Submit finding

All systems

AISLE Platform

AISLE

An autonomous security analyzer with a large public registry and validated credits across OpenSSL, FreeBSD, curl, Apache, Chrome, Squid, and other projects.

20
Indexed entries
186
CVE IDs tracked
11
Critical/high entries
94%
Evidence index

AISLE CVE discovery registry: 392 unique CVE IDs exposed. Checked September 16, 2026. AISLE reports 397 assigned CVEs while the live page data exposes 392 unique CVE IDs; Bugflation indexes only individually reconciled subsets. Open tracker.

What it is

AISLE is an autonomous security analysis platform. Its most prominent public record remains OpenSSL: AISLE says it found 20 OpenSSL CVEs across three coordinated releases from September 2025 through April 2026.

Its public record now also includes FreeBSD core advisories, curl 8.21.0, Apache HTTP Server 2.4.68, Chrome, Squid, Elastic Beats, and multi-project July and August 2026 waves spanning web applications, media parsers, network services, developer tools, and operating-system components.

What is verified

OpenSSL, FreeBSD, curl, Apache, Chrome, and Squid publish reporter or research-team credits on validated subsets. Those records name AISLE Research or its researchers rather than the autonomous analyzer itself. AISLE supplies the AI-system attribution, so these entries are labeled self-reported even when the vulnerability and fix are directly corroborated upstream. AISLE’s write-ups describe the analyzer’s role in discovery, triage, and patch generation.

The registry currently reports 397 assigned CVEs while its live page data exposes 392 unique identifiers. Bugflation therefore treats the registry as a discovery feed, not as an automatically trusted aggregate count. This profile’s 186 CVEs are the subset reconciled into exact, source-linked campaign records. The latest pass adds eight older records verified against libgit2, AWS-LC, Bouncy Castle, GnuTLS, OpenSSL, and PostgreSQL primary sources. Their vendor severities replace conflicting registry scores where necessary.

Why it matters

OpenSSL is one of the most scrutinized cryptographic libraries in existence, and FreeBSD is a core operating-system codebase with a long security reputation. A sustained OpenSSL run plus accepted FreeBSD advisories is a stronger signal than a single project-specific campaign.

Sources

Attributed findings

Catalogued entries credited to AISLE.

ID Title System Evidence date Severity
CVE-2026-84838 + 27 more AISLE's September registry wave adds 28 CVEs Memory safety, denial of service, validation, and application-security vulnerabilities - self-reported AISLE (self-reported) Sep 16, 2026 high CVE-2026-75143 + 50 more AISLE publishes a second 51-CVE August wave Memory safety, denial of service, authentication, and input-validation vulnerabilities - self-reported AISLE (self-reported) Aug 31, 2026 high CVE-2026-28901 Apple and AISLE corroborate a Safari memory-safety CVE Memory-handling failure causing a browser crash - self-reported AISLE (self-reported) Aug 25, 2026 medium CVE-2026-65048 + 44 more AISLE's late-July and August stream adds forty-five public CVE IDs Memory corruption, authentication and authorization, injection, information disclosure, and denial-of-service flaws - self-reported AISLE (self-reported) Aug 18, 2026 critical CVE-2026-53583 AISLE backfill adds a libgit2 certificate-validation CVE Improper certificate validation - self-reported AISLE (self-reported) Jul 18, 2026 medium CVE-2026-47729 AISLE and Claude Mythos independently report Squid FTP memory disclosure Response smuggling and process-memory disclosure - self-reported AISLE (self-reported) + Claude Mythos Preview (direct) Jul 16, 2026 medium CVE-2026-5135 + 9 more AISLE's July disclosure stream spans ten CVEs in seven projects Authorization, injection, XSS, parser, denial-of-service, and memory-safety flaws - self-reported AISLE (self-reported) Jul 8, 2026 high CVE-2026-49420 Atuin and AISLE converge on FreeBSD libalias stack overflow Remotely reachable stack buffer overflow - self-reported Atuin Automated Vulnerability Discovery Engine (direct) + AISLE (self-reported) Jun 30, 2026 high CVE-2026-8925 + 5 more curl 8.21.0 credits AISLE Research on six CVEs Double-free, credential disclosure, authentication-state leakage, and protocol confusion - self-reported AISLE (self-reported) Jun 24, 2026 medium CVE-2026-35188, CVE-2026-42765 OpenSSL credits AISLE researchers on two OCSP flaws Double free and NULL pointer dereference - self-reported AISLE (self-reported) Jun 9, 2026 medium CVE-2026-29167, CVE-2026-29170 Apache httpd credits AISLE Research on two 2.4.68 CVEs Request-processing and module-boundary vulnerabilities - self-reported AISLE (self-reported) Jun 8, 2026 low CVE-2026-39461, CVE-2026-45252, CVE-2026-45254 FreeBSD credits AISLE Research on three more May 2026 CVEs Stack overflow, heap overflow, and capability-sandbox bypass - self-reported AISLE (self-reported) May 20, 2026 high CVE-2026-6638 AISLE backfill adds a PostgreSQL logical-replication injection flaw SQL injection through crafted replicated table names - self-reported AISLE (self-reported) May 14, 2026 low CVE-2025-68388 + 5 more AISLE analyzer finds Elastic Beats denial-of-service cluster Network and telemetry parser denial-of-service vulnerabilities - self-reported AISLE (self-reported) Apr 30, 2026 medium CVE-2026-42511, CVE-2026-42512, CVE-2026-39457 AISLE finds FreeBSD dhclient root RCE and two companion core CVEs DHCP client command injection, heap overflow, and libnv stack overflow - self-reported AISLE (self-reported) Apr 29, 2026 high CVE-2026-42010 GnuTLS credits AISLE on an RSA-PSK authentication bypass Authentication bypass through embedded-NUL username handling - self-reported AISLE (self-reported) Apr 29, 2026 high CVE-2025-9230 + 19 more AISLE autonomous analyzer finds a 20-CVE OpenSSL run Cryptographic-library vulnerability cluster - self-reported AISLE (self-reported) Apr 24, 2026 high CVE-2026-3505 AISLE backfill adds a Bouncy Castle OpenPGP denial of service Pre-authentication resource exhaustion - self-reported AISLE (self-reported) Apr 15, 2026 high CVE-2026-3336, CVE-2026-3337 AWS credits AISLE on two AWS-LC cryptography CVEs Certificate-chain verification bypass and cryptographic timing side channel - self-reported AISLE (self-reported) Mar 2, 2026 high CVE-2025-12443 Chrome directly credits AISLE Research on 2025 security fix Out-of-bounds read - self-reported AISLE (self-reported) Oct 28, 2025 medium