Skip to content
Trending storyDeveloping

CVE vulnerability reports rising sharply in 2026 as AI speeds discovery

2 articles2 sourcessince Oct 24Last article 13h ago ·

Overview

AISummary of 2 articles

Deedy (@deedydas) says the number of CVEs, the public list of computer security vulnerabilities, has more than tripled in the last six months.

He says about 1.5% were credited to AI and about 60% were uncredited, and that Anthropic was the leading lab reporter with roughly 300. These are his figures from a single X post, not an independently verified count.

A developer, @0x_Osprey, built the CVE Tracker web page, which charts CVE counts and shows a steep rise in reports since 2026, Gigazine reports. Gigazine says AI is speeding up security research by scanning code and drafting reports. It also notes that more reports do not necessarily mean systems are more dangerous, since low-quality or duplicate reports add triage pressure for open-source maintainers and security teams.

Written by AI from the articles below · updated Oct 28, 3:04 PM ET

Check the sources:

Developments

2 developments

  1. Oct 28, 2:57 AM ET · 1 article
    CVE Tracker visualizes surge in vulnerability reports in 2026 with AI as amplifier
    IThome · AI: Developer's CVE Tracker shows 2026 vulnerability reports surging as AI speeds discovery
  2. Oct 24, 6:01 AM ET · 1 article
    CVE count tripled in six months; Anthropic leads AI-credited reports
    Deedy: CVE count more than triples in six months, mostly uncredited

Article timeline

The articles in this story. Times are ET.

Oct 28
  1. IThome · AINews
    Developer's CVE Tracker shows 2026 vulnerability reports surging as AI speeds discovery

    AIA developer, @0x_Osprey, built the CVE Tracker web page, which charts CVE vulnerability counts and shows a steep rise in reports since 2026, Gigazine reports. The tool also plots major AI model release dates, and Gigazine says AI is amplifying security research by scanning code and drafting reports faster. More reports do not necessarily mean systems are more dangerous, since low-quality or duplicate reports can add triage pressure for open-source maintainers and security teams.

Oct 24
  1. DeedyX
    CVE count more than triples in six months, mostly uncredited

    AIThe number of CVEs, the canonical list of computer security vulnerabilities, has more than tripled in the last six months, according to Deedy. About 1.5% of those CVEs were credited to AI, while about 60% went uncredited, and Anthropic was the leading lab reporter with roughly 300.

    Image from @deedydas's post

Heat Trend

Current comparable heat
7
Peak comparable heat
8Oct 24, 2:00 PM ET
Change in past 24 hours
–

The trend compares only continuously observed participants, so its scope may be smaller than the current heat total. Hover or tap for hourly heat; use arrow keys with a keyboard.