Researchers
Finders and reporters named by CNAs in CVE records. Ranked by record count; anonymous and generic names excluded.
| # | Name | Last 12 months | Records | KEV | Latest |
|---|---|---|---|---|---|
| 1 | VulDB CNA Team | 1,997 | 2,015 | 0 | Sep 30, 2026 |
| 2 | WPScan | 1,486 | 3,829 | 0 | Sep 28, 2026 |
| 3 | Tran Nguyen Bao Khanh (VCI - VNPT Cyber Immunity)Patchstack Bug Bounty Program | 527 | 675 | 0 | Sep 2, 2026 |
| 4 | George Chen | 511 | 511 | 0 | Sep 29, 2026 |
| 5 | João Pedro S Alcântara (Kinorth)Patchstack Bug Bounty Program | 434 | 1,024 | 0 | Sep 4, 2026 |
| 6 | Nabil IrawanPatchstack Bug Bounty Program | 395 | 744 | 0 | Sep 22, 2026 |
| 7 | VulnCheck | 345 | 345 | 0 | Sep 29, 2026 |
| 8 | darooPatchstack Bug Bounty Program | 339 | 339 | 0 | Sep 26, 2026 |
| 9 | Muhammad Yudha - DJPatchstack Bug Bounty Program | 329 | 711 | 0 | Sep 29, 2026 |
| 10 | BondsPatchstack Bug Bounty Program | 320 | 451 | 0 | Sep 4, 2026 |
| 11 | VulDB | 280 | 280 | 0 | Apr 2, 2026 |
| 12 | Phat RiOPatchstack Bug Bounty Program | 263 | 327 | 0 | Sep 22, 2026 |
| 13 | Jonatan Männchen / EEF | 242 | 244 | 0 | Sep 25, 2026 |
| 14 | Ananda Dhakal (Patchstack)Patchstack Bug Bounty Program | 232 | 361 | 0 | Sep 23, 2026 |
| 15 | LiquidWorm as Gjoko KrsticZero Science Lab | 227 | 227 | 0 | Jun 5, 2026 |
| 16 | Legion HunterPatchstack Bug Bounty program | 224 | 234 | 0 | Sep 24, 2026 |
| 17 | Wordfence PRISM | 198 | 198 | 0 | Sep 25, 2026 |
| 18 | Athiwat Tiprasaharn | 176 | 176 | 0 | Jun 19, 2026 |
| 19 | Peter Ullrich | 173 | 173 | 0 | Sep 25, 2026 |
| 20 | Ihsan Sencan | 147 | 170 | 0 | Jun 19, 2026 |
| 21 | Alex WilliamsConverge Technology Solutions | 145 | 161 | 0 | Sep 24, 2026 |
| 22 | CVE-2026-14970, CVE-2026-15061, CVE-2026-15078, CVE-2026-15065, CVE-2026-15068 were reported to IBM by Oneconsult AG (https://oneconsult.com/). | 145 | 145 | 0 | Aug 28, 2026 |
| 23 | Jakub HermanPatchstack Bug Bounty Program | 128 | 128 | 0 | Sep 28, 2026 |
| 24 | Greg Knaddison (greggles) | 126 | 190 | 1 | Sep 2, 2026 |
| 25 | coral | 123 | 172 | 0 | Jun 10, 2026 |
| 26 | Dmitrii Ignatyev | 121 | 411 | 0 | Sep 27, 2026 |
| 27 | Muhammad Nur Ibnu HubabPatchstack Bug Bounty Program | 117 | 117 | 0 | Jul 11, 2026 |
| 28 | Nguyen Ba KhanhPatchstack Bug Bounty Program | 115 | 115 | 0 | Jul 27, 2026 |
| 29 | Jeroen Pinoy | 114 | 114 | 0 | Sep 25, 2026 |
| 30 | Denver JacksonPatchstack Bug Bounty Program | 108 | 152 | 0 | Sep 2, 2026 |
| 31 | Juraj Nemec (poker10) | 107 | 158 | 1 | Sep 2, 2026 |
| 32 | Phil Taylor, mysites.guru | 104 | 105 | 4 | Sep 26, 2026 |
| 33 | tdjackey | 104 | 104 | 0 | Sep 25, 2026 |
| 34 | UlisesGascon | 100 | 100 | 0 | Sep 17, 2026 |
| 35 | Mozilla | 95 | 95 | 0 | Sep 29, 2026 |
| 36 | Itthidej Aramsri | 93 | 93 | 0 | Jun 13, 2026 |
| 37 | KeenSecurityLab | 91 | 91 | 0 | Sep 15, 2026 |
| 38 | Nguyen Xuan ChienPatchstack Bug Bounty Program | 90 | 435 | 0 | Jun 2, 2026 |
| 39 | Trương Hữu Phúc (truonghuuphuc)Patchstack Bug Bounty Program | 89 | 357 | 0 | Sep 23, 2026 |
| 40 | Gilang Asra Bilhadi | 87 | 128 | 0 | Jun 24, 2026 |
| 41 | Judel777 | 87 | 87 | 0 | Sep 26, 2026 |
| 42 | internal security researchHPE Networking. | 86 | 86 | 0 | Sep 1, 2026 |
| 43 | zakaria | 84 | 129 | 0 | Jul 28, 2026 |
| 44 | TITAN Team (titancaproject@gmail.com) | 84 | 98 | 0 | Mar 24, 2026 |
| 45 | 0xd4rk5id3Patchstack Bug Bounty Program | 83 | 298 | 0 | Sep 18, 2026 |
| 46 | Ahmet Ümit BAYRAM | 83 | 83 | 0 | Mar 24, 2026 |
| 47 | Jonas Benjamin Friedli | 82 | 130 | 0 | Jul 11, 2026 |
| 48 | Kazuma Matsumoto, a security researcherGMO Cybersecurity by IERAE, Inc. | 82 | 82 | 0 | Sep 22, 2026 |
| 49 | santhreal | 80 | 80 | 0 | Sep 26, 2026 |
| 50 | PRISM | 80 | 80 | 0 | Jul 17, 2026 |
| 51 | Chia Min Jun Lennon | 79 | 79 | 0 | Aug 21, 2026 |
| 52 | Oneafter (VulDB User) | 72 | 72 | 0 | Mar 12, 2026 |
| 53 | Rafie MuhammadPatchstack | 71 | 238 | 0 | Sep 28, 2026 |
| 54 | mcollina | 70 | 70 | 0 | Sep 17, 2026 |
| 55 | wxhwxhwxh_mie (VulDB User) | 68 | 136 | 0 | Aug 16, 2026 |
| 56 | Zach Daniel / Ash Project | 68 | 68 | 0 | Sep 25, 2026 |
| 57 | dutafiPatchstack Bug Bounty Program | 68 | 68 | 0 | Sep 3, 2026 |
| 58 | Ozer Goker | 68 | 68 | 0 | Feb 20, 2026 |
| 59 | manus-use | 67 | 67 | 0 | Sep 26, 2026 |
| 60 | SkalucyPatchstack Bug Bounty Program | 66 | 154 | 0 | Jun 15, 2026 |
| 61 | Djaidja Moundjid | 66 | 117 | 0 | May 22, 2026 |
| 62 | Luca BorzacchielloNozomi Networks | 65 | 77 | 0 | Sep 16, 2026 |
| 63 | Internal security research (HPE Networking). | 64 | 64 | 0 | Sep 29, 2026 |
| 64 | Drew Webber (mcdruid) | 63 | 76 | 1 | Sep 2, 2026 |
| 65 | Revanth Hari Narayana Matte | 62 | 62 | 0 | Sep 24, 2026 |
| 66 | ZAST.AI (VulDB User) | 61 | 147 | 0 | Sep 18, 2026 |
| 67 | Jincheng Wang (@winmt)Nanjing University of Posts and Telecommunications | 61 | 61 | 0 | Sep 10, 2026 |
| 68 | Peter ThaleikisPatchstack Bug Bounty Program | 60 | 533 | 0 | Sep 2, 2026 |
| 69 | Jess (xjm) | 60 | 68 | 1 | Sep 2, 2026 |
| 70 | iglocska | 59 | 59 | 0 | Sep 22, 2026 |
| 71 | JohSkaPatchstack Bug Bounty Program | 58 | 257 | 0 | Aug 19, 2026 |
| 72 | Abhirup Konwar | 58 | 58 | 0 | Jun 24, 2026 |
| 73 | Khaled Alenazi (Nxploited) | 56 | 59 | 0 | Sep 2, 2026 |
| 74 | Pedro Pinho | 56 | 57 | 0 | Sep 23, 2026 |
| 75 | hhhaiPatchstack Bug Bounty Program | 56 | 56 | 0 | Aug 20, 2026 |
| 76 | Md. Moniruzzaman ProdhanPatchstack Bug Bounty Program | 56 | 56 | 0 | Jun 6, 2026 |
| 77 | Muni Nitish Kumar Yaddala | 55 | 55 | 0 | Sep 27, 2026 |
| 78 | Jarek Potiuk | 54 | 57 | 0 | Sep 29, 2026 |
| 79 | LtzHust2 (VulDB User) | 54 | 54 | 0 | May 25, 2026 |
| 80 | Kelly PattersonCisco Talos. | 53 | 68 | 0 | Jul 2, 2026 |
| 81 | Erwan LR (WPScan) | 52 | 172 | 0 | Sep 28, 2026 |
| 82 | LtzHust (VulDB User) | 52 | 52 | 0 | May 25, 2026 |
| 83 | zsx (@zsxsoft) | 52 | 52 | 0 | Jun 16, 2026 |
| 84 | offset | 51 | 51 | 0 | Sep 27, 2026 |
| 85 | alham-rizvi | 51 | 51 | 0 | Sep 14, 2026 |
| 86 | VulDB Vulnerability Moderation Team | 51 | 51 | 0 | Sep 29, 2026 |
| 87 | Kenneth Dunn | 50 | 116 | 0 | Feb 19, 2026 |
| 88 | NumeXPatchstack Bug Bounty Program | 50 | 51 | 0 | Jul 10, 2026 |
| 89 | benzdeusPatchstack Bug Bounty Program | 50 | 50 | 0 | Sep 23, 2026 |
| 90 | dodoh4tPatchstack Bug Bounty Program | 49 | 49 | 0 | Sep 23, 2026 |
| 91 | Artus KGPatchstack Bug Bounty Program | 49 | 49 | 0 | Sep 28, 2026 |
| 92 | LtzHuster (VulDB User) | 49 | 49 | 0 | May 24, 2026 |
| 93 | zzcenturyUbisectech Sirius Team | 48 | 74 | 0 | Jul 3, 2026 |
| 94 | Peng Zhou (zpbrent) | 48 | 49 | 0 | May 6, 2026 |
| 95 | Jincheng Wang (@winmt), Professor Le YuNanjing University of Posts and Telecommunications and Professor Xiapu Luo from Hong Kong Polytechnic University | 48 | 48 | 0 | Sep 10, 2026 |
| 96 | Khaled Sarieddine and Mohammad Ali Sayed reported this vulnerability to CISA. | 48 | 48 | 0 | Jun 25, 2026 |
| 97 | Shirshakhtml | 48 | 48 | 0 | Sep 12, 2026 |
| 98 | Gabriele QuagliarellaNozomi Networks Security Research team during an internal penetration testing session. | 47 | 85 | 0 | Sep 16, 2026 |
| 99 | Bao - BlueRockPatchstack Bug Bounty Program | 47 | 82 | 0 | Aug 24, 2026 |
| 100 | Doan Dinh VanPatchstack Bug Bounty Program | 47 | 48 | 0 | Sep 2, 2026 |
Names are free text from CNA records; the same person may appear under different spellings. Write to us for corrections.