Cybersecurity reporting

Coordinated vulnerability disclosure policy

CPAC Systems is committed to maintaining the security of its products in accordance with the EU Cyber Resilience Act (CRA). We encourage responsible reporting of vulnerabilities.

Please report vulnerabilities to csirt@cpacsystems.se or fill out the form below.
Reports should include a description of the issue, affected product(s), and steps to reproduce.

Where applicable under the CRA, vulnerabilities may also be reported or shared via the EU Single Reporting Platform and relevant authorities (e.g., ENISA, national CSIRTs), particularly for actively exploited vulnerabilities or incidents.


Our Commitment
• Acknowledge receipt without undue delay
• Assess and remediate vulnerabilities in a timely manner
• Coordinate with relevant stakeholders including national CSIRT:s and ENISA where required.
• Submit required notifications via the CRA Single Reporting Platform for exploited vulnerabilities
• Provide remediation guidance or security advisories