The same capability that finds real vulnerabilities drowns the registry that tracks them.
Development
Generated vulnerability reports bury the national database
Claim
AI-generated vulnerability reports have overwhelmed the National Vulnerability Database by a hundred to two hundred times, burying it under 30,000 CVEs.
Reported metric: 100-200x / 30,000 CVEs
Reporting date: (not necessarily the event date)
Sources
Attribution and reporting linked by this record; links do not imply independent verification.
- Welcome to February 26, 2026 (theinnermostloop.substack.com)
Knowledge graphopen in browser →
Reported in
Cite or correct this record
Suggest a correction — opens a GitHub draft for you to review and submit.