Claude Opus 4.6 Identifies Over 500 Vulnerabilities in Open-Source Libraries

Rescana

Claude Opus 4.6 Identifies Over 500 Vulnerabilities in Open-Source Libraries

First seen 8 Feb 2026, 21:48 UTC • •41.3

Article Content

1 / 5

Browse articles

ThreatCluster •March 12, 2026 at 13:27 UTC

Anthropic's Claude Opus 4.6 has autonomously discovered more than 500 high-severity vulnerabilities in major open-source libraries, including Ghostscript, OpenSC, and CGIF. These vulnerabilities, which include memory corruption and buffer overflows, could potentially affect numerous enterprise and critical infrastructure systems globally. The model operated effectively in a virtual environment, utilizing standard tools without the need for custom configurations.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Answers cite the sources they use

Updated 225d ago How this analysis works

Timeline

2024-07-03

CVE-2024-29510 published

2026-02-05

Claude Opus 4.6 released to the public

2026-02-06

Anthropic reports discovery of over 500 vulnerabilities

2026-02-08

Rescana publishes article on vulnerabilities found by Claude Opus 4.6

More articles in this cluster (4)

Threat Graph

18 entities, 49 inferred relationships (STIX 2.1).

The full threat graph for this incident is free in the 7-day Starter trial.

Create free account

No card · 30 seconds

See everything included

Technique (7)

Data Breach
Denial of Service
Remote Code Execution
T1068 - Exploitation for Privilege Escalation
T1190 - Exploit Public-Facing Application
T1204 - User Execution
T1499 - Endpoint Denial of Service

Vulnerability (4)

CVE-2024-29510
CGIF Buffer Overflow
GhostScript Stack Buffer Underflow
OpenSC Buffer Overflow

Affected Platform (3)

CGIF
Ghostscript
OpenSC

Tool (4)

Coreutils
Debuggers
Fuzzers
Python

Relationships

Coreutils exploits CVE-2024-29510
Coreutils exploits CGIF Buffer Overflow
Coreutils exploits GhostScript Stack Buffer Underflow
Coreutils exploits OpenSC Buffer Overflow
Debuggers exploits CVE-2024-29510
Debuggers exploits CGIF Buffer Overflow
Debuggers exploits GhostScript Stack Buffer Underflow
Debuggers exploits OpenSC Buffer Overflow
Fuzzers exploits CVE-2024-29510
Fuzzers exploits CGIF Buffer Overflow
Fuzzers exploits GhostScript Stack Buffer Underflow
Fuzzers exploits OpenSC Buffer Overflow
Python exploits CVE-2024-29510
Python exploits CGIF Buffer Overflow
Python exploits GhostScript Stack Buffer Underflow
Python exploits OpenSC Buffer Overflow
CVE-2024-29510 targets CGIF
CVE-2024-29510 targets Ghostscript
CVE-2024-29510 targets OpenSC
CGIF Buffer Overflow targets CGIF
CGIF Buffer Overflow targets Ghostscript
CGIF Buffer Overflow targets OpenSC
GhostScript Stack Buffer Underflow targets CGIF
GhostScript Stack Buffer Underflow targets Ghostscript
GhostScript Stack Buffer Underflow targets OpenSC
OpenSC Buffer Overflow targets CGIF
OpenSC Buffer Overflow targets Ghostscript
OpenSC Buffer Overflow targets OpenSC
Data Breach targets CGIF
Data Breach targets Ghostscript
Data Breach targets OpenSC
Denial of Service targets CGIF
Denial of Service targets Ghostscript
Denial of Service targets OpenSC
Remote Code Execution targets CGIF
Remote Code Execution targets Ghostscript
Remote Code Execution targets OpenSC
T1068 - Exploitation for Privilege Escalation targets CGIF
T1068 - Exploitation for Privilege Escalation targets Ghostscript
T1068 - Exploitation for Privilege Escalation targets OpenSC
T1190 - Exploit Public-Facing Application targets CGIF
T1190 - Exploit Public-Facing Application targets Ghostscript
T1190 - Exploit Public-Facing Application targets OpenSC
T1204 - User Execution targets CGIF
T1204 - User Execution targets Ghostscript
T1204 - User Execution targets OpenSC
T1499 - Endpoint Denial of Service targets CGIF
T1499 - Endpoint Denial of Service targets Ghostscript
T1499 - Endpoint Denial of Service targets OpenSC

Following this threat?

Track CVE-2024-29510 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Continue Reading

Critical BeyondTrust 9.3 Vulnerability Actively Exploited by Threat Actor A critical vulnerability (CVE-2026-102764) in BeyondTrust Remote Support has been discovered and is actively being exploited by the threat group ARMORY CASTLE, reportedly linked to China. The vulnerability, which has a CVSS score of 9.3, allows unauthenticated attackers to upload files and potentially compromise host…

Critical RCE Vulnerabilities in Ivanti EPMM Two critical vulnerabilities, CVE-2026-1281 and CVE-2026-1340, affecting Ivanti Endpoint Manager Mobile (EPMM) have been confirmed to allow unauthenticated remote code execution (RCE) through a Bash Arithmetic Expansion mechanism. The vulnerabilities were published on January 29, 2026, with a CVSS score of 9.8…