Roughly one-third of 2025 ransomware CVEs lack public or commercial exploits as of January 2026

56.4% of 2025 ransomware CVEs are first identified through active zero-day exploitation