CVE vulnerability reports rising sharply in 2026 as AI speeds discovery
Overview
Deedy (@deedydas) says the number of CVEs, the public list of computer security vulnerabilities, has more than tripled in the last six months.
He says about 1.5% were credited to AI and about 60% were uncredited, and that Anthropic was the leading lab reporter with roughly 300. These are his figures from a single X post, not an independently verified count.
A developer, @0x_Osprey, built the CVE Tracker web page, which charts CVE counts and shows a steep rise in reports since 2026, Gigazine reports. Gigazine says AI is speeding up security research by scanning code and drafting reports. It also notes that more reports do not necessarily mean systems are more dangerous, since low-quality or duplicate reports add triage pressure for open-source maintainers and security teams.
Written by AI from the articles below · updated Oct 28, 3:04 PM ET
Check the sources:
Developments
2 developments
- Oct 28, 2:57 AM ET · 1 articleCVE Tracker visualizes surge in vulnerability reports in 2026 with AI as amplifierIThome · AI: Developer's CVE Tracker shows 2026 vulnerability reports surging as AI speeds discovery
- Oct 24, 6:01 AM ET · 1 articleCVE count tripled in six months; Anthropic leads AI-credited reportsDeedy: CVE count more than triples in six months, mostly uncredited
Article timeline
The articles in this story. Times are ET.
- IThome · AINewsDeveloper's CVE Tracker shows 2026 vulnerability reports surging as AI speeds discovery
AIA developer, @0x_Osprey, built the CVE Tracker web page, which charts CVE vulnerability counts and shows a steep rise in reports since 2026, Gigazine reports. The tool also plots major AI model release dates, and Gigazine says AI is amplifying security research by scanning code and drafting reports faster. More reports do not necessarily mean systems are more dangerous, since low-quality or duplicate reports can add triage pressure for open-source maintainers and security teams.
Deedy@deedydasXCVE count more than triples in six months, mostly uncreditedAIThe number of CVEs, the canonical list of computer security vulnerabilities, has more than tripled in the last six months, according to Deedy. About 1.5% of those CVEs were credited to AI, while about 60% went uncredited, and Anthropic was the leading lab reporter with roughly 300.

Heat Trend
- Current comparable heat
- 7
- Peak comparable heat
- 8Oct 24, 2:00 PM ET
- Change in past 24 hours
- –
The trend compares only continuously observed participants, so its scope may be smaller than the current heat total. Hover or tap for hourly heat; use arrow keys with a keyboard.