# ANTHROPIC CVE TRACKER

## Overview
Tracking vulnerabilities that credit the Anthropic research team and are possibly discovered by [Project Glasswing](https://www.anthropic.com/glasswing).

**CURRENT CVE COUNT: 318**

**Fixed Anthropic Findings w/o CVE: 128**

**Findings Withdrawn by Anthropic: 243**

## Distributions

<table>
  <tr>
    <td>
      <picture>
        <source media="(prefers-color-scheme: dark)" srcset="assets/cvss-severity-dark.svg">
        <img alt="CVSS severity distribution" src="https://raw.githubusercontent.com/patrickmgarrity/anthropic-credited-cves/HEAD/assets/cvss-severity.svg" width="440">
      </picture>
    </td>
    <td>
      <picture>
        <source media="(prefers-color-scheme: dark)" srcset="assets/kev-exploited-dark.svg">
        <img alt="Exploited in the wild (VulnCheck KEV)" src="https://raw.githubusercontent.com/patrickmgarrity/anthropic-credited-cves/main/assets/kev-exploited.svg" width="440">
      </picture>
    </td>
  </tr>
</table>

## Anthropic Research

- [Tracking CVEs Attributed to Anthropic Researchers and Project Glasswing](https://www.vulncheck.com/blog/anthropic-glasswing-cves)
- [Observations on Anthropic’s Vulnerability Disclosure Ledger](https://www.vulncheck.com/blog/anthropic-ledger)
- [Has Anthropic Glasswing Lived Up to the Hype it brought this year?](https://www.vulncheck.com/blog/state-of-exploitation-1h-2026#has-anthropic-glasswing-lived-up-to-the-hype-it-brought-this-year)
- [The Anthropic Glasswing Receipts Are Starting to Trickle In](https://www.vulncheck.com/blog/anthropic-glasswing-receipts)

## Add a Vulnerability
If you find an Anthropic credited vulnerability, please open a Pull Request or Send me a message on linkedin or in the [Extended Vulnerability Community Discord](https://discord.gg/yTRXwepK).

## Considerations

This project is maintained on a best effort basis.

## The List

<!-- BEGIN_CVE_TABLE -->
| CVE | Date | Vendor | Product | CVSS | Ledger | vcKEV | Credit |
| --- | --- | --- | --- | --- | --- | --- | --- |
| [CVE-2026-109588](https://www.cve.org/CVERecord?id=CVE-2026-109588) | 2026-10-16 | FreeRTOS | FreeRTOS-Kernel | 8.8 |  |  | Ada Logics Ltd \| Anthropic |
| [CVE-2026-109587](https://www.cve.org/CVERecord?id=CVE-2026-109587) | 2026-10-16 | FreeRTOS | FreeRTOS-Kernel | 8.8 |  |  | Ada Logics Ltd \| Anthropic |
| [CVE-2026-18799](https://www.cve.org/CVERecord?id=CVE-2026-18799) | 2026-10-16 | Mattermost | Mattermost | 4.3 |  |  | Claude and Ada Logics |
| [CVE-2026-92392](https://www.cve.org/CVERecord?id=CVE-2026-92392) | 2026-10-14 | curl | curl | 8.1 |  |  | Luna with Claude \| Anthropic \| Stefan Eissing |
| [CVE-2026-86856](https://www.cve.org/CVERecord?id=CVE-2026-86856) | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 |  |  | Red Hat would like to thank Anthropic Research for reporting this issue. |
| [CVE-2026-86847](https://www.cve.org/CVERecord?id=CVE-2026-86847) | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 |  |  | Red Hat would like to thank Anthropic Research for reporting this issue. |
| [CVE-2026-86846](https://www.cve.org/CVERecord?id=CVE-2026-86846) | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 |  |  | Red Hat would like to thank Anthropic Research for reporting this issue. |
| [CVE-2026-86845](https://www.cve.org/CVERecord?id=CVE-2026-86845) | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 |  |  | Red Hat would like to thank Anthropic Research for reporting this issue. |
| [CVE-2026-86566](https://www.cve.org/CVERecord?id=CVE-2026-86566) | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 |  |  | Red Hat would like to thank Anthropic Research and Arthur Chan (Ada Logics) for reporting this issue. |
| [CVE-2026-86563](https://www.cve.org/CVERecord?id=CVE-2026-86563) | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 7.8 |  |  | Red Hat would like to thank Anthropic Research for reporting this issue. |
| [CVE-2026-86562](https://www.cve.org/CVERecord?id=CVE-2026-86562) | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 7.8 |  |  | Red Hat would like to thank Anthropic Research and Arthur Chan (Ada Logics) for reporting this issue. |
| [CVE-2026-86561](https://www.cve.org/CVERecord?id=CVE-2026-86561) | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 |  |  | Red Hat would like to thank Anthropic Research for reporting this issue. |
| [CVE-2026-77207](https://www.cve.org/CVERecord?id=CVE-2026-77207) | 2026-10-13 | The Libreswan Project | libreswan | 7.5 |  |  | Claude (Anthropic) \| David Korczynski (ADA Logics Ltd) |
| [CVE-2026-77206](https://www.cve.org/CVERecord?id=CVE-2026-77206) | 2026-10-13 | The Libreswan Project | libreswan | 7.5 |  |  | Claude (Anthropic) \| David Korczynski (ADA Logics Ltd) |
| [CVE-2026-108094](https://www.cve.org/CVERecord?id=CVE-2026-108094) | 2026-10-12 | Red Hat | Red Hat Enterprise Linux 10 | 7.8 |  |  | Red Hat would like to thank Calif.io ([email protected]), in collaboration with Anthropic for reporting this issue. |
| [CVE-2026-103658](https://www.cve.org/CVERecord?id=CVE-2026-103658) | 2026-10-12 | GNU | Aspell | 5.9 |  |  | Anthropic, Claude \| Ada Logics |
| [CVE-2026-107570](https://www.cve.org/CVERecord?id=CVE-2026-107570) | 2026-10-08 | mutt | mutt | 2.5 |  |  | Calif.io, in collaboration with Anthropic |
| [CVE-2026-103604](https://www.cve.org/CVERecord?id=CVE-2026-103604) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.7 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-103603](https://www.cve.org/CVERecord?id=CVE-2026-103603) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.7 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-103602](https://www.cve.org/CVERecord?id=CVE-2026-103602) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.2 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-103601](https://www.cve.org/CVERecord?id=CVE-2026-103601) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.2 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-66858](https://www.cve.org/CVERecord?id=CVE-2026-66858) | 2026-10-02 | Apache Software Foundation | Apache Thrift | 8.7 |  |  | Claude (Anthropic Research) \| Arthur Chan, Ada Logics \| Apache Thrift Developers |
| [CVE-2026-66837](https://www.cve.org/CVERecord?id=CVE-2026-66837) | 2026-10-02 | Apache Software Foundation | Apache Thrift | 8.7 |  |  | Claude (Anthropic Research) \| Arthur Chan, Ada Logics ([email protected]) |
| [CVE-2026-66081](https://www.cve.org/CVERecord?id=CVE-2026-66081) | 2026-10-02 | Apache Software Foundation | Apache Thrift | 8.7 |  |  | Akhil Koul \| Claude (Anthropic Research) \| Arthur Chan, Ada Logics ([email protected]) |
| [CVE-2026-63772](https://www.cve.org/CVERecord?id=CVE-2026-63772) | 2026-10-02 | Apache Software Foundation | Apache Thrift | 8.7 |  |  | Anthropic (agentic research) + Ada Logics; reported by Adam Korczynski |
| [CVE-2026-63578](https://www.cve.org/CVERecord?id=CVE-2026-63578) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 7.1 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-63577](https://www.cve.org/CVERecord?id=CVE-2026-63577) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.2 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-63576](https://www.cve.org/CVERecord?id=CVE-2026-63576) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.2 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-63574](https://www.cve.org/CVERecord?id=CVE-2026-63574) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.7 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-63573](https://www.cve.org/CVERecord?id=CVE-2026-63573) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.2 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-63571](https://www.cve.org/CVERecord?id=CVE-2026-63571) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.7 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-63570](https://www.cve.org/CVERecord?id=CVE-2026-63570) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 7.1 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-63569](https://www.cve.org/CVERecord?id=CVE-2026-63569) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 9.1 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-63568](https://www.cve.org/CVERecord?id=CVE-2026-63568) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.7 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-63567](https://www.cve.org/CVERecord?id=CVE-2026-63567) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.2 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-63566](https://www.cve.org/CVERecord?id=CVE-2026-63566) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.7 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-61373](https://www.cve.org/CVERecord?id=CVE-2026-61373) | 2026-10-02 | Apache Software Foundation | Apache Thrift | 8.7 |  |  | Claude (Anthropic Research) \| Arthur Chan, Ada Logics ([email protected]) \| n0mi1k |
| [CVE-2026-17508](https://www.cve.org/CVERecord?id=CVE-2026-17508) | 2026-10-02 | Legion of the Bouncy Castle Inc. | BC-JAVA | 5.3 |  |  | Mirko Swillus on behalf of Alpha-Omega (alpha-omega.dev), using Scrutineer with an Anthropic Claude model provided through Project Glasswing \| Yu Bao from the PayPal Cyber Security Team |
| [CVE-2026-17507](https://www.cve.org/CVERecord?id=CVE-2026-17507) | 2026-10-02 | Legion of the Bouncy Castle Inc. | BC-JAVA | 8.7 |  |  | Mirko Swillus on behalf of Alpha-Omega (alpha-omega.dev), using Scrutineer with an Anthropic Claude model provided through Project Glasswing |
| [CVE-2026-16001](https://www.cve.org/CVERecord?id=CVE-2026-16001) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.2 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-16000](https://www.cve.org/CVERecord?id=CVE-2026-16000) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.7 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-15999](https://www.cve.org/CVERecord?id=CVE-2026-15999) | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.2 |  |  | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. |
| [CVE-2026-93546](https://www.cve.org/CVERecord?id=CVE-2026-93546) | 2026-10-01 | Apache Software Foundation | Apache HTTP Server | 8.8 |  |  | Zhen Kong \| Calif.io in collaboration with Anthropic \| AISLE in partnership with Red Hat |
| [CVE-2026-101283](https://www.cve.org/CVERecord?id=CVE-2026-101283) | 2026-09-30 | esnet | iperf3 | 9.2 |  |  | Anthropic \| Ada Logics |
| [CVE-2026-101276](https://www.cve.org/CVERecord?id=CVE-2026-101276) | 2026-09-30 | esnet | iperf3 | 9.2 |  |  | Anthropic \| Ada Logics |
| [CVE-2026-96423](https://www.cve.org/CVERecord?id=CVE-2026-96423) | 2026-09-29 | Wireshark Foundation | Wireshark | 5.5 |  |  | Claude and Ada Logics |
| [CVE-2026-96421](https://www.cve.org/CVERecord?id=CVE-2026-96421) | 2026-09-29 | Wireshark Foundation | Wireshark | 5.5 |  |  | Claude and Ada Logics |
| [CVE-2026-96418](https://www.cve.org/CVERecord?id=CVE-2026-96418) | 2026-09-29 | Wireshark Foundation | Wireshark | 5.5 |  |  | Credit: Claude and Ada Logics |
| [CVE-2026-96416](https://www.cve.org/CVERecord?id=CVE-2026-96416) | 2026-09-29 | Wireshark Foundation | Wireshark | 5.5 |  |  | Claude and Ada Logics |
| [CVE-2026-92222](https://www.cve.org/CVERecord?id=CVE-2026-92222) | 2026-09-29 | Joomla! Project | Joomla! CMS | 8.9 |  |  | Aria Akhavan \| Calif.io in collaboration with Anthropic |
| [CVE-2026-90915](https://www.cve.org/CVERecord?id=CVE-2026-90915) | 2026-09-29 | Joomla! Project | Joomla! CMS | 7.0 |  |  | Aria Akhavan \| Calif.io in collaboration with Anthropic |
| [CVE-2026-94419](https://www.cve.org/CVERecord?id=CVE-2026-94419) | 2026-09-27 | wolfSSL | wolfSSL | 2.3 |  |  | Anthropic OSS program |
| [CVE-2026-94418](https://www.cve.org/CVERecord?id=CVE-2026-94418) | 2026-09-27 | wolfSSL | wolfSSL | 2.3 |  |  | Anthropic OSS program |
| [CVE-2026-94417](https://www.cve.org/CVERecord?id=CVE-2026-94417) | 2026-09-27 | wolfSSL | wolfSSL | 2.3 |  |  | Anthropic OSS program |
| [CVE-2026-93304](https://www.cve.org/CVERecord?id=CVE-2026-93304) | 2026-09-27 | wolfSSL | wolfSSL | 6.3 |  |  | Anthropic OSS program |
| [CVE-2026-93302](https://www.cve.org/CVERecord?id=CVE-2026-93302) | 2026-09-27 | wolfSSL | wolfSSL | 8.3 |  |  | Anthropic OSS program |
| [CVE-2026-98134](https://www.cve.org/CVERecord?id=CVE-2026-98134) | 2026-09-25 | Linux | Linux | 5.5 |  |  |  |
| [CVE-2026-98085](https://www.cve.org/CVERecord?id=CVE-2026-98085) | 2026-09-25 | Linux | Linux |  |  |  |  |
| [CVE-2026-98062](https://www.cve.org/CVERecord?id=CVE-2026-98062) | 2026-09-25 | Linux | Linux | 5.5 |  |  | Reported-by: Nicholas Carlini <[email protected]> \| Suggested-by: Nicholas Carlini <[email protected]> |
| [CVE-2026-98061](https://www.cve.org/CVERecord?id=CVE-2026-98061) | 2026-09-25 | Linux | Linux |  |  |  | Reported-by: Nicholas Carlini <[email protected]> \| Suggested-by: Nicholas Carlini <[email protected]> |
| [CVE-2026-98060](https://www.cve.org/CVERecord?id=CVE-2026-98060) | 2026-09-25 | Linux | Linux |  |  |  | Reported-by: Nicholas Carlini <[email protected]> \| Suggested-by: Nicholas Carlini <[email protected]> |
| [CVE-2026-98058](https://www.cve.org/CVERecord?id=CVE-2026-98058) | 2026-09-25 | Linux | Linux |  |  |  | Reported-by: Nicholas Carlini <[email protected]> \| Suggested-by: Nicholas Carlini <[email protected]> |
| [CVE-2026-98049](https://www.cve.org/CVERecord?id=CVE-2026-98049) | 2026-09-25 | Linux | Linux | 5.5 |  |  | Reported-by: Nicholas Carlini <[email protected]> \| Suggested-by: Nicholas Carlini <[email protected]> |
| [CVE-2026-98047](https://www.cve.org/CVERecord?id=CVE-2026-98047) | 2026-09-25 | Linux | Linux |  |  |  | Reported-by: Nicholas Carlini <[email protected]> \| Suggested-by: Nicholas Carlini <[email protected]> |
| [CVE-2026-98040](https://www.cve.org/CVERecord?id=CVE-2026-98040) | 2026-09-25 | Linux | Linux |  |  |  | Reported-by: Nicholas Carlini <[email protected]> \| Suggested-by: Nicholas Carlini <[email protected]> |
| [CVE-2026-98038](https://www.cve.org/CVERecord?id=CVE-2026-98038) | 2026-09-25 | Linux | Linux |  |  |  | Reported-by: Nicholas Carlini <[email protected]> \| Suggested-by: Nicholas Carlini <[email protected]> |
| [CVE-2026-98037](https://www.cve.org/CVERecord?id=CVE-2026-98037) | 2026-09-25 | Linux | Linux |  |  |  | Reported-by: Nicholas Carlini <[email protected]> \| Suggested-by: Nicholas Carlini <[email protected]> |
| [CVE-2026-98036](https://www.cve.org/CVERecord?id=CVE-2026-98036) | 2026-09-25 | Linux | Linux |  |  |  | Reported-by: Nicholas Carlini <[email protected]> \| Suggested-by: Nicholas Carlini <[email protected]> |
| [CVE-2026-98034](https://www.cve.org/CVERecord?id=CVE-2026-98034) | 2026-09-25 | Linux | Linux |  |  |  | Reported-by: Nicholas Carlini <[email protected]> \| Suggested-by: Nicholas Carlini <[email protected]> |
| [CVE-2026-98033](https://www.cve.org/CVERecord?id=CVE-2026-98033) | 2026-09-25 | Linux | Linux |  |  |  | Reported-by: Nicholas Carlini <[email protected]> \| Suggested-by: Nicholas Carlini <[email protected]> |
| [CVE-2026-97524](https://www.cve.org/CVERecord?id=CVE-2026-97524) | 2026-09-25 | Linux | Linux | 7.5 |  |  | Reported-by: Xinyang Ge <[email protected]> |
| [CVE-2026-97523](https://www.cve.org/CVERecord?id=CVE-2026-97523) | 2026-09-25 | Linux | Linux | 7.5 |  |  | Reported-by: Xinyang Ge <[email protected]> |
| [CVE-2026-96812](https://www.cve.org/CVERecord?id=CVE-2026-96812) | 2026-09-25 | Google | gVisor | 8.8 |  |  | Anthropic (using Claude) |
| [CVE-2026-89422](https://www.cve.org/CVERecord?id=CVE-2026-89422) | 2026-09-22 | Erlang | OTP | 9.3 |  |  | Milad Nasr / Anthropic \| Luna Tong / Anthropic \| Ingela Andin |
| [CVE-2026-63276](https://www.cve.org/CVERecord?id=CVE-2026-63276) | 2026-09-22 | The Document Foundation | LibreOffice | 5.4 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-YA6ADR86) |  | Claude, found by Anthropic using agents to study the security of open-source projects \| Ada Logics, validating and reporting \| Caolán McNamara of Collabora Productivity |
| [CVE-2026-63275](https://www.cve.org/CVERecord?id=CVE-2026-63275) | 2026-09-22 | The Document Foundation | LibreOffice | 5.4 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-RNHRV8B9) |  | Claude, found by Anthropic using agents to study the security of open-source projects \| Ada Logics, validating and reporting \| Caolán McNamara of Collabora Productivity |
| [CVE-2026-63274](https://www.cve.org/CVERecord?id=CVE-2026-63274) | 2026-09-22 | The Document Foundation | LibreOffice | 5.4 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-QT406EDT) |  | Claude, found by Anthropic using agents to study the security of open-source projects \| Ada Logics, validating and reporting \| Caolán McNamara of Collabora Productivity |
| [CVE-2026-63273](https://www.cve.org/CVERecord?id=CVE-2026-63273) | 2026-09-22 | The Document Foundation | LibreOffice | 5.4 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-J00S1S9Y) |  | Claude, found by Anthropic using agents to study the security of open-source projects \| Ada Logics, validating and reporting \| Caolán McNamara of Collabora Productivity |
| [CVE-2026-63272](https://www.cve.org/CVERecord?id=CVE-2026-63272) | 2026-09-22 | The Document Foundation | LibreOffice | 5.4 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-CRFDC4JM) |  | Claude, found by Anthropic using agents to study the security of open-source projects \| Ada Logics, validating and reporting \| Caolán McNamara of Collabora Productivity |
| [CVE-2026-93292](https://www.cve.org/CVERecord?id=CVE-2026-93292) | 2026-09-17 | SigNoz | signoz | 8.4 |  |  | 4NK1T \| axel-corsiez \| morimori-dev \| newugly \| thaidn (Calif.io, in collaboration with Anthropic) \| hackchang \| Scott Moore - VulnCheck |
| [CVE-2026-44236](https://www.cve.org/CVERecord?id=CVE-2026-44236) | 2026-09-17 | alanxz | rabbitmq-c | 7.1 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-D7FC4YDQ) |  | Anthropic |
| [CVE-2026-44235](https://www.cve.org/CVERecord?id=CVE-2026-44235) | 2026-09-17 | alanxz | rabbitmq-c | 6.5 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-GTGXBRXN) |  | Anthropic |
| [CVE-2026-92729](https://www.cve.org/CVERecord?id=CVE-2026-92729) | 2026-09-16 | SigNoz | signoz | 8.8 |  |  | 4NK1T \| lighthousekeeper1212 \| 0xVijay \| axel-corsiez \| morimori-dev \| PLpaPLpa \| newugly \| thaidn (Calif.io, in collaboration with Anthropic) \| hackchang \| Wenhao Wu (d3do-23), Southeast University |
| [CVE-2026-91104](https://www.cve.org/CVERecord?id=CVE-2026-91104) | 2026-09-16 | HP Inc. | HP Linux Imaging and Printing Software (HPLIP) | 9.3 |  |  | Calif.io in collaboration with Anthropic |
| [CVE-2026-82717](https://www.cve.org/CVERecord?id=CVE-2026-82717) | 2026-09-16 | NLnet Labs | Unbound | 8.4 |  |  | Ben Morris (Anthropic) |
| [CVE-2026-65410](https://www.cve.org/CVERecord?id=CVE-2026-65410) | 2026-09-14 | Apple | AVEVideoEncoder | 7.5 |  |  | Calif.io in collaboration with Claude and Anthropic Research |
| [CVE-2026-65409](https://www.cve.org/CVERecord?id=CVE-2026-65409) | 2026-09-14 | Apple | Foundation | 5.5 |  |  | Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research |
| [CVE-2026-65376](https://www.cve.org/CVERecord?id=CVE-2026-65376) | 2026-09-14 | Apple | SMB | 5.5 |  |  | 재영 정, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research |
| [CVE-2026-65375](https://www.cve.org/CVERecord?id=CVE-2026-65375) | 2026-09-14 | Apple | WebDAV | 7.5 |  |  | YingMuo (@YingMuo) of DEVCORE Research Team, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research |
| [CVE-2026-65374](https://www.cve.org/CVERecord?id=CVE-2026-65374) | 2026-09-14 | Apple | WebDAV | 8.8 |  |  | HE WEI（ギカク）, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research |
| [CVE-2026-43719](https://www.cve.org/CVERecord?id=CVE-2026-43719) | 2026-09-14 | Apple | SMB | 6.5 |  |  | Jakob Pammer, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research |
| [CVE-2026-43690](https://www.cve.org/CVERecord?id=CVE-2026-43690) | 2026-09-14 | Apple | SMB | 4.7 |  |  | Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research |
| [CVE-2026-43677](https://www.cve.org/CVERecord?id=CVE-2026-43677) | 2026-09-14 | Apple | WebDAV | 6.5 |  |  | bubu, Omar Cerrito, HE WEI（ギカク）, Roman Zabicki, Richard Zana, Chris Bailey - Short Circuit, Aswin Kumar Gokulakannan, Surya Narayan Kushwaha, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research |
| [CVE-2026-45752](https://www.cve.org/CVERecord?id=CVE-2026-45752) | 2026-09-10 | OISF | suricata | 5.9 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-61Y3NTY3) |  | Anthropic |
| [CVE-2026-45751](https://www.cve.org/CVERecord?id=CVE-2026-45751) | 2026-09-10 | OISF | suricata | 5.9 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-WCSVRYAX) |  | Anthropic |
| [CVE-2026-79678](https://www.cve.org/CVERecord?id=CVE-2026-79678) | 2026-09-07 | Red Hat | Red Hat Enterprise Linux 10 | 8.1 |  |  | Red Hat would like to thank Calif.io (in collaboration with Anthropic) for reporting this issue. |
| [CVE-2026-18453](https://www.cve.org/CVERecord?id=CVE-2026-18453) | 2026-09-07 | Red Hat | Red Hat Directory Server 11 | 7.5 |  |  | Red Hat would like to thank Arthur Chan (Ada Logics) and Team (Anthropic) for reporting this issue. |
| [CVE-2026-18355](https://www.cve.org/CVERecord?id=CVE-2026-18355) | 2026-09-07 | Red Hat | Red Hat Directory Server 11 | 7.5 |  |  | Red Hat would like to thank Adam Korczynski (Ada Logics), Arthur Chan (Ada Logics), David Korczynski (Ada Logics), and Team (Anthropic) for reporting this issue. |
| [CVE-2026-14957](https://www.cve.org/CVERecord?id=CVE-2026-14957) | 2026-09-02 | The Libreswan Project | libreswan | 7.5 |  |  | Claude (Anthropic) \| Guillaume Winter |
| [CVE-2026-80590](https://www.cve.org/CVERecord?id=CVE-2026-80590) | 2026-08-28 | Linux | Linux | 8.6 |  |  | Signed-off-by: Xinyang Ge <[email protected]> |
| [CVE-2026-76891](https://www.cve.org/CVERecord?id=CVE-2026-76891) | 2026-08-19 | Wireshark Foundation | Wireshark | 3.1 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-27KVBTTP) |  | Claude and Ada Logics |
| [CVE-2026-76890](https://www.cve.org/CVERecord?id=CVE-2026-76890) | 2026-08-19 | Wireshark Foundation | Wireshark | 3.1 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-GACTPNVK) |  | Claude and Ada Logics |
| [CVE-2026-76888](https://www.cve.org/CVERecord?id=CVE-2026-76888) | 2026-08-19 | Wireshark Foundation | Wireshark | 3.1 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-05VXN1Y6) |  | Claude and Ada Logics |
| [CVE-2026-63652](https://www.cve.org/CVERecord?id=CVE-2026-63652) | 2026-08-19 | FreeRDP | FreeRDP | 7.1 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-ZPF40VKS) |  | Anthropic |
| [CVE-2026-63633](https://www.cve.org/CVERecord?id=CVE-2026-63633) | 2026-08-19 | FreeRDP | FreeRDP | 7.7 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-EWM7B5QP) |  | Anthropic |
| [CVE-2026-13002](https://www.cve.org/CVERecord?id=CVE-2026-13002) | 2026-08-14 | Red Hat | Red Hat Enterprise Linux 10 | 4.4 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-QRYCJNAP) |  | Red Hat would like to thank Lennart Espe for reporting this issue. |
| [CVE-2026-58435](https://www.cve.org/CVERecord?id=CVE-2026-58435) | 2026-08-13 | Gitea | Gitea Open Source Git Server | 5.4 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-VN61PHA0) |  | adrian-doyensec |
| [CVE-2026-19694](https://www.cve.org/CVERecord?id=CVE-2026-19694) | 2026-08-13 | Wireshark Foundation | Wireshark | 4.7 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-EKGJXN5A) |  | Claude and Ada Logics |
| [CVE-2026-16239](https://www.cve.org/CVERecord?id=CVE-2026-16239) | 2026-08-13 | n/a | PostgreSQL | 8.8 |  |  | The PostgreSQL project thanks Ben Morris (Claude and Anthropic Research) for reporting this problem. |
| [CVE-2026-15742](https://www.cve.org/CVERecord?id=CVE-2026-15742) | 2026-08-13 | n/a | PostgreSQL | 8.8 |  |  | The PostgreSQL project thanks Ben Morris (Claude and Anthropic Research) for reporting this problem. |
| [CVE-2026-15741](https://www.cve.org/CVERecord?id=CVE-2026-15741) | 2026-08-13 | n/a | PostgreSQL | 8.8 |  |  | The PostgreSQL project thanks Ben Morris (Claude and Anthropic Research) for reporting this problem. |
| [CVE-2026-68760](https://www.cve.org/CVERecord?id=CVE-2026-68760) | 2026-08-12 | jfrog | artifactory | 5.3 |  |  | Ben Morris in collaboration with Claude and Anthropic Research |
| [CVE-2026-68757](https://www.cve.org/CVERecord?id=CVE-2026-68757) | 2026-08-12 | jfrog | artifactory | 7.5 |  |  | Ben Morris in collaboration with Claude and Anthropic Research |
| [CVE-2026-68756](https://www.cve.org/CVERecord?id=CVE-2026-68756) | 2026-08-12 | jfrog | artifactory | 6.6 |  |  | Ben Morris in collaboration with Claude and Anthropic Research |
| [CVE-2026-66376](https://www.cve.org/CVERecord?id=CVE-2026-66376) | 2026-08-12 | jfrog | artifactory | 4.2 |  |  | Ben Morris in collaboration with Claude and Anthropic Research |
| [CVE-2026-18663](https://www.cve.org/CVERecord?id=CVE-2026-18663) | 2026-08-12 | Red Hat | Red Hat Directory Server 11 | 5.9 |  |  | Red Hat would like to thank Adam Korczynski (Ada Logics), Arthur Chan (Ada Logics), David Korczynski (Ada Logics), and Team (Anthropic) for reporting this issue. |
| [CVE-2026-73242](https://www.cve.org/CVERecord?id=CVE-2026-73242) | 2026-08-11 | FreeRDP | FreeRDP | 8.3 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-S1E4Y69J) |  | Anthropic |
| [CVE-2026-73241](https://www.cve.org/CVERecord?id=CVE-2026-73241) | 2026-08-11 | FreeRDP | FreeRDP | 8.3 | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-TVG98XT0) |  | Anthropic |
| [CVE-2026-72746](https://www.cve.org/CVERecord?id=CVE-2026-72746) | Reserved |  |  |  | [🔗](https://red.anthropic.com/2026/cvd/findings/ANT-2026-TVG98XT0) |  | Anthropic |
| [CVE-2026-11836](https://www.cve.org/CVERecord?id=CVE-2026-11836) | 2026-08-04 | Caliptra | Core ROM | 1.8 |  |  | Alex Matrosov with Claude, Anthropic |
| [CVE-2026-11835](https://www.cve.org/CVERecord?id=CVE-2026-11835) | 2026-08-04 | Caliptra | Core ROM | 5.6 |  |  | Alex Matrosov with Claude, Anthropic |
| [CVE-2026-59652](https://www.cve.org/CVERecord?id=CVE-2026-59652) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 6.9 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-59651](https://www.cve.org/CVERecord?id=CVE-2026-59651) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 7.1 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-59650](https://www.cve.org/CVERecord?id=CVE-2026-59650) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 9.3 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-59649](https://www.cve.org/CVERecord?id=CVE-2026-59649) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 8.7 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-59648](https://www.cve.org/CVERecord?id=CVE-2026-59648) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 6.9 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-59647](https://www.cve.org/CVERecord?id=CVE-2026-59647) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 6.9 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-59646](https://www.cve.org/CVERecord?id=CVE-2026-59646) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 8.7 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-59645](https://www.cve.org/CVERecord?id=CVE-2026-59645) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 8.7 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-59644](https://www.cve.org/CVERecord?id=CVE-2026-59644) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 8.7 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-59643](https://www.cve.org/CVERecord?id=CVE-2026-59643) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 8.7 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-59642](https://www.cve.org/CVERecord?id=CVE-2026-59642) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 8.7 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-59641](https://www.cve.org/CVERecord?id=CVE-2026-59641) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 8.7 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-59640](https://www.cve.org/CVERecord?id=CVE-2026-59640) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 8.7 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-59639](https://www.cve.org/CVERecord?id=CVE-2026-59639) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 8.7 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-59638](https://www.cve.org/CVERecord?id=CVE-2026-59638) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 9.3 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-58063](https://www.cve.org/CVERecord?id=CVE-2026-58063) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 5.3 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-58062](https://www.cve.org/CVERecord?id=CVE-2026-58062) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 9.3 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-58061](https://www.cve.org/CVERecord?id=CVE-2026-58061) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 8.7 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-58060](https://www.cve.org/CVERecord?id=CVE-2026-58060) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 8.7 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |
| [CVE-2026-58059](https://www.cve.org/CVERecord?id=CVE-2026-58059) | 2026-08-03 | Legion of the Bouncy Castle Inc. | BC-JAVA | 8.7 |  |  | Alex Gaynor in collaboration with Claude and Anthropic Research |

---

[Read more](https://github.com/patrickmgarrity/anthropic-credited-cves)
Anthropic-Credited-CVEs

Most Popular
