patrickmgarrity/Anthropic-Credited-CVEs

Tracking Vulnerabilities That Appear to be Credited to the Anthropic Research Team - patrickmgarrity/Anthropic-Credited-CVEs

80 stars · 9 forks

README

ANTHROPIC CVE TRACKER Overview Tracking vulnerabilities that credit the Anthropic research team and are possibly discovered by Project Glasswing. CURRENT CVE COUNT: 300 Fixed Anthropic Findings w/o CVE: 128 Findings Withdrawn by Anthropic: 243 Distributions

Anthropic Research

Tracking CVEs Attributed to Anthropic Researchers and Project Glasswing Observations on Anthropic’s Vulnerability Disclosure Ledger Has Anthropic Glasswing Lived Up to the Hype it brought this year? The Anthropic Glasswing Receipts Are Starting to Trickle In

Add a Vulnerability If you find an Anthropic credited vulnerability, please open a Pull Request or Send me a message on linkedin or in the Extended Vulnerability Community Discord. Considerations This project is maintained on a best effort basis. The List

CVE Date Vendor Product CVSS Ledger vcKEV Credit

CVE-2026-103604 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 8.7

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-103603 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 8.7

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-103602 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 8.2

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-103601 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 8.2

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-66858 2026-10-02 Apache Software Foundation Apache Thrift 8.7

Claude (Anthropic Research) | Arthur Chan, Ada Logics | Apache Thrift Developers

CVE-2026-66837 2026-10-02 Apache Software Foundation Apache Thrift 8.7

Claude (Anthropic Research) | Arthur Chan, Ada Logics (arthur.chan@adalogics.com)

CVE-2026-66081 2026-10-02 Apache Software Foundation Apache Thrift 8.7

Akhil Koul | Claude (Anthropic Research) | Arthur Chan, Ada Logics (arthur.chan@adalogics.com)

CVE-2026-63772 2026-10-02 Apache Software Foundation Apache Thrift 8.7

Anthropic (agentic research) + Ada Logics; reported by Adam Korczynski

CVE-2026-63578 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 7.1

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-63577 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 8.2

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-63576 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 8.2

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-63574 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 8.7

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-63573 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 8.2

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-63571 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 8.7

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-63570 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 7.1

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-63569 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 9.1

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-63568 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 8.7

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-63567 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 8.2

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-63566 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 8.7

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-61373 2026-10-02 Apache Software Foundation Apache Thrift 8.7

Claude (Anthropic Research) | Arthur Chan, Ada Logics (arthur.chan@adalogics.com) | n0mi1k

CVE-2026-17508 2026-10-02 Legion of the Bouncy Castle Inc. BC-JAVA 5.3

Mirko Swillus on behalf of Alpha-Omega (alpha-omega.dev), using Scrutineer with an Anthropic Claude model provided through Project Glasswing | Yu Bao from the PayPal Cyber Security Team

CVE-2026-17507 2026-10-02 Legion of the Bouncy Castle Inc. BC-JAVA 8.7

Mirko Swillus on behalf of Alpha-Omega (alpha-omega.dev), using Scrutineer with an Anthropic Claude model provided through Project Glasswing

CVE-2026-16001 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 8.2

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-16000 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 8.7

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-15999 2026-10-02 Legion of the Bouncy Castle Inc. bc-csharp 8.2

Discovered by Claude, Anthropic's AI assistant, and triaged by the Anthropic security team in collaboration with Anthropic Research.

CVE-2026-93546 2026-10-01 Apache Software Foundation Apache HTTP Server 8.8

Zhen Kong | Calif.io in collaboration with Anthropic | AISLE in partnership with Red Hat

CVE-2026-101283 2026-09-30 esnet iperf3 9.2

Anthropic | Ada Logics

CVE-2026-101276 2026-09-30 esnet iperf3 9.2

Anthropic | Ada Logics

CVE-2026-96423 2026-09-29 Wireshark Foundation Wireshark 5.5

Claude and Ada Logics

CVE-2026-96421 2026-09-29 Wireshark Foundation Wireshark 5.5

Claude and Ada Logics

CVE-2026-96418 2026-09-29 Wireshark Foundation Wireshark 5.5

Credit: Claude and Ada Logics

CVE-2026-96416 2026-09-29 Wireshark Foundation Wireshark 5.5

Claude and Ada Logics

CVE-2026-92222 2026-09-29 Joomla! Project Joomla! CMS 8.9

Aria Akhavan | Calif.io in collaboration with Anthropic

CVE-2026-90915 2026-09-29 Joomla! Project Joomla! CMS 7.0

Aria Akhavan | Calif.io in collaboration with Anthropic

CVE-2026-94419 2026-09-27 wolfSSL wolfSSL 2.3

Anthropic OSS program

CVE-2026-94418 2026-09-27 wolfSSL wolfSSL 2.3

Anthropic OSS program

CVE-2026-94417 2026-09-27 wolfSSL wolfSSL 2.3

Anthropic OSS program

CVE-2026-93304 2026-09-27 wolfSSL wolfSSL 6.3

Anthropic OSS program

CVE-2026-93302 2026-09-27 wolfSSL wolfSSL 8.3

Anthropic OSS program

CVE-2026-98134 2026-09-25 Linux Linux

CVE-2026-98085 2026-09-25 Linux Linux

CVE-2026-98062 2026-09-25 Linux Linux 5.5

Reported-by: Nicholas Carlini npc@anthropic.com | Suggested-by: Nicholas Carlini npc@anthropic.com

CVE-2026-98061 2026-09-25 Linux Linux

Reported-by: Nicholas Carlini npc@anthropic.com | Suggested-by: Nicholas Carlini npc@anthropic.com

CVE-2026-98060 2026-09-25 Linux Linux

Reported-by: Nicholas Carlini npc@anthropic.com | Suggested-by: Nicholas Carlini npc@anthropic.com

CVE-2026-98058 2026-09-25 Linux Linux

Reported-by: Nicholas Carlini npc@anthropic.com | Suggested-by: Nicholas Carlini npc@anthropic.com

CVE-2026-98049 2026-09-25 Linux Linux

Reported-by: Nicholas Carlini npc@anthropic.com | Suggested-by: Nicholas Carlini npc@anthropic.com

CVE-2026-98047 2026-09-25 Linux Linux

Reported-by: Nicholas Carlini npc@anthropic.com | Suggested-by: Nicholas Carlini npc@anthropic.com

CVE-2026-98040 2026-09-25 Linux Linux

Reported-by: Nicholas Carlini npc@anthropic.com | Suggested-by: Nicholas Carlini npc@anthropic.com

CVE-2026-98038 2026-09-25 Linux Linux

Reported-by: Nicholas Carlini npc@anthropic.com | Suggested-by: Nicholas Carlini npc@anthropic.com

CVE-2026-98037 2026-09-25 Linux Linux

Reported-by: Nicholas Carlini npc@anthropic.com | Suggested-by: Nicholas Carlini npc@anthropic.com

CVE-2026-98036 2026-09-25 Linux Linux

Reported-by: Nicholas Carlini npc@anthropic.com | Suggested-by: Nicholas Carlini npc@anthropic.com

CVE-2026-98034 2026-09-25 Linux Linux

Reported-by: Nicholas Carlini npc@anthropic.com | Suggested-by: Nicholas Carlini npc@anthropic.com

CVE-2026-98033 2026-09-25 Linux Linux

Reported-by: Nicholas Carlini npc@anthropic.com | Suggested-by: Nicholas Carlini npc@anthropic.com

CVE-2026-97524 2026-09-25 Linux Linux 7.5

Reported-by: Xinyang Ge xinyang@anthropic.com

CVE-2026-97523 2026-09-25 Linux Linux 7.5

Reported-by: Xinyang Ge xinyang@anthropic.com

CVE-2026-96812 2026-09-25 Google gVisor 8.8

Anthropic (using Claude)

CVE-2026-89422 2026-09-22 Erlang OTP 9.3

Milad Nasr / Anthropic | Luna Tong / Anthropic | Ingela Andin

CVE-2026-63276 2026-09-22 The Document Foundation LibreOffice 5.4 🔗

Claude, found by Anthropic using agents to study the security of open-source projects | Ada Logics, validating and reporting | Caolán McNamara of Collabora Productivity

CVE-2026-63275 2026-09-22 The Document Foundation LibreOffice 5.4 🔗

Claude, found by Anthropic using agents to study the security of open-source projects | Ada Logics, validating and reporting | Caolán McNamara of Collabora Productivity

CVE-2026-63274 2026-09-22 The Document Foundation LibreOffice 5.4 🔗

Claude, found by Anthropic using agents to study the security of open-source projects | Ada Logics, validating and reporting | Caolán McNamara of Collabora Productivity

CVE-2026-63273 2026-09-22 The Document Foundation LibreOffice 5.4 🔗

Claude, found by Anthropic using agents to study the security of open-source projects | Ada Logics, validating and reporting | Caolán McNamara of Collabora Productivity

CVE-2026-63272 2026-09-22 The Document Foundation LibreOffice 5.4 🔗

Claude, found by Anthropic using agents to study the security of open-source projects | Ada Logics, validating and reporting | Caolán McNamara of Collabora Productivity

CVE-2026-93292 2026-09-17 SigNoz signoz 8.4

CVE-2026-44236 2026-09-17 alanxz rabbitmq-c 7.1 🔗

Anthropic

CVE-2026-44235 2026-09-17 alanxz rabbitmq-c 6.5 🔗

Anthropic

CVE-2026-92729 2026-09-16 SigNoz signoz 8.8

CVE-2026-91104 2026-09-16 HP Inc. HP Linux Imaging and Printing Software (HPLIP) 9.3

Calif.io in collaboration with Anthropic

CVE-2026-82717 2026-09-16 NLnet Labs Unbound 8.4

Ben Morris (Anthropic)

CVE-2026-65410 2026-09-14 Apple AVEVideoEncoder 7.5

Calif.io in collaboration with Claude and Anthropic Research

CVE-2026-65409 2026-09-14 Apple Foundation 5.5

Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research

CVE-2026-65376 2026-09-14 Apple SMB 5.5

재영 정, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research

CVE-2026-65375 2026-09-14 Apple WebDAV 7.5

YingMuo (@YingMuo) of DEVCORE Research Team, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research

CVE-2026-65374 2026-09-14 Apple WebDAV 8.8

HE WEI（ギカク）, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research

CVE-2026-43719 2026-09-14 Apple SMB 6.5

Jakob Pammer, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research

CVE-2026-43690 2026-09-14 Apple SMB 4.7

Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research

CVE-2026-43677 2026-09-14 Apple WebDAV 6.5

bubu, Omar Cerrito, HE WEI（ギカク）, Roman Zabicki, Richard Zana, Chris Bailey - Short Circuit, Aswin Kumar Gokulakannan, Surya Narayan Kushwaha, Bruce Dang of Calif.io in collaboration with Claude and Anthropic Research

CVE-2026-45752 2026-09-10 OISF suricata 5.9 🔗

Anthropic

CVE-2026-45751 2026-09-10 OISF suricata 5.9 🔗

Anthropic

CVE-2026-79678 2026-09-07 Red Hat Red Hat Enterprise Linux 10 8.1

Red Hat would like to thank Calif.io (in collaboration with Anthropic) for reporting this issue.

CVE-2026-18453 2026-09-07 Red Hat Red Hat Directory Server 11 7.5

Red Hat would like to thank Arthur Chan (Ada Logics) and Team (Anthropic) for reporting this issue.

CVE-2026-18355 2026-09-07 Red Hat Red Hat Directory Server 11 7.5

Red Hat would like to thank Adam Korczynski (Ada Logics), Arthur Chan (Ada Logics), David Korczynski (Ada Logics), and Team (Anthropic) for reporting this issue.

CVE-2026-14957 2026-09-02 The Libreswan Project libreswan 7.5

Claude (Anthropic) | Guillaume Winter

CVE-2026-80590 2026-08-28 Linux Linux 8.6

Signed-off-by: Xinyang Ge xinyang@anthropic.com

CVE-2026-76891 2026-08-19 Wireshark Foundation Wireshark 3.1 🔗

Claude and Ada Logics

CVE-2026-76890 2026-08-19 Wireshark Foundation Wireshark 3.1 🔗

Claude and Ada Logics

CVE-2026-76888 2026-08-19 Wireshark Foundation Wireshark 3.1 🔗

Claude and Ada Logics

CVE-2026-63652 2026-08-19 FreeRDP FreeRDP 7.1 🔗

Anthropic

CVE-2026-63633 2026-08-19 FreeRDP FreeRDP 7.7 🔗

Anthropic

CVE-2026-13002 2026-08-14 Red Hat Red Hat Enterprise Linux 10 4.4 🔗

Red Hat would like to thank Lennart Espe for reporting this issue.

CVE-2026-58435 2026-08-13 Gitea Gitea Open Source Git Server 5.4 🔗

adrian-doyensec

CVE-2026-19694 2026-08-13 Wireshark Foundation Wireshark 4.7 🔗

Claude and Ada Logics

CVE-2026-16239 2026-08-13 n/a PostgreSQL 8.8

The PostgreSQL project thanks Ben Morris (Claude and Anthropic Research) for reporting this problem.

CVE-2026-15742 2026-08-13 n/a PostgreSQL 8.8

The PostgreSQL project thanks Ben Morris (Claude and Anthropic Research) for reporting this problem.

CVE-2026-15741 2026-08-13 n/a PostgreSQL 8.8

The PostgreSQL project thanks Ben Morris (Claude and Anthropic Research) for reporting this problem.

CVE-2026-68760 2026-08-12 jfrog artifactory 5.3

Ben Morris in collaboration with Claude and Anthropic Research

CVE-2026-68757 2026-08-12 jfrog artifactory 7.5

Ben Morris in collaboration with Claude and Anthropic Research

CVE-2026-68756 2026-08-12 jfrog artifactory 6.6

Ben Morris in collaboration with Claude and Anthropic Research

CVE-2026-66376 2026-08-12 jfrog artifactory 4.2

Ben Morris in collaboration with Claude and Anthropic Research

CVE-2026-18663 2026-08-12 Red Hat Red Hat Directory Server 11 5.9

Red Hat would like to thank Adam Korczynski (Ada Logics), Arthur Chan (Ada Logics), David Korczynski (Ada Logics), and Team (Anthropic) for reporting this issue.

CVE-2026-73242 2026-08-11 FreeRDP FreeRDP 8.3 🔗

Anthropic

CVE-2026-73241 2026-08-11 FreeRDP FreeRDP 8.3 🔗

Anthropic

CVE-2026-72746 Reserved

🔗

Anthropic

CVE-2026-11836 2026-08-04 Caliptra Core ROM 1.8

Alex Matrosov with Claude, Anthropic

CVE-2026-11835 2026-08-04 Caliptra Core ROM 5.6

Alex Matrosov with Claude, Anthropic

CVE-2026-59652 2026-08-03 Legion of the Bouncy Castle Inc. BC-JAVA 6.9