Researchers
Finders and reporters named by CNAs in CVE records. Ranked by record count; anonymous and generic names excluded.
| # | Name | Last 12 months | Records | KEV | Latest |
|---|---|---|---|---|---|
| 1 | VulDB CNA Team | 2,689 | 2,720 | 0 | Nov 13, 2026 |
| 2 | WPScan | 2,314 | 4,688 | 0 | Nov 12, 2026 |
| 3 | George Chen | 612 | 612 | 0 | Nov 11, 2026 |
| 4 | Tran Nguyen Bao Khanh (VCI - VNPT Cyber Immunity)Patchstack Bug Bounty Program | 496 | 697 | 0 | Oct 23, 2026 |
| 5 | João Pedro S Alcântara (Kinorth)Patchstack Bug Bounty Program | 438 | 1,078 | 0 | Oct 23, 2026 |
| 6 | Ananda Dhakal (Patchstack)Patchstack Bug Bounty Program | 427 | 562 | 0 | Oct 30, 2026 |
| 7 | VulnCheck | 371 | 371 | 0 | Oct 26, 2026 |
| 8 | darooPatchstack Bug Bounty Program | 366 | 369 | 0 | Nov 11, 2026 |
| 9 | Wordfence PRISM | 357 | 357 | 0 | Nov 7, 2026 |
| 10 | HieuPenguinnnPatchstack Bug Bounty Program | 349 | 349 | 0 | Nov 11, 2026 |
| 11 | Nabil IrawanPatchstack Bug Bounty Program | 346 | 747 | 0 | Oct 14, 2026 |
| 12 | BondsPatchstack Bug Bounty Program | 322 | 477 | 0 | Oct 30, 2026 |
| 13 | Jonatan Männchen / EEF | 314 | 318 | 0 | Nov 10, 2026 |
| 14 | Mozilla | 288 | 288 | 0 | Nov 10, 2026 |
| 15 | Phat RiOPatchstack Bug Bounty Program | 257 | 330 | 0 | Oct 22, 2026 |
| 16 | Greg Knaddison (greggles) | 254 | 328 | 1 | Oct 30, 2026 |
| 17 | Muhammad Yudha - DJPatchstack Bug Bounty Program | 246 | 713 | 0 | Oct 10, 2026 |
| 18 | VulDB | 246 | 279 | 0 | Apr 2, 2026 |
| 19 | HaiND from the Post and Telecommunication Institute of Technology | 246 | 246 | 0 | Nov 5, 2026 |
| 20 | Juraj Nemec (poker10) | 237 | 294 | 1 | Oct 30, 2026 |
| 21 | LiquidWorm as Gjoko KrsticZero Science Lab | 227 | 227 | 0 | Jun 5, 2026 |
| 22 | Internal security research (HPE Networking). | 214 | 214 | 0 | Nov 10, 2026 |
| 23 | Peter Ullrich | 209 | 209 | 0 | Nov 6, 2026 |
| 24 | manus-use | 194 | 194 | 0 | Nov 8, 2026 |
| 25 | Legion HunterPatchstack Bug Bounty Program | 190 | 234 | 0 | Sep 24, 2026 |
| 26 | Swan Kalata (akalata) | 174 | 174 | 0 | Oct 30, 2026 |
| 27 | Jakub HermanPatchstack Bug Bounty Program | 170 | 170 | 0 | Nov 7, 2026 |
| 28 | Joshua Rogers (AISLE Research) | 164 | 164 | 0 | Nov 9, 2026 |
| 29 | Athiwat Tiprasaharn | 161 | 176 | 0 | Jun 19, 2026 |
| 30 | Ihsan Sencan | 147 | 170 | 0 | Jun 19, 2026 |
| 31 | Jess (xjm) | 146 | 154 | 1 | Oct 30, 2026 |
| 32 | UlisesGascon | 146 | 146 | 0 | Nov 11, 2026 |
| 33 | Yaqi Chao | 145 | 145 | 0 | Oct 12, 2026 |
| 34 | CVE-2026-14970, CVE-2026-15061, CVE-2026-15078, CVE-2026-15065, CVE-2026-15068 were reported to IBM by Oneconsult AG (https://oneconsult.com/). | 145 | 145 | 0 | Aug 28, 2026 |
| 35 | Jeroen Pinoy | 127 | 127 | 0 | Oct 19, 2026 |
| 36 | leediay153Viettel Post | 125 | 125 | 0 | Nov 10, 2026 |
| 37 | Muhammad Nur Ibnu HubabPatchstack Bug Bounty Program | 116 | 117 | 0 | Jul 11, 2026 |
| 38 | mcollina | 116 | 116 | 0 | Nov 11, 2026 |
| 39 | Nguyen Ba KhanhPatchstack Bug Bounty Program | 115 | 115 | 0 | Jul 27, 2026 |
| 40 | Alex WilliamsPellera Technologies reported this vulnerability to CISA. | 112 | 169 | 0 | Oct 23, 2026 |
| 41 | Karthik Ramakrishnan | 112 | 112 | 0 | Nov 12, 2026 |
| 42 | Phil Taylor, mysites.guru | 111 | 112 | 4 | Nov 12, 2026 |
| 43 | Dmitrii Ignatyev | 110 | 419 | 0 | Nov 5, 2026 |
| 44 | Michael Niedermayer | 104 | 104 | 0 | Nov 9, 2026 |
| 45 | tdjackey | 104 | 104 | 0 | Sep 26, 2026 |
| 46 | KeenSecurityLab | 103 | 103 | 0 | Nov 4, 2026 |
| 47 | Denver JacksonPatchstack Bug Bounty Program | 97 | 153 | 0 | Oct 6, 2026 |
| 48 | Andrea CosentinoApache Software Foundation | 93 | 100 | 0 | Oct 29, 2026 |
| 49 | Bram Driesen (bramdriesen) | 93 | 98 | 0 | Oct 30, 2026 |
| 50 | iglocska | 92 | 92 | 0 | Oct 19, 2026 |
| 51 | santhreal | 92 | 92 | 0 | Nov 8, 2026 |
| 52 | Rafie MuhammadPatchstack Bug Bounty Program | 91 | 270 | 0 | Nov 10, 2026 |
| 53 | Itthidej Aramsri | 91 | 93 | 0 | Jun 13, 2026 |
| 54 | Naoki Kawahigashi | 90 | 91 | 0 | Nov 12, 2026 |
| 55 | Judel777 | 87 | 87 | 0 | Sep 26, 2026 |
| 56 | Trương Hữu Phúc (truonghuuphuc)Patchstack Bug Bounty Program | 86 | 358 | 0 | Oct 6, 2026 |
| 57 | JohSkaPatchstack Bug Bounty Program | 86 | 299 | 0 | Nov 3, 2026 |
| 58 | Found by AISLE in partnershipRed Hat. | 86 | 86 | 0 | Nov 11, 2026 |
| 59 | internal security researchHPE Networking. | 86 | 86 | 0 | Sep 1, 2026 |
| 60 | TITAN Team (titancaproject@gmail.com) | 84 | 98 | 0 | Mar 24, 2026 |
| 61 | VulDB Vulnerability Moderation Team | 84 | 84 | 2 | Nov 9, 2026 |
| 62 | Drew Webber (mcdruid) | 83 | 104 | 1 | Oct 30, 2026 |
| 63 | Claude Security | 83 | 83 | 0 | Nov 10, 2026 |
| 64 | Ahmet Ümit BAYRAM | 82 | 83 | 0 | Mar 24, 2026 |
| 65 | Kazuma Matsumoto, a security researcherGMO Cybersecurity by IERAE, Inc. | 82 | 82 | 0 | Sep 22, 2026 |
| 66 | Muni Nitish Kumar YaddalaPatchstack Bug Bounty Program | 82 | 82 | 0 | Nov 12, 2026 |
| 67 | dutafiPatchstack Bug Bounty Program | 81 | 81 | 0 | Oct 28, 2026 |
| 68 | coral | 80 | 177 | 0 | Oct 15, 2026 |
| 69 | PRISM | 80 | 80 | 0 | Jul 17, 2026 |
| 70 | Chia Min Jun Lennon | 79 | 79 | 0 | Aug 21, 2026 |
| 71 | n0mi1k | 79 | 79 | 0 | Nov 9, 2026 |
| 72 | opensec-intelligence | 79 | 79 | 0 | Nov 9, 2026 |
| 73 | Abraxas Labs | 78 | 78 | 0 | Oct 30, 2026 |
| 74 | Erwan LR (WPScan) | 77 | 197 | 0 | Nov 8, 2026 |
| 75 | Zach Daniel / Ash Project | 77 | 77 | 0 | Nov 9, 2026 |
| 76 | Jarek Potiuk | 76 | 79 | 0 | Nov 9, 2026 |
| 77 | Valentin Lobstein (Chocapikk) | 75 | 88 | 0 | Nov 12, 2026 |
| 78 | The Shadowserver Foundation | 73 | 73 | 0 | Oct 30, 2026 |
| 79 | Pedro PinhoPatchstack Bug Bounty Program | 72 | 73 | 0 | Nov 12, 2026 |
| 80 | mayank-jangid-moon | 72 | 72 | 0 | Nov 4, 2026 |
| 81 | Oneafter (VulDB User) | 72 | 72 | 0 | Mar 12, 2026 |
| 82 | wxhwxhwxh_mie (VulDB User) | 71 | 145 | 0 | Nov 7, 2026 |
| 83 | Kushalkhemka | 71 | 71 | 0 | Nov 4, 2026 |
| 84 | 0xd4rk5id3Patchstack Bug Bounty Program | 70 | 303 | 0 | Oct 16, 2026 |
| 85 | ZAST.AI (VulDB User) | 70 | 156 | 0 | Oct 26, 2026 |
| 86 | manus-pi | 70 | 70 | 0 | Nov 8, 2026 |
| 87 | Artus KGPatchstack Bug Bounty Program | 69 | 69 | 0 | Nov 11, 2026 |
| 88 | https://github.com/bircni | 69 | 69 | 0 | Nov 1, 2026 |
| 89 | Peter TangPatchstack Bug Bounty Program | 69 | 69 | 0 | Nov 11, 2026 |
| 90 | Ozer Goker | 68 | 68 | 0 | Feb 20, 2026 |
| 91 | Gilang Asra Bilhadi | 67 | 128 | 0 | Jun 24, 2026 |
| 92 | Revanth Hari Narayana Matte | 67 | 67 | 0 | Nov 12, 2026 |
| 93 | Marcus Johansson (Marcus_Johansson) | 66 | 68 | 0 | Oct 30, 2026 |
| 94 | SkalucyPatchstack Bug Bounty Program | 64 | 155 | 0 | Sep 30, 2026 |
| 95 | Jincheng Wang (@winmt)Nanjing University of Posts and Telecommunications | 63 | 63 | 0 | Nov 12, 2026 |
| 96 | zakaria | 62 | 129 | 0 | Jul 28, 2026 |
| 97 | IntrudifyPatchstack Bug Bounty Program | 62 | 62 | 0 | Nov 11, 2026 |
| 98 | The Apache Software Foundation | 62 | 62 | 0 | Nov 10, 2026 |
| 99 | hhhaiPatchstack Bug Bounty Program | 62 | 62 | 0 | Nov 6, 2026 |
| 100 | Arjun BasnetSecurin | 60 | 60 | 0 | Oct 14, 2026 |
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.