ANTHROPIC CVE TRACKER

Overview

Tracking vulnerabilities that credit the Anthropic research team and are possibly discovered by Project Glasswing.

CURRENT CVE COUNT: 301

Fixed Anthropic Findings w/o CVE: 128

Findings Withdrawn by Anthropic: 243

Distributions

Anthropic Research

• Tracking CVEs Attributed to Anthropic Researchers and Project Glasswing
• Observations on Anthropic’s Vulnerability Disclosure Ledger
• Has Anthropic Glasswing Lived Up to the Hype it brought this year?
• The Anthropic Glasswing Receipts Are Starting to Trickle In

Add a Vulnerability

If you find an Anthropic credited vulnerability, please open a Pull Request or Send me a message on linkedin or in the Extended Vulnerability Community Discord.

Considerations

This project is maintained on a best effort basis.

The List

CVE	Date	Vendor	Product	CVSS	Ledger	vcKEV	Credit
CVE-2026-107570	2026-10-08	mutt	mutt	2.5			Calif.io, in collaboration with Anthropic
CVE-2026-103604	2026-10-02	Legion of the Bouncy Castle Inc.	bc-csharp	8.7			Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.
CVE-2026-103603	2026-10-02	Legion of the Bouncy Castle Inc.	bc-csharp	8.7			Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.
CVE-2026-103602	2026-10-02	Legion of the Bouncy Castle Inc.	bc-csharp	8.2			Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.
CVE-2026-103601	2026-10-02	Legion of the Bouncy Castle Inc.	bc-csharp	8.2			Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.
CVE-2026-66858	2026-10-02	Apache Software Foundation	Apache Thrift	8.7			Claude (Anthropic Research) | Arthur Chan, Ada Logics | Apache Thrift Developers
CVE-2026-66837	2026-10-02	Apache Software Foundation	Apache Thrift	8.7			Claude (Anthropic Research) | Arthur Chan, Ada Logics ([email protected])
CVE-2026-66081	2026-10-02	Apache Software Foundation	Apache Thrift	8.7			Akhil Koul | Claude (Anthropic Research) | Arthur Chan, Ada Logics ([email protected])
CVE-2026-63772	2026-10-02	Apache Software Foundation	Apache Thrift	8.7			Anthropic (agentic research) + Ada Logics; reported by Adam Korczynski
CVE-2026-63578	2026-10-02	Legion of the Bouncy Castle Inc.	bc-csharp	7.1			Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.
CVE-2026-63577	2026-10-02	Legion of the Bouncy Castle Inc.	bc-csharp	8.2			Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.
CVE-2026-63576	2026-10-02	Legion of the Bouncy Castle Inc.	bc-csharp	8.2			Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.
CVE-2026-63574	2026-10-02	Legion of the Bouncy Castle Inc.	bc-csharp	8.7			Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.
CVE-2026-63573	2026-10-02	Legion of the Bouncy Castle Inc.	bc-csharp	8.2			Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.
CVE-2026-63571	2026-10-02	Legion of the Bouncy Castle Inc.	bc-csharp	8.7			Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.
CVE-2026-63570	2026-10-02	Legion of the Bouncy Castle Inc.	bc-csharp	7.1			Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.
CVE-2026-63569	2026-10-02	Legion of the Bouncy Castle Inc.	bc-csharp	9.1			Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.
CVE-2026-63568	2026-10-02	Legion of the Bouncy Castle Inc.	bc-csharp	8.7			Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.
CVE-2026-63567	2026-10-02	Legion of the Bouncy Castle Inc.	bc-csharp	8.2			Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.
CVE-2026-63566	2026-10-02	Legion of the Bouncy Castle Inc.	bc-csharp	8.7			Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.
CVE-2026-61373	2026-10-02	Apache Software Foundation	Apache Thrift	8.7			Claude (Anthropic Research) | Arthur Chan, Ada Logics ([email protected]) | n0mi1k
CVE-2026-17508	2026-10-02	Legion of the Bouncy Castle Inc.	BC-JAVA	5.3			Mirko Swillus on behalf of Alpha-Omega (alpha-omega.dev), using Scrutineer with an Anthropic Claude model provided through Project Glasswing | Yu Bao from the PayPal Cyber Security Team