./security_research

Security research and CVE advisories

Every advisory here was found and confirmed by Vorthix's autonomous agent — without human guidance — and verified by the Vorthix research team before disclosure. Full technical analysis, sanitizer output, and coordinated disclosure included.

CVECVE-2026-56412MEDIUMRead the write-up ↗

CVE-2026-56412

libexpatIncomplete fix

Incomplete fix bypass in libexpat — CDATA handler depth guard missing in doCdataSection()

Jun 20, 2026 · 8 min

CVECVE-2026-53720HIGHRead the write-up ↗

CVE-2026-53720

pymonocypherHeap overflow

Heap buffer overflow in pymonocypher argon2i_32()

Jun 2, 2026 · 5 min

CVECVE-2026-57158MEDIUMRead the write-up ↗

CVE-2026-57158

FreeRDPIncomplete fix

Heap out-of-bounds read in FreeRDP — incomplete fix for CVE-2026-23530

Jul 2026 · 9 min

CVECVE-2026-72841MEDIUMRead the write-up ↗

CVE-2026-72841

LibRawHeap buffer overflow

LibRaw RPi Decoder Heap Overflow: A 6-Year Bug Found by AI

Jul 15, 2026 · 7 min

CVECVE assigned · pending disclosureIN PROGRESS Details withheld until disclosure

CVE assigned · pending disclosure

UndisclosedPending

Open-source target — coordinated disclosure in progress

July 2026 · REDACTED

Stay Updated

Get notified when new findings are published.