Legacy approach
Severity-ranked findings.
Your Phone, Your Laptop, Your Servers.
We find 0-days in software used by billions, and fix them to make the world a safer place.
CriticalRX buffer overflow on zero-length serial framesLinux kernel · mctp
CVE-2026-68124 · CNA 9.6 CriticalCriticalArbitrary code execution via crafted expressionsjsonata
CVE-2026-77413 · GHSA-8gq3-vp5j-2grpCriticalCross-tenant agent API-token minting@paperclipai/server
GHSA-47wq-cj9q-wpmp
MediumAnonymous /api/systemstatus leaks exception detailSwiss Federal Chancellery · government code
GHSA-32p4-g4fj-cg95
HighSlab use-after-free in AEAD decrypt completionLinux kernel · TIPC
CVE-2026-63801HighUse-after-free in MACsec offload RXLinux kernel · mlx5e
CVE-2026-72072HighMissing CAP_NET_ADMIN check on changelinkLinux kernel · vxlan / geneve
CVE-2026-68142 + CVE-2026-68432HighOOB read on frames shorter than the auth tagLinux kernel · mac802154
CVE-2026-68125HighMemory corruption in 802.15.4 llsec decryptLinux kernel · mac802154
CVE-2026-63831HighUse-after-free of metadata_dst in eswitch repr releaseLinux kernel · ice
Queued upstreamHighResource-exhaustion denial of servicejsonata
CVE-2026-52746HighUse-after-free in LE Audio CIG/CIS setupLinux kernel · Bluetooth
CVE-2026-63944HighStack buffer overflow in NFC digitalLinux kernel · NFC
CVE-2026-80803HighDouble-completion / double-free on resumeLinux kernel · xen-blkfront
Merged upstreamHighCertificate-chain validation bypassnode-forge
CVE-2026-33896
HighDenial of service via unbounded recursionprotobuf.js
CVE-2026-44289
HighInteger overflow in HTTP chunked-transfer parser → heap OOB readnng (nanomsg)
GHSA-cmhr-c7mj-hgx7
HighOOB from unvalidated ioctl buffer sizesLinux kernel · atomisp
In reviewHighUse-after-free on inrange_timer at teardownLinux kernel · HID uclogic
In reviewHighStale pen_input pointer on partial registrationLinux kernel · HID uclogic
In reviewHighUse-after-free of in-use VP9 framesLinux kernel · meson vdec
In reviewMediumOOB read on LLCP PDUs shorter than the headerLinux kernel · NFC
CVE-2026-80798CVSS pendingNULL-deref DoS paths via AMDXDNA_EXEC_CMDLinux kernel · amdxdna
CVE-2026-72091 + CVE-2026-72092CVSS pendingOOB read from assoc length underflowLinux kernel · ath6kl
CVE-2026-89524CVSS pendingNULL deref on HT-cap without HT-oper in TDLSLinux kernel · mwifiex
CVE-2026-68197CVSS pendingOut-of-bounds read from unset MAC header on packet-socket TXLinux kernel · net/packet
CVE-2026-74667MediumOOB read in LLCP connect_sn TLV walkLinux kernel · NFC
CVE-2026-80800MediumOOB read in st21nfca ATR_REQ handlingLinux kernel · NFC
CVE-2026-80823CVSS pendingOOB read from unvalidated directory-index countsLinux kernel · ocfs2
CVE-2026-89492CVSS pendingUse-after-free from carrier_work rearm on disconnectLinux kernel · ipheth
CVE-2026-74677
CVSS pendingUse-after-free of ghl_poke_timer / ghl_urb at driver unbindLinux kernel · HID sony
CVE-2026-89625
MediumHeap out-of-bounds write in ciscodump extcapWireshark
CVE-2026-15164
MediumTemplate injection → arbitrary file readUptime Kuma
CVE-2026-33130
MediumStack overflow via deeply nested collectionsyaml
CVE-2026-33532
MediumOut-of-bounds read in LLCP SNL TLV parserLinux kernel · NFC
Merged upstreamMediumInteger overflow in frame-size calculationLinux kernel · atomisp
In reviewMediumOOB read from unvalidated AV1 frame indicesLinux kernel · v4l2-ctrls
In reviewMediumOOB in NPU cmdstream tile validationLinux kernel · accel/ethosu
In reviewMediumOOB read in firmware-request handlerLinux kernel · Bluetooth btnxpuart
In reviewMediumOOB read in HT/VHT capability IE parsingLinux kernel · mwifiex
In reviewMediumOOB read in pairwise-cipher OUI walkLinux kernel · mwifiex
In reviewMediumECRED deferred-recvmsg race → list corruptionLinux kernel · Bluetooth L2CAP
In reviewMediumOOB read in port100 frame length handlingLinux kernel · NFC
In reviewLowReachable WARN DoS in rsa-pkcs1pad empty digestLinux kernel · crypto
Queued upstreamEvery company I work with faces the same challenge: more security vulnerabilities than teams can realistically address.
What sets 0sec apart is that it helps reduce that list rather than add to it. By prioritizing vulnerabilities based on actual business impact and providing validated, actionable remediation, 0sec enables security teams to focus their resources where they matter most.
That is what makes 0sec a compelling AI-powered security solution for enterprise environments.
Partner & Europe West Cybersecurity Competency Leader, Switzerland, EY
Traditional security tests don’t protect you from today’s cyberattacks.
Pentesting was designed for a slower, human-led attacker.
The times are changing, and fixing things by hand is no longer fast enough.
Legacy approach
Annual pentests.
Test with every change.
Legacy approach
Known patterns only.
70%of today’s exploits are 0-days, previously unknown
Find the known and unknown.
Legacy approach
Web apps only.
44%of 0-days hit the operating system, not the web app
Test your entire stack.
Legacy approach
A PDF to work through.
Ship patches your agents can apply.
Cursor, Claude Code, Codex, Gemini CLI, GitHub Copilot, OpenCode
Legacy approach
Another dashboard.
Findings in your existing tools.
GitHub, GitLab
Legacy approach
Vendor claims.
Run an open-source engine.
GitHub
Legacy approach
Fixed harness and rules.
Self-improvement loop.
Research Preview. Evaluate CLI changes and select versions for later runs.
Questions answered.
What can I use 0sec for?
We investigate codebases, open-source packages, web applications and AI systems for security flaws.
Can I try it myself?
Yes. The open-source 0sec CLI runs on your machine and works with your coding agent. You bring your own AI model or API key. It's a research preview, so expect rough edges.
Can it find bugs nobody has reported?
Yes. Our public research includes previously unknown vulnerabilities in Linux and other open-source projects. A new vulnerability isn't guaranteed on every run.
How do you know a finding is real?
A separate agent tries to reproduce the issue from the reproduction steps alone. If it can't, we don't treat the finding as verified. For managed work, people review the findings before delivery.
Do you help fix what you find?
Yes. We develop patches and provide reproduction steps so engineers can review the fix. Our public research links to fixes accepted by the projects' maintainers.
Can you run it for our team?
With 0cloud, we run the engine for you and review the findings before delivery. We agree which systems to test and how the test will run before starting.
