Vulnerabilities: Everything You've Wanted to Know
Broadcom, Wednesday, October 7th, 2026
VMware explains why AI-driven vulnerability discovery makes CVSS-based patch prioritization insufficient.
Day 5 of VMware's Cybersecurity Awareness Month series examines the surge in CVEs and patches as AI models get better at finding, exploiting and chaining vulnerabilities.
The post argues the bigger problem is that many organizations struggle to assess and mitigate risk, and CVSS scores alone are no longer enough because AI can chain low- and moderate-severity flaws into the equivalent of a critical one.
Teams that patch only high-severity issues are being caught off guard, and attackers may already know about issues defenders are just learning of.