Submit finding

All findings

CVE-2026-5135 + 9 more high

AISLE's July disclosure stream spans ten CVEs in seven projects

AISLE's public registry links ten newly disclosed CVEs to its AI-native engine across Foreman, Gitea, Joomla, Wireshark, dhcpcd, n8n, and alsa-lib.

Bug class
Authorization, injection, XSS, parser, denial-of-service, and memory-safety flaws
Affected codebase
Foreman, Gitea, Joomla, Wireshark, dhcpcd, n8n, and alsa-lib
Credited system
AISLE
Disclosed
July 8, 2026
Attribution
Self-reported attribution
Severity
high
Source status: AISLE's discovery registry supplies per-CVE AI-platform attribution. Project releases and advisories corroborate the accepted vulnerabilities and fixes. Severity is normalized from upstream records rather than AISLE's own score field.

Summary

After the previous Bugflation cutoff, AISLE’s public stream added ten identifiable CVEs outside the separately indexed curl and Squid campaigns. The affected projects cover developer infrastructure, CMS software, packet analysis, network configuration, workflow automation, and audio libraries.

Attribution boundary

The issues and fixes are independently visible upstream. The claim that AISLE’s AI-native engine discovered each one comes from AISLE’s own registry, so the cluster is labeled self-reported. It should be split later if upstream projects publish direct AISLE-system credit or materially different severity details.

References

Catalogued in the Bugflation public ledger. Disagree with the attribution or severity label? Email the desk.