Vulnerabilities found by AI
CVE records whose credits name an AI research team or model as the finder: Anthropic (Claude), AISLE, ZAST.AI, OpenAI, Google Big Sleep, XBOW.
- Records found by AI1,082Credits name an AI finder, records published up to 29 Oct 2026
- Last 90 days64559.6% of all records found by AI
- Critical81CVSS 9.0 or higher, 7.5% of them
- In CISA KEV55 records with evidence of exploitation
Source: CVE List, as of ; CISA KEV 2026.10.29, as of . About the data.
Records found by AI per month
Show data as a table
| Month | records |
|---|---|
| January 2025 | 0 |
| February 2025 | 0 |
| March 2025 | 1 |
| April 2025 | 0 |
| May 2025 | 1 |
| June 2025 | 0 |
| July 2025 | 43 |
| August 2025 | 39 |
| September 2025 | 20 |
| October 2025 | 16 |
| November 2025 | 8 |
| December 2025 | 20 |
| January 2026 | 28 |
| February 2026 | 32 |
| March 2026 | 44 |
| April 2026 | 31 |
| May 2026 | 31 |
| June 2026 | 48 |
| July 2026 | 84 |
| August 2026 | 154 |
| September 2026 | 204 |
| October 2026 | 278 |
The dashed bar is October 2026, counted to 29 Oct 2026.
Source: CVE List, as of . About the data.
By finder
- Anthropic (Claude)425 · 325
- AISLE305 · 180
- ZAST.AI171 · 21
- OpenAI161 · 121
- Google Big Sleep18 · 1
- XBOW8 · 2
- Records
- Of which published in the last 90 days
Source: CVE List, as of . About the data.
Found by AI and exploited
Records found by AI that CISA has added to its Known Exploited Vulnerabilities catalog.
- CVE-2026-111497 Google Brotli Unchecked Return Value Vulnerability
- CVE-2026-109618 PHP Memory Corruption Vulnerability
- CVE-2026-109619 PHP Stale Internal Request-State Vulnerability
- CVE-2026-42016 JFrog Artifactory Incorrect Authorization Vulnerability
- CVE-2026-66384 JFrog Artifactory Improper Limitation of a Pathname to a Restricted Directory Vulnerability
Source: CISA KEV 2026.10.29, as of ; CVE List, as of . About the data.
Newest records found by AI
- CVE-2026-112375 Apache Kafka: Unauthorized principal can read arbitrary broker files via IncrementalAlterConfigs
- CVE-2026-118017 Use-after-free in the SVG component
- CVE-2026-118016 Use-after-free in the DOM: Core & HTML component
- CVE-2026-118015 Use-after-free in the DOM: Core & HTML component
- CVE-2026-118014 Use-after-free in the JavaScript Engine: JIT component
- CVE-2026-118013 Use-after-free in the Layout: Images, Video, and HTML Frames component
- CVE-2026-118012 Use-after-free in the DOM: Animation component
- CVE-2026-118011 Frame poisoning in the CSS Parsing and Computation component
- CVE-2026-118008 Privilege escalation in the DOM: Navigation component
- CVE-2026-117954 Use-after-free in the Layout: Positioned component
Show 90 more
- CVE-2026-117953 Use-after-free in the DOM: Core & HTML component
- CVE-2026-117952 Uninitialized memory in the Networking component
- CVE-2026-117951 Use-after-free in the DOM: Core & HTML component
- CVE-2026-117950 Incorrect boundary conditions in the DOM: Core & HTML component
- CVE-2026-117949 Use-after-free in the DOM: Core & HTML component
- CVE-2026-117948 Use-after-free in the SVG component
- CVE-2026-117947 Use-after-free in the XML component
- CVE-2026-117946 Incorrect boundary conditions in the JavaScript Engine component
- CVE-2026-117945 Incorrect boundary conditions in the XML component
- CVE-2026-117944 Use-after-free in the Layout component
- CVE-2026-117943 Use-after-free in the DOM: Core & HTML component
- CVE-2026-117942 Incorrect boundary conditions in the JavaScript Engine: JIT component
- CVE-2026-117941 Use-after-free in the DOM: CSS Object Model component
- CVE-2026-117940 Use-after-free in the DOM: Core & HTML component
- CVE-2026-117939 Use-after-free in the XML component
- CVE-2026-117938 Use-after-free in the Layout component
- CVE-2026-117937 Invalid pointer in the JavaScript Engine component
- CVE-2026-117936 Use-after-free in the DOM: Core & HTML component
- CVE-2026-117935 Use-after-free in the DOM: Bindings (WebIDL) component
- CVE-2026-117934 Use-after-free in the Layout component
- CVE-2026-117933 Frame poisoning in the CSS Parsing and Computation component
- CVE-2026-117932 Use-after-free in the DOM: Core & HTML component
- CVE-2026-117931 Use-after-free in the DOM: Events component
- CVE-2026-117930 Use-after-free in the DOM: Bindings (WebIDL) component
- CVE-2026-117922 Use-after-free in the Networking: WebSockets component
- CVE-2026-117921 Use-after-free in the CSS Parsing and Computation component
- CVE-2026-117883 Use-after-free in the DOM: HTML Parser component
- CVE-2026-117882 Use-after-free in the Layout component
- CVE-2026-117881 Use-after-free in the DOM: Core & HTML component
- CVE-2026-117879 Incorrect boundary conditions in the Layout: Tables component
- CVE-2026-117878 Other issue, use-after-free in the Storage: IndexedDB component
- CVE-2026-117876 Use-after-free in the Layout: Text and Fonts component
- CVE-2026-116469 MISP Guard Case-Sensitive Policy Bypass Allows Unauthorized Feed Data Forwarding
- CVE-2026-116372 MISP mispguard: Feed responses with 2xx status codes other than 200 bypass filtering rules
- CVE-2026-116123 NocoDB signup validatePassword excessive authentication
- CVE-2026-116122 NocoDB Sign-in Endpoint AuthService.validateUser information disclosure
- CVE-2026-116121 NocoDB Registration users.service.ts race condition
- CVE-2026-116120 NocoDB PublicApiLimiterGuard signup UserRefreshToken.deleteAllUserToken allocation of resources
- CVE-2026-116119 NocoDB Password-Reset Flow users.service.ts race condition
- CVE-2026-115933 Forged signed tokens let any registered user take over other users and organizations
- CVE-2026-115932 Path traversal in post media lets any registered user read server files
- CVE-2026-115931 Arbitrary file read and backend crash through unrestricted provider method calls
- CVE-2026-97631 Pre-boot RCE in EDK II PXE driver
- CVE-2026-111497 Out-of-Bounds Write in Google Brotli Decoder
- CVE-2026-105926 Apache Pulsar: Missing Topic Authorization on Binary Protocol GetSchema and GetOrCreateSchema Commands
- CVE-2026-109619 RCE via stale global state
- CVE-2026-109618 RCE via OOM corruption
- CVE-2026-94300 Concurrent GSS-TSIG messages corrupt memory
- CVE-2026-87849 Apache bRPC: Out-of-bounds read via non-object fields in Discovery naming-service reply parsing
- CVE-2026-86146 Apache bRPC: HTTP Request Smuggling and Header Injection via Lenient HTTP/1.1 Header Parsing
- CVE-2026-84748 Apache bRPC: Builtin services reachable from the public port via protobuf protocols despite ServerOptions.internal_port configuration
- CVE-2026-84747 Apache bRPC: Access Control Bypass via HTTP Request Paths Containing Empty Path Segments
- CVE-2026-82953 Apache bRPC: NULL Pointer Dereference in RTMP createStream Error Path Leading to Remote Denial of Service
- CVE-2026-82210 Apache bRPC: Remote denial of service (crash) via malformed stream feedback frames
- CVE-2026-81755 Apache bRPC: Uncontrolled Resource Consumption via Excessive Streams in a Single RPC Request
- CVE-2026-80463 Apache bRPC: Unbounded Memory Accumulation in Stream Message Reassembly
- CVE-2026-79704 Apache bRPC: Out-of-bounds Read in Multi-stream RPC Response Handling
- CVE-2026-78334 Apache bRPC: Missing Authentication for Streaming RPC Frames
- CVE-2026-78066 Apache bRPC: Resource Exhaustion via Unbounded Decompression and Unvalidated Wire-Declared Sizes
- CVE-2026-78058 Apache bRPC: Unbounded Resource Consumption and Crash in the HTTP/2 Receive Path
- CVE-2026-92824 Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts
- CVE-2026-92822 Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml
- CVE-2026-92823 Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml
- CVE-2026-114038 Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed format string
- CVE-2026-107928 info leak uploading over WebSockets with GnuTLS
- CVE-2026-94266 password leak in CURLINFO_EFFECTIVE_URL
- CVE-2026-94265 Authorization: Negotiate sent to foreign origin
- CVE-2026-92391 curl_mime_free stack overflow by recursion
- CVE-2026-92390 -J no-clobber guarantee bypassed with 103 early hints
- CVE-2026-92389 TFTP direction confusion
- CVE-2026-92388 FTP wildcard write callback mixup
- CVE-2026-92387 never-ending loop via server response omission
- CVE-2026-92386 server-set cookie aborts cookie jar load
- CVE-2026-87863 HSTS response erases persisted entries
- CVE-2026-87864 IMAP APPEND plus CRLF conversion command injection
- CVE-2026-87862 HSTS cache import drops longer-lived child
- CVE-2026-86415 auto client cert connection reuse mixup
- CVE-2026-86414 leaking host credentials to HTTP proxy
- CVE-2026-86413 Negotiate credentials sent to redirected origin
- CVE-2026-86412 server-set cookie erases cookie jar
- CVE-2026-86411 FTP connection reuse inherits client-certificate
- CVE-2026-86410 redirect to SFTP or SCP bypasses host verification
- CVE-2026-86409 stale SigV4 headers sent unintended
- CVE-2026-113466 MinIO Embedded Console common-main.go SessionTokenAuthenticate hard-coded key
- CVE-2026-112991 MISP html_to_markdown Module SSRF via Incomplete IP Range Blocking in is_safe_url()
- CVE-2026-85317 Apache Camel: Camel-HTTP OAuth2 Token Confusion via an Under-Keyed JVM-Global Token Cache
- CVE-2026-85316 Apache Camel: Camel-Platform-HTTP Unintended Proxy Mode via Prefix Path Matching
- CVE-2026-85315 Apache Camel: Camel-gRPC Information Disclosure via Unmuted Consumer Exceptions
- CVE-2026-85314 Apache Camel: Camel-Mail Header Injection via Unfiltered mail.smtp Headers in the MimeMultipart Data Format (Incomplete Fix of CVE-2026-46584)
- CVE-2026-85313 Apache Camel: Camel-Jetty Cross-Origin Credential Exposure via Allow-All CrossOriginFilter Defaults When enableCORS Is Set
Source: CVE List, as of ; CISA KEV 2026.10.29, as of . About the data.
See also what is trending, the watchlist and every exploited vulnerability.