patrickmgarrity/anthropic-credited-cvesTracking Vulnerabilities That Appear to be Credited to the Anthropic Research Team
Tracking vulnerabilities that credit the Anthropic research team and are possibly discovered by Project Glasswing.
CURRENT CVE COUNT: 333
Fixed Anthropic Findings w/o CVE: 128
Findings Withdrawn by Anthropic: 243
|
|
If you find an Anthropic credited vulnerability, please open a Pull Request or Send me a message on linkedin or in the Extended Vulnerability Community Discord.
This project is maintained on a best effort basis.
| CVE | Date | Vendor | Product | CVSS | Ledger | vcKEV | Credit |
|---|---|---|---|---|---|---|---|
| CVE-2026-119378 | 2026-10-30 | SQLite | SQLite | 6.8 | Claude and Ada Logics | Abraxas Labs | Dan Kennedy | ||
| CVE-2026-112375 | 2026-10-28 | Apache Software Foundation | Apache Kafka | Arthur Chan [email protected], Ada Logics and Anthropic Research | OpenAI Codex Security - Amy Burnett and Khai Tran | Mickael Maison [email protected] | Manikumar Reddy [email protected] | Chia-Ping Tsai [email protected] | |||
| CVE-2026-77172 | 2026-10-27 | Nextcloud | Server | 5.3 | Nicholas Carlini (npc) | ||
| CVE-2026-115933 | 2026-10-24 | GitroomHQ | postiz-app | 9.9 | Anthropic, PBC | Enno Gelhaus | Nevo David | ||
| CVE-2026-115932 | 2026-10-24 | GitroomHQ | postiz-app | 9.6 | Anthropic, PBC | Enno Gelhaus | Nevo David | ||
| CVE-2026-115931 | 2026-10-23 | GitroomHQ | postiz-app | 9.9 | Anthropic, PBC | Enno Gelhaus | Nevo David | ||
| CVE-2026-97631 | 2026-10-22 | TianoCore | EDK2 | 9.5 | Alex Matrosov (Anthropic) | Dan Holmes-Mitra (Google) | ||
| CVE-2026-107928 | 2026-10-20 | curl | curl | Luna with Claude | Anthropic | Stefan Eissing | |||
| CVE-2026-98628 | 2026-10-18 | Linux | Linux | Reported-by: Nicholas Carlini [email protected] | Suggested-by: Nicholas Carlini [email protected] | |||
| CVE-2026-98627 | 2026-10-18 | Linux | Linux | Reported-by: Nicholas Carlini [email protected] | Suggested-by: Nicholas Carlini [email protected] | |||
| CVE-2026-98626 | 2026-10-18 | Linux | Linux | Reported-by: Nicholas Carlini [email protected] | Suggested-by: Nicholas Carlini [email protected] | |||
| CVE-2026-98613 | 2026-10-18 | Linux | Linux | Reported-by: Nicholas Carlini [email protected] | Suggested-by: Nicholas Carlini [email protected] | |||
| CVE-2026-98591 | 2026-10-18 | Linux | Linux | Reported-by: Nicholas Carlini [email protected] | |||
| CVE-2026-98589 | 2026-10-18 | Linux | Linux | Reported-by: Nicholas Carlini [email protected] | Suggested-by: Nicholas Carlini [email protected] | |||
| CVE-2026-109588 | 2026-10-16 | FreeRTOS | FreeRTOS-Kernel | 8.8 | Ada Logics Ltd | Anthropic | ||
| CVE-2026-109587 | 2026-10-16 | FreeRTOS | FreeRTOS-Kernel | 8.8 | Ada Logics Ltd | Anthropic | ||
| CVE-2026-18799 | 2026-10-16 | Mattermost | Mattermost | 4.3 | Claude and Ada Logics | ||
| CVE-2026-97629 | 2026-10-14 | F5 | NGINX Plus | 6.5 | F5 acknowledges PhiNode Labs, Gyejin Lee (QED Audit), Liviu-Alexandru Bud & Marc Luchian, Anthropic & Ada Logics, and Vivek Parikh of Zero-Day Research Labs for bringing this issue to our attention and following the highest standards of coordinated disclosure. | ||
| CVE-2026-92392 | 2026-10-14 | curl | curl | 8.1 | Luna with Claude | Anthropic | Stefan Eissing | ||
| CVE-2026-86856 | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 | Red Hat would like to thank Anthropic Research for reporting this issue. | ||
| CVE-2026-86847 | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 | Red Hat would like to thank Anthropic Research for reporting this issue. | ||
| CVE-2026-86846 | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 | Red Hat would like to thank Anthropic Research for reporting this issue. | ||
| CVE-2026-86845 | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 | Red Hat would like to thank Anthropic Research for reporting this issue. | ||
| CVE-2026-86566 | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 | Red Hat would like to thank Anthropic Research and Arthur Chan (Ada Logics) for reporting this issue. | ||
| CVE-2026-86563 | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 7.8 | Red Hat would like to thank Anthropic Research for reporting this issue. | ||
| CVE-2026-86562 | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 7.8 | Red Hat would like to thank Anthropic Research and Arthur Chan (Ada Logics) for reporting this issue. | ||
| CVE-2026-86561 | 2026-10-14 | Red Hat | Fast Datapath for RHEL 10 | 6.5 | Red Hat would like to thank Anthropic Research for reporting this issue. | ||
| CVE-2026-77207 | 2026-10-13 | The Libreswan Project | libreswan | 7.5 | Claude (Anthropic) | David Korczynski (ADA Logics Ltd) | ||
| CVE-2026-77206 | 2026-10-13 | The Libreswan Project | libreswan | 7.5 | Claude (Anthropic) | David Korczynski (ADA Logics Ltd) |
