In 2026, VulnCheck found that over 50 percent of public open-source proof-of-concept exploits were nonfunctional or illegitimate