description General page

Report a vulnerability

Report non-publicly known vulnerabilities through the Australian Cyber Security Centre’s (ACSC) coordinated vulnerability disclosure service.

Published
Last reviewed
|

Please report any vulnerabilities you discover that are not yet publicly known, if they are:

  • high-impact vulnerabilities that may affect many users, critical national infrastructure or physical safety and could occur in software components, protocols or hardware
  • vulnerabilities in websites or systems for big business or government entities.

Coordinating the disclosure of vulnerabilities can minimise the potential harm caused by those vulnerabilities being exploited.

This disclosure will give vendors and developers more time to mitigate the vulnerabilities and enable affected systems of national interest to reduce their exposure. 

The Australian Signals Directorate’s Australian Cyber Security Centre's (ASD’s ACSC) has developed a secure process to enable reporting of a vulnerability.

Fill in your contact details below and a member of the ASD’s ACSC will contact you to proceed with the process and provide information about the secure email certificate.

By submitting this form you acknowledge that you are not reporting a cybercrime.
To report a cybercrime please use the Report a Cybercrime form.
CAPTCHA
This question is for testing whether or not you are a human visitor and to prevent automated spam submissions.
Was this helpful?
Yes this was helpful
No this was not helpful

Thanks for your feedback!

We welcome additional feedback below.

How easy was it to find information?
How easy was it to understand this information?
After reading this, how confident are you that you know what to do next?
Overall, how satisfied were you with your experience on this website today?
vertical_align_top Back to top