Independent security researcher

Curiosity is a security tool.

I'm Muhammad Arya, a 15-year-old researcher from Jakarta. I find and responsibly disclose vulnerabilities in software and systems people rely on.

Explore research A little more about me

Selected work

A few things I've learned by looking closely.

CVE-2026-5188wolfSSLSecurity vulnerability discovered and responsibly reported.CVE-2026-3229wolfSSLSecurity vulnerability discovered and responsibly reported.CVE-2026-6325wolfSSLReserved — pending coordinated disclosure.View all research

Beyond the reports

Research is also about sharing the path.

wolfSSL Hunting Experience: Cerita dari seorang bug hunter pengangguran :v

Sharing my journey finding multiple CVEs in wolfSSL, from setup to discovery.

Chasing a valid in the stars: My first nasa.gov find

The story of how I found my first vulnerability on NASA’s infrastructure.

Working principle

Find carefully. Explain clearly. Leave things safer.

8 organizations have acknowledged the work so far.