Agentic AI & MCP Vulnerability Dashboard
Report v4.16 · Last refreshed:
September 15, 2026
· Weekly refresh (Sep 8 → Sep 15) ·
+45 §8 rows
(roster 503 → 548; AI-discovered 38 → 42). Lead:
Trail of Bits × GPT-5.6-Cyber 'Januscape'
QEMU/KVM guest→host escape; Cisco 21-CVE frontier-AI cluster; GPT-6 Astra 'Critical' tier; AISLE 6 curl CVEs + CNA; GitSpawn; MCP default-open wave; Langflow CVE-2026-0768 ITW; HF / AISI / wiki eval-escape incidents. Source:
Agentic-AI-MCP-Security-Research-Report.md
Built by
Zubair Ashraf
Latest run (Sep 8 – 15 — v4.16)
Cumulative (all findings)
Themes & Watchlist
People & Orgs
New Critical
—
CVSS 9.0+
New High
—
CVSS 7.0–8.9
New Medium
—
CVSS 4.0–6.9
New Low/Info
—
CVSS <4.0
New Tools
—
Defense + scanners
Researcher Posts
—
Tracked sources
Headline findings — May 8 PM → May 12, 2026
New vulnerabilities this cycle
Severity
ID / Title
Component
Class
Date
Notes
New tools released this cycle
Tool
Maintainer
Date
What it does
Researcher / org activity this cycle
Source
Date
Title
All Critical
—
All High
—
All Medium
—
All Low/Info
—
Total tracked
—
Tracked tools
—
Severity distribution
Findings by month
AI-Discovery Roster — CVE counts per AI system
Tally of catalog entries credited to each AI system. Click a chip below to filter the table. Source: Section 8.99 of the report.
All vulnerabilities tracked
Sev
ID / Title
Component
Class
Discoverer
AI Discovery
Refs
Date
Cross-cutting themes (active)
Watchlist — uncorroborated this cycle
Organic research gaps (cumulative)
Tracked researchers & organizations