No Vaccine, No Funding, No Security: Inside the DRC's Most Dangerous Ebola Outbreak in Years

The World Health Organization on May 22, 2026, upgraded its risk assessment for the Ebola outbreak in the Democratic Republic of Congo from "high" to "very high" at the national level, warning that the disease is "spreading rapidly" across the country's northeast [1]. WHO Director-General Tedros Adhanom Ghebreyesus said the assessment also classifies the risk as high at the regional level and low globally [1]. The announcement came five days after the WHO took the rare step of declaring the outbreak a Public Health Emergency of International Concern — the first time a Director-General has made such a declaration before convening an Emergency Committee [2].

What makes this outbreak distinct from the roughly 16 that preceded it in the DRC since 1976 is not just its scale. It is driven by the Bundibugyo ebolavirus, a strain for which there is no approved vaccine and no approved therapeutic treatment [3]. The two licensed Ebola vaccines — Merck's Ervebo (rVSV-ZEBOV) and the Janssen Zabdeno/Mvabea regimen — both target the Zaire ebolavirus glycoprotein and are not indicated for Bundibugyo [3]. That single fact has upended the standard response playbook and left frontline health workers without the most important tool used to contain every major DRC outbreak since 2018.

The Numbers: A Fast-Moving and Underreported Epidemic

As of May 22, 82 cases have been laboratory-confirmed in the DRC, with seven confirmed deaths [1]. But the confirmed count represents a fraction of the actual burden. WHO estimates nearly 750 suspected cases and 177 suspected deaths are linked to the outbreak, and Tedros acknowledged that "we know the epidemic in DRC is much larger" than the confirmed figures suggest [4]. The case fatality rate among suspected cases — roughly 24% — falls within the historical range for Bundibugyo virus, which carries an estimated fatality rate between 25% and 50% [5].

For comparison, the 2018–2020 Kivu outbreak, which remains the deadliest in DRC history and the second-largest Ebola outbreak globally, produced 3,470 reported cases and 2,287 deaths over nearly two years [6]. The current outbreak has reached 750 suspected cases within weeks of official declaration, though the true onset of transmission likely predates the May 15 announcement by a significant margin [7].

Source: WHO / CDC Outbreak History

Data as of May 22, 2026CSV

The outbreak is centered in Ituri Province, with cases reported across at least 11 health zones spanning Ituri and Nord-Kivu provinces [8]. The initial hotspots — Bunia, Rwampara, and Mongbwalu — are semi-urban areas with dense populations and extensive informal healthcare networks, both of which accelerate transmission [2]. Imported cases have also been detected in Kinshasa, the DRC capital of over 17 million people, and in Kampala, Uganda's capital [8][9].

Why "Very High" — and Why Now?

WHO uses a multi-factor framework to assess outbreak risk, weighing epidemiological indicators (case trends, geographic spread, case fatality rate), health system capacity, population vulnerability, and the availability of medical countermeasures. The escalation from "high" to "very high" was driven by several converging factors: the high positivity rate among initial laboratory samples, confirmation of unlinked cases in Kampala within 24 hours of each other, increasing trends in suspected case clusters, and the absence of any approved vaccine or treatment [2].

Two laboratory-confirmed cases appeared in Kampala on May 15 and 16 — both in individuals who had traveled from the DRC, with no apparent epidemiological link between them [9]. The emergence of two independent importation events in a capital city of 1.7 million people signaled that transmission chains in the DRC are longer and more dispersed than the confirmed case count implied.

Critics have questioned whether the escalation should have come sooner. The IRC noted that "weakened disease surveillance systems following severe health funding cuts in eastern DRC are contributing to the rapid escalation" and that the outbreak was detected late because of degraded monitoring capacity [10]. Contact tracing in Ituri is being conducted under conditions of active insecurity and intermittent road closures, with several contacts dying before they could be isolated — suggesting that by the time the WHO raised the alarm, community transmission was already well established [11].

A Funding Crisis Within a Health Crisis

The gap between the resources mobilized for the current outbreak and those deployed during the 2018–2020 Kivu response is stark. WHO Director-General Tedros approved $3.9 million from the Contingency Fund for Emergencies [12]. During the Kivu epidemic, more than $900 million was mobilized from international donors [6].

Source: WHO / CNN / USAID

Data as of May 22, 2026CSV

The funding shortfall is not accidental. It reflects a broader contraction in global health spending that preceded the outbreak. USAID disbursed approximately $67 million in foreign aid to the DRC in the final quarter of 2025, down from $715 million in fiscal year 2025 and nearly $1.2 billion in fiscal year 2024 [13]. The Trump administration's plans to redirect $2 billion from global health programs to cover the cost of closing USAID include $647 million in cuts to global health security funding [13].

The effects are direct and measurable. The US previously funded a range of the IRC's outbreak preparedness activities in eastern DRC, but much of that funding ended in March 2025 [10]. The IRC's country director stated that "years of underinvestment and recent funding cuts have left many health facilities without adequate protective equipment, surveillance capacity, or frontline support needed to respond quickly and safely" [10].

Other major donors have also pulled back. The United Kingdom, Germany, and Canada cut foreign aid for global health and development in 2025 [12]. The US withdrawal from WHO funding has resulted in staff reductions at the organization, and no other donor country has filled those gaps [12]. Africa CDC convened a high-level meeting with more than 130 participants from donor governments, UN agencies, and humanitarian organizations — but pledges of specific dollar amounts remain scarce in public reporting [14].

Cross-Border Spread and Regional Risk

The outbreak has already crossed international borders. Uganda confirmed two imported cases in Kampala — a Congolese man who was admitted to a private hospital on May 11 and died on May 14, and a second individual confirmed on May 16 [9]. No local transmission has been identified in Uganda as of May 22, but the appearance of two unlinked imported cases within 24 hours heightened concern about undetected circulation in transit corridors between eastern DRC and East Africa [9].

Rwanda, which shares land borders with both the DRC and Uganda, has not reported cases but has activated intensified health surveillance at border crossings and in Kigali [15]. Airport thermal screening, passenger health monitoring, and rapid-response preparedness measures are now active across the region [15].

The DRC's eastern provinces sit at the center of one of Africa's most active cross-border population corridors. Ituri Province alone has 273,403 displaced people, and 1.9 million people in the province require humanitarian assistance according to the 2026 Humanitarian Response Plan [16]. The DRC as a whole has 5.2 million internally displaced persons, the fourth-highest total globally [17].

Source: UNHCR Population Data

Data as of Dec 31, 2025CSV

High population mobility, porous borders, and the presence of large displaced populations in informal settlements create conditions where border screening can intercept only a fraction of potential carriers. During the 2018–2020 Kivu outbreak, population movement studies documented extensive daily cross-border travel between DRC, Rwanda, and Uganda through both formal crossings and informal routes that bypass health checkpoints entirely [18].

No Vaccine: The Bundibugyo Problem

The absence of an approved vaccine fundamentally changes the calculus of this outbreak. During the Kivu epidemic, ring vaccination with Ervebo — administering the vaccine to contacts of confirmed cases, their contacts, and frontline healthcare workers — was the single most effective containment tool, demonstrating near-complete efficacy against Zaire ebolavirus [19]. That option does not exist for Bundibugyo.

Médecins Sans Frontières has emphasized that this is what makes the current outbreak categorically different from recent DRC epidemics: "Because the 2026 PHEIC strain is Bundibugyo, no approved vaccine is indicated for the current outbreak" [3]. Investigational vaccine candidates that target Bundibugyo exist in preclinical and early clinical stages, and WHO's R&D Blueprint protocols could facilitate emergency deployment — but no candidate is ready for large-scale use [3][5].

This means that containment must rely entirely on non-pharmaceutical interventions: case identification, contact tracing, isolation, safe burial practices, and community engagement. Each of these measures is significantly harder to implement in a conflict zone, and each requires a level of community trust that is actively eroding.

Conflict, Distrust, and Burning Hospitals

On May 21, residents in Rwampara — a town at the epicenter of the outbreak — set fire to an Ebola treatment center operated by the Alliance for International Medical Action [20]. The arson was triggered when health authorities refused to release the body of a deceased Ebola patient to his family and friends, in accordance with safe burial protocols designed to prevent transmission from corpses [20]. Six patients who were receiving treatment in medical tents at the time had to be relocated to a nearby hospital [21].

The incident is not an isolated act of vandalism. It reflects a pattern of community resistance rooted in the collision between public health imperatives and local burial customs, compounded by years of insecurity and mistrust of outside institutions. The same dynamic played out repeatedly during the 2018–2020 Kivu outbreak, where over 300 attacks on health facilities and workers were documented [6].

In the current outbreak, armed groups including the Allied Democratic Forces (ADF) and M23 control territory in and around the affected health zones, limiting access for health workers and disrupting contact tracing [5]. At least four healthcare workers showing Ebola-like symptoms have died [5]. Ituri Province has been in the grip of an armed insurgency linked to the Islamic State's Central Africa Province, which has displaced hundreds of thousands and created a humanitarian crisis that predates the Ebola outbreak by years [5].

WHO's Tedros warned that violence is threatening the Ebola response and called for safe access for health workers [21]. But negotiating access with non-state armed groups is an inherently slow and uncertain process, and there is no public reporting of formal agreements with any of the groups operating in the affected areas.

Historical Context: Has DRC Contained Outbreaks Before?

The DRC has experienced 17 recorded Ebola outbreaks since 1976, more than any other country [6]. The vast majority — including small outbreaks in Équateur Province in 2014 (69 cases), Bas-Uélé in 2017 (8 cases), and Kasai in 2025 (64 cases) — were contained without international spread [6]. This track record has led some analysts to argue that alarm over DRC Ebola outbreaks is often disproportionate to the actual risk of regional or global spread.

That argument has historical merit but faces specific challenges in the current context. Of DRC's 17 outbreaks, only the 2018–2020 Kivu epidemic resulted in confirmed cross-border transmission (to Uganda, where 4 cases were identified) [6]. The current outbreak has already produced two confirmed imported cases in Kampala within its first week of official recognition [9] — matching the entire cross-border case count of the two-year Kivu epidemic.

Three features distinguish this outbreak from the majority of prior DRC Ebola events that were successfully contained: the Bundibugyo strain, which eliminates the vaccine option; the location in a conflict zone with active armed groups controlling territory; and the simultaneous degradation of international funding and local surveillance infrastructure. The 2025 Kasai outbreak (Zaire strain, 64 cases, 45 deaths) was contained in three months with ring vaccination [6]. No comparable tool is available now.

Second-Order Health Consequences

Concentrating emergency resources on Ebola response in eastern DRC carries documented costs for other health programs. During the 2018–2020 Kivu epidemic, measles vaccination coverage dropped substantially in affected health zones, contributing to a parallel measles outbreak that killed over 6,000 people nationwide — roughly triple the Ebola death toll [6].

The same dynamics are at work in 2026. DRC continues to experience cholera outbreaks driven by poor sanitation and limited access to clean water, and measles vaccination coverage remains low in conflict-affected eastern provinces [16]. CARE International has warned that for women and girls in the affected areas, disease outbreaks reduce access to maternal healthcare, family planning, and services addressing violence — with consequences that persist long after the outbreak itself is contained [22].

MSF has stated that a central lesson from past outbreaks is "the need to maintain access to regular health care, such as treatment for malaria, measles vaccination, and sexual and reproductive health care" during an Ebola response [3]. Whether that lesson is being applied in practice depends heavily on funding levels that are currently a fraction of what was available during the last major outbreak.

The presence of co-circulating arboviruses and influenza-like illnesses in the region is further complicating diagnostics, masking the initial index of suspicion for Ebola and potentially delaying isolation of cases [2].

What Comes Next

The WHO's PHEIC declaration triggers a set of temporary recommendations under the International Health Regulations, including enhanced surveillance, coordinated cross-border response, and accelerated research and development for medical countermeasures [2]. The Emergency Committee met on May 19 and agreed that the situation constitutes a PHEIC but does not rise to the level of a "pandemic emergency" — a newer and higher classification under the amended International Health Regulations [23].

The immediate priorities are straightforward to name and difficult to execute: scaling up contact tracing in insecure areas, securing safe access for health workers, deploying investigational therapeutics and vaccine candidates under emergency protocols, and mobilizing funding that is orders of magnitude greater than the $3.9 million currently committed from WHO's emergency fund [12].

The DRC has contained 16 previous Ebola outbreaks. But it has never done so without either a vaccine or adequate international funding, and it has never done so while the country with the largest global health budget was simultaneously withdrawing from the international health architecture. Whether the 17th outbreak follows the historical pattern or breaks it may depend less on the virus itself than on decisions being made in Washington, Geneva, and Kinshasa in the coming weeks.