CVD Portal

VULNERABILITY REGISTER

Coordinated Disclosure Report

Please provide exhaustive details including reproduction steps and potential impact. Reports submitted here are encrypted and managed within our CRA compliance framework.

Target

The product or component your report affects. Pick the closest match, or Unknown Product if it is not listed.

Technical Details
Researcher

Leave empty to report anonymously. Anonymous reports are stored without your IP address, but can only be processed to a limited extent if we cannot reach you with follow-up questions.

Method

This helps us set the severity. A finding confirmed in source code only can need facts about our deployment that you do not have.

By submitting this report, you acknowledge the Security Policy. Vulnerabilities are managed under the CRA (EU 2024/2847) coordinated disclosure framework. Expect formal acknowledgment within 48 hours.

Data protection

The organisation operating this portal is the data controller for this report. The contact email, PGP key, and report content you provide are processed to coordinate remediation and may be shared with national authorities where the EU Cyber Resilience Act requires it. Leave the contact fields blank to report anonymously; anonymous reports are stored without your IP address.

CVD PORTAL

Powered by CVD Portal Infrastructure. Helping manufacturers selling into the EU achieve CRA compliance through managed vulnerability coordination.

RESOURCESPlatform HomeSecurity PolicySecurity Advisories
LEGALPrivacy PolicyTerms of Service

© 2026 OmniOn Power • ALL RIGHTS RESERVED

CRA ARTICLE 13 COMPLIANCE FRAMEWORK

This portal provides a coordinated vulnerability disclosure channel. Operating it supports, but does not by itself establish, conformity or a presumption of conformity with the EU Cyber Resilience Act.