Submitted without an account. Contact details are optional.
You may submit anonymously
1. The vulnerability
Describe the technical problem, the affected component and the estimated impact — as much as you know; nothing beyond the title is mandatory.
One sentence saying what this is about.
How it is reproduced, which system is affected, what you observed.
The name and version, if you know them.
CVE identifiers, links to publications, if there are any.
2. Your details
Optional. Contact details let the agency confirm receipt and share its assessment with you.
The first name and the last name are filled in together, or not at all.
The only channel through which we can reach you, including for an anonymous submission.
Tick this if you need technical support from the Cybersecurity Agency.
3. Attached file (optional)
You immediately receive confirmation of receipt and the case number.