
Tracking Vulnerabilities That Appear to be Credited to the Anthropic Research Team
Tracking vulnerabilities that credit the Anthropic research team and are possibly discovered by Project Glasswing.
CURRENT CVE COUNT: 301
Fixed Anthropic Findings w/o CVE: 128
Findings Withdrawn by Anthropic: 243
|
|
|
If you find an Anthropic credited vulnerability, please open a Pull Request or Send me a message on linkedin or in the Extended Vulnerability Community Discord.
This project is maintained on a best effort basis.
| CVE | Date | Vendor | Product | CVSS | Ledger | vcKEV | Credit |
|---|---|---|---|---|---|---|---|
| CVE-2026-107570 | 2026-10-08 | mutt | mutt | 2.5 | Calif.io, in collaboration with Anthropic | ||
| CVE-2026-103604 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.7 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-103603 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.7 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-103602 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.2 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-103601 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.2 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-66858 | 2026-10-02 | Apache Software Foundation | Apache Thrift | 8.7 | Claude (Anthropic Research) | Arthur Chan, Ada Logics | Apache Thrift Developers | ||
| CVE-2026-66837 | 2026-10-02 | Apache Software Foundation | Apache Thrift | 8.7 | Claude (Anthropic Research) | Arthur Chan, Ada Logics ([email protected]) | ||
| CVE-2026-66081 | 2026-10-02 | Apache Software Foundation | Apache Thrift | 8.7 | Akhil Koul | Claude (Anthropic Research) | Arthur Chan, Ada Logics ([email protected]) | ||
| CVE-2026-63772 | 2026-10-02 | Apache Software Foundation | Apache Thrift | 8.7 | Anthropic (agentic research) + Ada Logics; reported by Adam Korczynski | ||
| CVE-2026-63578 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 7.1 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-63577 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.2 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-63576 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.2 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-63574 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.7 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-63573 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.2 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-63571 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.7 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-63570 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 7.1 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-63569 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 9.1 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-63568 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.7 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-63567 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.2 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-63566 | 2026-10-02 | Legion of the Bouncy Castle Inc. | bc-csharp | 8.7 | Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research. | ||
| CVE-2026-61373 | 2026-10-02 | Apache Software Foundation | Apache Thrift | 8.7 | Claude (Anthropic Research) | Arthur Chan, Ada Logics ([email protected]) | n0mi1k | ||
| CVE-2026-17508 | 2026-10-02 | Legion of the Bouncy Castle Inc. | BC-JAVA | 5.3 | Mirko Swillus on behalf of Alpha-Omega (alpha-omega.dev), using Scrutineer with an Anthropic Claude model provided through Project Glasswing | Yu Bao from the PayPal Cyber Security Team |