Report a vulnerability.

You have found a security issue in Unwired Edge Cloud, in Unwired Edge Cloud OS, in Unwired Edge WiFi or on our website? Thank you for telling us. We take every report seriously, treat it confidentially and get back to you if you wish.

Vulnerability Report

Affected product or service

Version, component or URL (optional)

Firmware version, hostname or URL of the affected system.

Description of the vulnerability

Type of vulnerability, affected function, steps to reproduce, possible impact. Please do not include passwords, credentials or personal data.

Attachments (optional)

Choose files

Screenshots, logs or proof of concept — up to 3 files of 10 MB each (PNG, JPG, GIF, WebP, PDF, TXT, ZIP). Please send log files as .txt or .zip.

Contact for follow-up questions (optional)

You may report anonymously. With an email address we can ask follow-up questions and tell you when the issue is fixed.

Name

Email address

Organisation

I am reporting this vulnerability in good faith and confirm that the information is accurate to the best of my knowledge. Information on how we process your data is in our privacy policy.

What we need

The affected product, service or system – with version, hostname or URL where possible
A clear description of the vulnerability and its potential impact
Steps to reproduce, screenshots, logs or a proof of concept
A way to contact you if you want follow-up questions and feedback – anonymous reports are welcome too

Please do not send

Passwords, API keys, access tokens or other credentials
Personal data or data belonging to our customers – evidence of access is enough, we do not need the contents
Malicious code beyond a harmless proof of concept

What happens after your report

Acknowledgement within three business days if you left an email address
Initial assessment by our security team within ten business days; we get in touch with any questions
Remediation according to severity; we keep you informed about the progress
Where the EU Cyber Resilience Act (CRA) requires it, we report actively exploited vulnerabilities and severe incidents through the ENISA single reporting platform
After the fix we coordinate any publication with you and credit you as the finder if you wish

Ground rules

Anyone who follows these rules acts in good faith as far as we are concerned. We will not take legal action in that case and ask for the following consideration:

Access data only as far as needed to demonstrate the vulnerability; do not modify or delete anything
No attacks on availability (denial of service), no social engineering, no physical access and no attacks on third parties
Give us reasonable time to fix the issue before publishing details – usually 90 days from our acknowledgement
Treat anything you learn about our customers along the way as confidential
We cannot make commitments on behalf of third parties or law-enforcement authorities; the commitment applies to Unwired Networks as the operator of the systems listed

Scope

This page covers Unwired Edge Cloud and its console, Unwired Edge Cloud OS on our routers, Unwired Edge WiFi and unwirednetworks.com and unwired.at including all their subdomains. Vulnerabilities in partner products are forwarded when we operate them; otherwise please contact the respective vendor directly.

A machine-readable version of this contact information is available at /.well-known/security.txt (RFC 9116). Files you upload through the form are transferred encrypted, stored in an area that is not publicly reachable and deleted from our web server after 90 days at the latest; we do not store your IP address for this form.