A model can suggest where a vulnerability might be. Securin proves it, exploits it, reproduces it, and fixes it, under CNA and GNA authority.
138 advisories published · indexed since 2015
AI surfaces candidates at scale. Every candidate is reproduced by a practitioner before it counts as a finding, false positives, theoretical issues, and duplicates are discarded at this gate.
Counts a finding as a real vulnerability when a practitioner confirms it, including bugs later found to be already-reported or marked won't-fix. Shipped patches are the more reliable measure of impact.
Published entries link to the full advisory via the Securin reference. CVE IDs are assigned and indexed after the coordination window closes.
| SEC ZD · CVE | Vendor · Product | Vulnerability | CVSS | Status | Artifacts | |
|---|---|---|---|---|---|---|
sec-zd-323 CVE-2026-107615 | GlavSoft LLC TightVNC | DLL search order hijacking via screenhooks libraries in TightVNC Server Oct 8, 2026 | 7.8High | Fixed | - | Read |
sec-zd-318 CVE-2026-107614 | GlavSoft LLC TightVNC | Integer underflow in TightVNC Server cursor shape trimming leads to out-of-bounds read Oct 8, 2026 | 6.1Medium | Fixed | - | Read |
sec-zd-317 CVE-2026-107613 | GlavSoft LLC TightVNC | NULL pointer dereference in TightVNC Server Win8ScreenDriver after failed DXGI re-initialization Oct 8, 2026 | 5.9Medium | Fixed | - | Read |
sec-zd-315 CVE-2026-107612 | GlavSoft LLC TightVNC | World-accessible IPC shared memory with predictable name in TightVNC Server Oct 8, 2026 | 7.8High | Fixed | - | Read |
sec-zd-314 CVE-2026-107611 | GlavSoft LLC TightVNC | Out-of-bounds read in TightVNC Viewer ZRLE palette decoding Oct 8, 2026 | 7.1High | Fixed | - | Read |
sec-zd-290 CVE-2026-47321 | Apache Apache MINA | Apache MINA: Unbounded Decompression Amplification DoS in Zlib.inflate Sep 21, 2026 | 7.5High | Fixed | - | Read |
Counts as of October 2026 · 90-day coordinated disclosure window
AI accelerates coverage. Every output is validated by a practitioner before it counts.
Rules of engagement established upfront. Vulnerability intelligence focuses effort on targets that matter.
Frontier models map the attack surface at scale. Human expertise directs them to the code paths that matter.
Every output is triaged against practitioner tradecraft, discarding false positives, theoretical issues, and hallucinated findings. What remains is forged into working exploits and exploit chains.
Vendor receives the report and exploit under a 90-day embargo. We coordinate the patch and publish the full advisory under CNA and GNA authority.