# JFrog: 54 of 55 advisories from one account were fabricated

> JFrog argues that AI-written vulnerability reports and AI-found flaws are pulling CVE severity signals away from real risk.

- **Severity:** Info: Research, tools, evals or lab claims with no direct exposure. Context, not an alert.
- **Category:** Research
- **Published by:** JFrog
- **Disclosed:** 2026-10-27
- **Affects:** CVE ecosystem, NVD, Open-source software
- **Research by:** Tamir Friedman (JFrog Security Research), Afek Berger (JFrog Security Research), Aviv Engelberg (JFrog Security Research)
- **Primary source:** https://jfrog.com/blog/the-impact-of-ai-on-cves-industry-challenges/
- **Page:** https://theinjection.dev/items/jfrog-ai-impact-on-cves/

JFrog Security Research reports that AI is weakening the signals defenders use to triage CVEs: one new GitHub account published 55 advisories, 54 of them fabricated, with scores as high as 9.8 that CISA's ADP program agreed with.

## What happened

JFrog Security Research published the first part of a series on AI and CVEs on October 27, 2026. Tamir Friedman, Afek Berger and Aviv Engelberg set out five pressures they attribute to AI: a lower barrier to filing reports, convincing fakes, severity inflation, faster exploitation and a growing patch queue. The figures they cite are listed below.

## How it works

Fabrication is the clearest case. JFrog reviewed 55 advisories that a newly created GitHub account published in one batch and found 54 completely fabricated, with details the authors say appear to have been hallucinated by a language model: one advisory cited line 3555 of a file that has 2706 lines. The reports looked polished and authoritative, carried scores up to 9.8, and CISA's ADP program agreed with those scores.

## Who is affected

Teams that triage by CVSS base score are the ones this reaches, along with anyone relying on NVD enrichment. NIST moved CVEs published before March 1, 2026 into a not-scheduled queue when it began prioritising KEV entries, federal software and critical software in April 2026, so many records never receive NVD analysis.

## What to do

Treat a CVSS base score as a starting point rather than an urgency signal, and check whether a report comes with a working proof of concept before acting on it. JFrog argues that exploitability in your own configuration should drive the queue.

## Quick facts

- **Fabricated advisories:** 54 of 55 from one GitHub account, per JFrog
- **Severity mismatch:** 27 curl CVEs rated Low to Medium by maintainers; CISA escalated nearly all, per JFrog
- **AI-found volume:** 21 FFmpeg zero-days from one agent; Oracle's July 2026 update carried 1,434 CVEs
- **Remediation:** 26% of KEV vulnerabilities fully remediated in 2025, down from 38%, per the Verizon 2026 DBIR as cited by CISA
- **NVD:** Records published before 1 March 2026 moved to Not Scheduled
- **Published:** 27 October 2026, part 1 of a series

## Questions

### How did JFrog find that 54 of 55 advisories were fabricated?

JFrog Security Research checked each advisory that a newly created GitHub account published in one batch against the SQLite source. The authors report that 54 of the 55 were completely fabricated, citing functions that do not exist and impossible line numbers, including a reference to line 3555 in a file of 2706 lines. The reports carried scores as high as 9.8.

### Should I still use CVSS base scores to prioritise patching?

JFrog argues that a CVSS base score alone should not drive urgency, because scores built on worst-case assumptions overstate risk. The authors point to 27 curl CVEs that maintainers rated Low to Medium and that CISA escalated to High or Critical, and found some Critical ratings came from client-side bugs classified as network-based. Exploitability in your own configuration is the better signal.

### Why are many CVEs missing NVD analysis?

NIST changed NVD operations in April 2026 to handle record CVE growth, prioritising entries in CISA's KEV catalog, software used in the federal government and critical software under Executive Order 14028. Records published before March 1, 2026 moved to a category NIST labels lowest priority and not scheduled for immediate enrichment, so their details may stay unanalysed unless someone asks for them.

## Sources

1. [JFrog Analysis](https://jfrog.com/blog/the-impact-of-ai-on-cves-industry-challenges/)
2. [NIST NVD Update](https://www.nist.gov/news-events/news/2026/04/nist-updates-nvd-operations-address-record-cve-growth)
3. [FFmpeg Zero-Days](https://depthfirst.com/research/21-zero-days-in-ffmpeg)