Basri Akkaya

Security Research · Responsible Disclosure

Basri Akkaya

Ethical Hacker | Just a TechA reference to Mr. Robot | Linux Enthusiast

“Cybersecurity is not a hobby; it is a responsibility.”

I study computer engineering and focus on web security, application security, penetration testing, and responsible disclosure.

Read the articles LinkedIn

$ profile.summary

About me

I research security issues, report malicious infrastructure, and share practical notes from my learning process.

Learn more about Basri Akkaya

$ cat verified_records.log

Hall of Fame & CVE Records

Publicly verifiable security research, responsible disclosure, and recognition records — grouped for quick review.

15 records3 CVE10 HOF2 OTHER

Hall of Fame

Recognition received for responsibly reported and validated security findings.

10
ASUSTeK Computer Inc. (ASUS)Official institution list
HOF2026

ASUS PSIRT — 2026 Hall of Fame

August 2026 Hall of Fame recognition published as “Basri Akkaya (realkage)” following coordinated vulnerability disclosure with ASUS PSIRT.

  • A02:2025 Security Misconfiguration
Public recordView official record (opens in a new tab)
University of OsloInstitutional letter
HOF2026HOF · LOR

University of Oslo / UiO-CERT — 2026 Recognition

Official recognition from UiO-CERT for identifying and reporting multiple vulnerabilities across University of Oslo services and websites.

  • Information Disclosure
Public recordInstitution website (opens in a new tab)
University of Oslo / UiO-CERT — 2026 Recognition

View evidence

Letter of recognition issued to Basri Akkaya by UiO-CERT on 27 August 2026 for security vulnerability disclosures
Letter of recognition issued to Basri Akkaya by UiO-CERT on 27 August 2026 for security vulnerability disclosures
NASAPublic platform profile
HOF2026HOF · LOR pending

NASA VDP — 2026 Hall of Fame

Two P1 (critical-priority) security submissions accepted under the NASA Vulnerability Disclosure Program: path traversal and SQL injection. The Bugcrowd Hall of Fame entry is public; the Letter of Recognition (LOR) is pending.

  • Path Traversal
  • SQL Injection
Public recordView official record (opens in a new tab)
NASA VDP — 2026 Hall of Fame

View evidence

Screenshot showing two P1 submissions accepted for the NASA target on Bugcrowd on 13 August 2026
Screenshot showing two P1 submissions accepted for the NASA target on Bugcrowd on 13 August 2026
U.S. Department of Homeland SecurityPublic platform profile
HOF2026HOF · P3

U.S. DHS VDP — 2026 Hall of Fame

Bugcrowd Hall of Fame recognition for a P3 security finding accepted on the *.FEMA.GOV target on 24 August 2026.

  • Sensitive Data Exposure
  • Disclosure of Secrets
Public recordView official record (opens in a new tab)
U.S. DHS VDP — 2026 Hall of Fame

View evidence

Screenshot showing a P3 security submission by realkage accepted for the *.FEMA.GOV target on Bugcrowd on 24 August 2026
Screenshot showing a P3 security submission by realkage accepted for the *.FEMA.GOV target on Bugcrowd on 24 August 2026
University of TwenteOfficial institution list
HOF2026

University of Twente — 2026 Hall of Fame

Official Responsible Disclosure Hall of Fame recognition as “Basri Akkaya (realkage)” for one accepted security report in 2026.

  • Broken Access Control
  • IDOR
Public recordView official record (opens in a new tab)
University of Twente — 2026 Hall of Fame

View evidence

Screenshot showing Basri Akkaya (realkage) and one accepted report in the University of Twente 2026 Responsible Disclosure Hall of Fame table
Screenshot showing Basri Akkaya (realkage) and one accepted report in the University of Twente 2026 Responsible Disclosure Hall of Fame table
ArçelikOfficial institution list
HOF2026

Arçelik Türkiye — 2026 Hall of Fame

Official Vulnerability Disclosure Hall of Fame recognition as “Basri Akkaya (realkage)” following a validated security finding reported as High severity (CVSS 7.5).

  • A07:2025 Authentication Failures
Public recordView official record (opens in a new tab)
Arçelik Türkiye — 2026 Hall of Fame

View evidence

Screenshot showing Basri Akkaya (realkage) in the Arçelik 2026 Vulnerability Disclosure Hall of Fame list
Screenshot showing Basri Akkaya (realkage) in the Arçelik 2026 Vulnerability Disclosure Hall of Fame list
KomşuKomşuOfficial institution list
HOF2026

KomşuKomşu — 2026 Hall of Fame

2026 Hall of Fame recognition as “Basri Akkaya (realkage)” for responsible vulnerability disclosure.

Public recordView official record (opens in a new tab)
KomşuKomşu — 2026 Hall of Fame

View evidence

Screenshot showing Basri Akkaya “realkage” in the KomşuKomşu 2026 Vulnerability Disclosure Hall of Fame list
Screenshot showing Basri Akkaya “realkage” in the KomşuKomşu 2026 Vulnerability Disclosure Hall of Fame list

CVE Records

Public vulnerability identifiers assigned through coordinated disclosure.

3
CVSS 7.5Official finder credit
CVE2026

CVE-2026-16323

FuyaWeb Internet and Informatics ServicesArchitectPanel Web Admin Panel

Severity: HIGHCVSS v3.1

An execution-after-redirect vulnerability could allow an unauthenticated remote attacker to bypass authentication.

Authentication Bypass via Execution After Redirect in FuyaSoft's Architect Panel Web Management Panel

Public recordView research record (opens in a new tab)Official CVE record (opens in a new tab)

Competitions & Recognition

Competition results and institutional recognition supporting the research journey.

2

$ ls ./articles --recent

Recent articles

Concise, practical technical notes from my security work and learning.