Skip to content
Submersion AI's Basin Model Uncovers Critical Vulnerabilities

Submersion AI's Basin Model Uncovers Critical Vulnerabilities

First seen 28 Sep 2026, 18:19 UTC • •
API

Article Content

Browse articles
ThreatCluster AI
ThreatCluster •September 28, 2026 at 19:12 UTC
  • •Submersion AI's Basin model ranks 8th globally on CyberGym with an 80.8% score.
  • •Basin uncovered critical zero-day vulnerabilities, including CVE-2026-86733 and CVE-2026-82450.
  • •The model operates within customer infrastructure, ensuring data sovereignty and security.

Submersion AI launched its new cybersecurity model, Basin, which achieved an 80.8% score on the CyberGym benchmark, ranking 8th globally. Basin has successfully identified high-severity zero-day vulnerabilities in widely used software, including CVE-2026-86733 (Snipe-IT) and CVE-2026-82450 (BookStack). The model operates entirely within customer-controlled environments, addressing security concerns related to hosted AI. It is designed to help security teams detect vulnerabilities that attackers might exploit. The vulnerabilities discovered by Basin are now publicly assigned to the Submersion.ai Security Research Team. The launch of Basin comes amid ongoing discussions about the impact of AI on cybersecurity and the need for advanced tools to keep pace with evolving threats.

Start a free Starter trial for enhanced analysis

Ask AI about this cluster

Updated just now How this analysis works

Timeline

2026-08-10
CVE-2026-72898 published
Vulnerability assigned a CVE identifier and published in the National Vulnerability Database.
MITRE
2026-08-29
CVE-2026-82450 published
A high-severity vulnerability in BookStack was disclosed, affecting multiple versions.
Markets.Businessinsider
2026-09-08
CVE-2026-86733 published
A critical vulnerability in Snipe-IT was disclosed, allowing unauthorized access.
Markets.Businessinsider
2026-09-11
CVE-2026-85706 added to CISA KEV
CISA flagged the vulnerability as actively exploited in the wild and added it to the Known Exploited Vulnerabilities catalog.
CISA KEV
2026-09-24
Basin model launched
Submersion AI launched Basin, which outperformed existing models and discovered critical vulnerabilities.
Markets.Businessinsider

More articles in this cluster (2)

Following this threat?

Track Submersion AI and CVE-2026-72898 in your own feed — you're alerted when they show up in new reporting, leak sites or exploitation.

Free account · no card needed

Extracted Entities (9)

1 / 3