No Vaccine, No Access, No Time: Inside the Ebola Outbreak the CDC Says Could Become the Worst in History

On June 5, 2026, the CDC published modeling in its Morbidity and Mortality Weekly Report projecting that the Ebola outbreak spreading through eastern Congo and into Uganda carries a 65% likelihood of exceeding 20,000 cases within three months—if only 20% of patients are isolated within two days of symptom onset [1]. That figure would place it in the same category as the 2014–2016 West Africa epidemic, the deadliest Ebola outbreak on record, which infected more than 28,600 people and killed 11,310 across Guinea, Liberia, and Sierra Leone [2].

The projection landed alongside headlines suggesting case numbers were dropping. The reality is more complicated—and more alarming—than either framing captures.

The Numbers: What We Know and What We Don't

As of June 4, 2026, the WHO reported 397 confirmed Ebola cases and 63–65 confirmed deaths across the DRC and Uganda [3]. Of those, 363 confirmed cases and 62 deaths were in the DRC, with 15 confirmed cases and 1 death in Uganda [1]. The outbreak has spread across 24 health zones in the DRC, with the newly affected Mambasa health zone lying more than 100 miles from Mongbwalu, the outbreak's point of origin in Ituri province [4].

Source: WHO Disease Outbreak News

Data as of Jun 6, 2026CSV

But these figures have been in constant flux. In late May, WHO reported nearly 1,000 total cases—125 confirmed and 906 suspected. Days later, improved testing sharply revised the suspected case count downward to 116, and the confirmed total was recalculated to 321 [5]. Then it climbed back to 397 as additional testing was completed [3].

Doctors Without Borders (MSF) cautioned against reading the revisions as good news: "Extremely limited testing capacity and difficulties accessing certain areas necessitate interpreting these figures with caution" [5]. The International Rescue Committee estimated that only 20% of contacts in the contact tracing process were being located [4].

The case fatality rate for Bundibugyo virus historically ranges from 30% to 50%—lower than Zaire ebolavirus but still severe [6].

The CDC's Warning: Why Dropping Numbers Don't Mean a Declining Outbreak

The CDC's MMWR report estimated a median basic reproductive number (R0) of 2.51, with an interquartile interval of 2.27 to 2.82 [1]. For context, an R0 above 1.0 means each infected person is, on average, passing the virus to more than one other person—and the outbreak is growing.

The modeling used reported death counts to back-calculate the likely date of the initial animal-to-human spillover event. Assuming 50 deaths had occurred by May 24, the median estimated spillover date was February 19, 2026—meaning the virus had been circulating undetected for roughly three months before the outbreak was formally declared on May 15 [1].

Under more aggressive assumptions—200 deaths by that date—the spillover may have occurred as early as January 29 [1]. WHO Director-General Tedros Adhanom Ghebreyesus acknowledged the late detection: "The outbreak had a big head start, and we're still behind" [7].

Jason Asher of the CDC's Center for Forecasting and Outbreak Analytics emphasized that the modeling "is not a forecast; it is a planning tool" designed to "support action, not to generate alarm" [2]. The projections offered three scenarios:

• Poor isolation (20% of cases isolated): 65% probability of exceeding 20,000 cases by August 22, 2026
• Moderate isolation (50%): 17% probability of exceeding 20,000 cases
• High isolation (70%): approximately 5% probability of exceeding 10,000 cases [1]

Dr. Krutika Kuppalli of UT Southwestern summarized: "Under certain scenarios, the current Bundibugyo Ebola outbreak could grow into one of the largest Ebola outbreaks ever recorded" [2].

Historical Context: How This Outbreak Compares

This is the DRC's 17th Ebola outbreak and arrived only five months after the end of the previous one [6]. But the comparisons to earlier outbreaks are imperfect for a critical reason: this is the Bundibugyo ebolavirus, not the Zaire ebolavirus that caused the 2014–2016 West Africa epidemic and the 2018–2020 Kivu outbreak.

Source: WHO/CDC Historical Data

Data as of Jun 6, 2026CSV

The Bundibugyo species was first identified during a 2007 outbreak in Uganda that produced 149 confirmed cases [8]. The 2026 outbreak has already surpassed that total by a factor of nearly three, making it the largest Bundibugyo outbreak ever recorded.

A former Ebola response coordinator told NPR: "If I compare this to past outbreaks, this one has more momentum at time of detection than the huge West Africa outbreak in 2014 did" [2].

The Vaccine Problem

The most significant difference between this outbreak and recent ones is the absence of a matching vaccine. The two licensed Ebola vaccines—Merck's rVSV-ZEBOV (Ervebo) and Johnson & Johnson's Ad26.ZEBOV/MVA-BN-Filo—were both developed against the Zaire ebolavirus [9].

There is no approved vaccine or specific antiviral treatment for Bundibugyo virus [9].

The global Ebola vaccine stockpile holds approximately 500,000 doses of rVSV-ZEBOV, but these target the wrong strain [10]. Roughly 2,000 doses are physically in the DRC and could be used in a trial setting if WHO experts determine there is scientific justification for testing cross-strain efficacy, but no such decision has been made [10].

This gap eliminates the strategy that proved decisive in both the 2018–2020 Kivu outbreak and the tail end of the West Africa epidemic: ring vaccination, in which contacts and contacts-of-contacts of confirmed cases receive the vaccine to create a protective buffer. Without a matched vaccine, the response relies entirely on traditional public health measures—isolation, contact tracing, safe burial practices, and community engagement [9].

Contact Tracing Collapse in a War Zone

Eastern Congo is one of the most volatile regions on earth. Armed groups including the Allied Democratic Forces (ADF), CODECO militias, and M23 operate across Ituri and North Kivu provinces, the heart of the outbreak zone [4].

Health officials in Ituri province—which accounts for nearly 94% of confirmed infections—were actively monitoring only 39.3% of identified contacts as of early June [4].

Source: Bloomberg / WHO

Data as of Jun 6, 2026CSV

That figure compares unfavorably to the 2018–2020 Kivu outbreak, where contact tracing began at around 62% coverage in the early phase and eventually reached 85% as the response scaled up [11]. The Kivu outbreak lasted nearly two years and cost over $600 million, in part because of similar—though less severe—access constraints [11].

Tedros was blunt about the security situation: "We cannot build community trust or isolate the sick while bombs are falling" [12]. He added that "health facilities are either non-functional or operating under severe constraints due to insecurity" [12].

The humanitarian overlay compounds the epidemiological challenge. Nearly 10 million people in the affected regions face acute hunger, and 26.5 million across the DRC are experiencing acute food insecurity [12]. "People weakened by hunger are far more vulnerable to infections," Tedros said [12].

Funding: Pledged vs. Delivered

The financial response has been substantial on paper. Africa CDC and WHO jointly launched a six-month continental response plan on June 5 targeting US$518 million from June through November 2026 [13]. The World Bank's Pandemic Fund approved up to US$220.6 million for outbreak response, preparedness, and cross-border coordination [14]. The United States committed nearly $38 million in additional funding, bringing total State Department Ebola response funding to more than $200 million [15]. The European Union pledged EUR 15 million, with EUR 5 million earmarked for WHO [16].

But Africa CDC reported that global funding commitments for the response have more than halved, from $498 million to $219 million—a significant and widening gap [13].

By comparison, the 2018–2020 Kivu outbreak—which ultimately recorded 3,481 cases—cost over $600 million, or roughly $172,000 per case [11]. At a similar per-case cost, 20,000 cases would require over $3.4 billion.

Cross-Border Spread: Already Happening

The outbreak crossed international borders before it was even officially recognized. Uganda's first confirmed case was an elderly man admitted to a private hospital in Kampala on May 11—four days before the DRC confirmed the outbreak on May 15. He died on May 14 [8].

Uganda responded by closing its border with the DRC on May 27 for at least four weeks and imposing a mandatory 21-day isolation period for anyone entering from the DRC [17]. Rwanda introduced mandatory quarantine for returning travelers from the DRC on May 22 [17].

The International Organization for Migration (IOM) established health screening and surveillance operations at points of entry in Burundi, the DRC, Rwanda, South Sudan, and Uganda, warning that "Ebola response must cross borders faster than virus" [18].

Initial genomic sequencing by the DRC's national reference laboratory (Institut National de la Recherche Biomedicale, INRB) confirmed the pathogen as Orthoebolavirus bundibugyoense and was consistent with a new zoonotic spillover event rather than a re-emergence of a prior outbreak [8]. Whether undetected cross-border transmission beyond Uganda has occurred remains unknown—genomic surveillance in neighboring countries is limited.

The Credibility Debate: Are Cases Being Suppressed or Declining?

The CDC's modeling assumes significant underdetection. The back-calculation of spillover dates depends on the assumption that actual deaths substantially exceed reported deaths—the model tests scenarios of 50, 100, and 200 deaths as of May 24, against the official count of approximately 64 confirmed deaths at that time [1].

Some independent epidemiologists have questioned whether the CDC's worst-case projections adequately account for the behavioral changes that typically accompany outbreak awareness—communities self-isolating, modifying burial practices, and reducing physical contact even without formal public health intervention [2].

Congolese health officials have pointed to the downward revision in suspected cases as evidence that the outbreak may be smaller than initially feared [5]. WHO's own revisions—from nearly 1,000 to 321, then back up to 397—reflect genuine improvements in diagnostic capacity rather than a surging caseload [7].

Lawrence Gostin, director of the WHO Collaborating Center on National and Global Health Law at Georgetown University, called the CDC report "a step in the right direction" after the agency had been "missing in action" in the response [2]. His concern was less about the specific numbers than about the structural conditions—no vaccine, poor contact tracing, active conflict—that make any projection unreliable.

CDC Ebola response incident manager Satish Pillai stated that the domestic risk "remains low for the general U.S. population," though this assessment could change if the virus reaches additional urban international hubs beyond Kampala [1].

Structural Accountability: Who Failed and What Has Changed

The 2018–2020 Kivu outbreak prompted a formal independent commission whose findings identified coordination failures across multiple institutions: WHO's initial slow escalation to a PHEIC, donor fragmentation, insufficient investment in the DRC's national health infrastructure, and the failure to address community distrust rooted in decades of political marginalization in eastern Congo [11].

Several of those failures are repeating. WHO declared the 2026 outbreak a PHEIC within days of confirmation—a marked improvement over the months-long delay in 2018 [3]. But the structural conditions that make eastern Congo a recurring Ebola epicenter remain unchanged: weak health infrastructure, active armed conflict, massive population displacement, and chronically underfunded national disease surveillance [12].

The "One Response" framework launched by Africa CDC and WHO on June 5 represents a governance reform—unifying the continental response under a single coordination structure rather than the fragmented parallel operations that characterized earlier outbreaks [13]. Whether this translates into operational improvement on the ground, where security conditions dictate access, remains to be seen.

The United States' role has also shifted. USAID, historically a lead funder and operational partner in DRC Ebola responses, has faced significant restructuring. The $200 million committed by the State Department represents substantial investment, but disbursement timelines and implementing mechanisms are not yet clear [15].

What Comes Next

The CDC's modeling offers a stark but conditional warning. The gap between 20,000 cases and containment is measured in isolation rates, contact tracing coverage, and speed of response—all of which are currently operating well below the thresholds the model identifies as necessary for control.

The absence of a matched vaccine removes the single most effective tool from the response toolkit. The security environment in eastern Congo makes the remaining tools—isolation, contact tracing, community engagement—difficult to deploy at the scale required. And the history of Ebola in this region offers no reassurance that international attention and funding will be sustained long enough to see the outbreak through.

The 2014–2016 West Africa epidemic killed more than 11,000 people in part because the international response was late, fragmented, and underresourced. The question facing the DRC, WHO, and the global health community is whether those lessons have been learned—or whether they will need to be learned again.