Mixed · 2026-03

CVE growth in AI-generated code

CVE entries attributed to AI-generated code rose from 6 in January 2026 to more than 35 in March 2026.

Last updated 2026-03

Declared

What the sources report

The sources report 6 CVE entries attributed to AI-generated code in January 2026.

By March 2026 the count was more than 35.

Study

This is background, not a finding. It sets the context for the report rather than mapping to one check.

Not verified
First-quarter 2026 assessment of 200 apps
183 of 200 vibe-coded apps, 91.5 percent, contained at least one vulnerability traceable to AI hallucination or missing security context.
2026-04
Read the incident
Observed
5,600 vibe-coded apps scanned
More than 2,000 vulnerabilities and more than 400 exposed secrets found across vibe-coded apps.
2026-02
Read the incident
Not verified
Tenzai study of AI-built apps
69 vulnerabilities across 15 apps built by five AI coding tools.
2026-02
Read the incident

Run all sixteen groups on your published address and see the evidence behind every result.

ShipReady is not a penetration test or a security certification. No automated check can prove an application is secure.

Last updated September 20, 2026