US Cybersecurity and Infrastructure Security Agency's Known Exploited Vulnerabilities catalog, indicating that they are being actively exploited by threat actors. The majority of these vulnerabilities were surfaced through honeypot data, while others were reported by cybersecurity vendors. The fact that these vulnerabilities have a Very Critical risk score underscores the urgent need for remediation1. This matters to security practitioners because prioritizing the remediation of these high-impact vulnerabilities is crucial to preventing potential breaches and minimizing the attack surface.