Skip to main content
Back to Home

Critical security debt, defined as risky vulnerabilities older than a year, increased 20% year-over-year.

May 27, 2026

Critical security debt, defined as risky vulnerabilities older than a year, increased 20% year-over-year. — This cybersecurity statistic was published by Veracode in May 2026. It covers topics including Security Debt, Vulnerabilities, Risk Management. The original data appears in 2026 State of Software Security Report: Prioritize, Protect, Prove. For the full methodology and detailed findings, refer to the original report.

Source

View Original Report

Published on 2/24/2026

Share or Copy this stat

Frequently Asked Questions

What does this statistic say?

Critical security debt, defined as risky vulnerabilities older than a year, increased 20% year-over-year. This data was published by Veracode and covers Security Debt, Vulnerabilities, Risk Management.

Where does this data come from?

This statistic comes from 2026 State of Software Security Report: Prioritize, Protect, Prove, published by Veracode on May 27, 2026. You can view the original report at https://www.veracode.com/resources/analyst-reports/state-of-software-security-2026/.

What cybersecurity topics does this cover?

This statistic relates to Security Debt, Vulnerabilities, Risk Management. Browse more statistics on Security Debt or from Veracode.

Want More Statistics Like This?

Get the latest cybersecurity stats delivered to your inbox every week

Stay Ahead of Cyber Threats

Join 1,000+ security professionals getting weekly insights