UpdatedSep 3, 2026
Anthropic-Credited-CVEs — Updated!
Tracking Vulnerabilities That Appear to be Credited to the Anthropic Research Team
ANTHROPIC CVE TRACKER
Overview
Tracking vulnerabilities that credit the Anthropic research team and are possibly discovered by Project Glasswing.
CURRENT CVE COUNT: 318
Fixed Anthropic Findings w/o CVE: 128
Findings Withdrawn by Anthropic: 243
Distributions
|
|
Anthropic Research
- Tracking CVEs Attributed to Anthropic Researchers and Project Glasswing
- Observations on Anthropic’s Vulnerability Disclosure Ledger
- Has Anthropic Glasswing Lived Up to the Hype it brought this year?
- The Anthropic Glasswing Receipts Are Starting to Trickle In
Add a Vulnerability
If you find an Anthropic credited vulnerability, please open a Pull Request or Send me a message on linkedin or in the Extended Vulnerability Community Discord.
Considerations
This project is maintained on a best effort basis.
The List
| CVE | Date | Vendor | Product | CVSS | Ledger | vcKEV | Credit |
|---|---|---|---|---|---|---|---|
| CVE-2026-109588 | 2026-10-16 | FreeRTOS | FreeRTOS-Kernel | 8.8 | Ada Logics Ltd | Anthropic | ||
| CVE-2026-109587 | 2026-10-16 | FreeRTOS | FreeRTOS-Kernel | 8.8 | Ada Logics Ltd | Anthropic | ||
| CVE-2026-18799 | 2026-10-16 | Mattermost | Mattermost | 4.3 | Claude and Ada Logics | ||
| CVE-2026-92392 | 2026-10-14 | curl | curl | 8.1 | Luna with Claude | Anthropic | Stefan Eissing | ||
| CVE-2026-86856 | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 | Red Hat would like to thank Anthropic Research for reporting this issue. | ||
| CVE-2026-86847 | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 | Red Hat would like to thank Anthropic Research for reporting this issue. | ||
| CVE-2026-86846 | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 | Red Hat would like to thank Anthropic Research for reporting this issue. | ||
| CVE-2026-86845 | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 | Red Hat would like to thank Anthropic Research for reporting this issue. | ||
| CVE-2026-86566 | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 | Red Hat would like to thank Anthropic Research and Arthur Chan (Ada Logics) for reporting this issue. | ||
| CVE-2026-86563 | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 7.8 | Red Hat would like to thank Anthropic Research for reporting this issue. | ||
| CVE-2026-86562 | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 7.8 | Red Hat would like to thank Anthropic Research and Arthur Chan (Ada Logics) for reporting this issue. | ||
| CVE-2026-86561 | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 | Red Hat would like to thank Anthropic Research for reporting this issue. | ||
| CVE-2026-77207 | 2026-10-13 | The Libreswan Project | libreswan | 7.5 | Claude (Anthropic) | David Korczynski (ADA Logics Ltd) | ||
| CVE-2026-77206 | 2026-10-13 | The Libreswan Project | libreswan | 7.5 | Claude (Anthropic) | David Korczynski (ADA Logics Ltd) | ||
| CVE-2026-108094 | 2026-10-12 | Red Hat | Red Hat Enterprise Linux 10 | 7.8 | Red Hat would like to thank Calif.io ([email protected]), in collaboration with Anthropic for reporting this issue. | ||
| CVE-2026-103658 | 2026-10-12 | GNU | Aspell | 5.9 | Anthropic, Claude | Ada Logics | ||
| CVE-2026-107570 | 2026-10-08 | mutt | mutt | 2.5 | Calif.io, in collaboration with Anthropic | ||
| CVE-2026-103604 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.7 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-103603 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.7 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-103602 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.2 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-103601 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.2 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-66858 | 2026-10-02 | Apache Software Foundation | Apache Thrift | 8.7 | Claude (Anthropic Research) | Arthur Chan, Ada Logics | Apache Thrift Developers | ||
| CVE-2026-66837 | 2026-10-02 | Apache Software Foundation | Apache Thrift | 8.7 | Claude (Anthropic Research) | Arthur Chan, Ada Logics ([email protected]) | ||
| CVE-2026-66081 | 2026-10-02 | Apache Software Foundation | Apache Thrift | 8.7 | Akhil Koul | Claude (Anthropic Research) | Arthur Chan, Ada Logics ([email protected]) | ||
| CVE-2026-63772 | 2026-10-02 | Apache Software Foundation | Apache Thrift | 8.7 | Anthropic (agentic research) + Ada Logics; reported by Adam Korczynski | ||
| CVE-2026-63578 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 7.1 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-63577 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.2 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |