In early 2025, the leading autonomous agent could exploit only 13% of critical web vulnerabilities on the CVE‑Bench benchmark. By mid‑2026, performance has surged to 90% exploitation, reflecting rapid advancement in AI‑driven security testing. This sharp increase means many previously "safe" bug classes now have short expiry dates as attackers leverage more