INFICON Security & Vulnerability Disclosure

INFICON is committed to the security of its products and digital services and complies with the EU Cyber Resilience Act (Regulation (EU) 2024/2847), including the vulnerability and incident reporting obligations under Article 14.

This page is INFICON's single point of contact for reporting security vulnerabilities or incidents affecting INFICON products. Reports submitted through the form below are received by our Product Security Incident Response Team (PSIRT), which assesses and responds in line with CRA-mandated timelines: an early warning within 24 hours, a full notification within 72 hours, and — where applicable — information to affected users without undue delay, once we become aware that a vulnerability is being actively exploited or that a security incident has a significant impact.

We follow coordinated vulnerability disclosure practices consistent with ISO/IEC 29147 and ISO/IEC 30111. We ask reporters to give us reasonable time to assess and remediate a reported issue before any public disclosure, and we do not pursue legal action against researchers who report in good faith through this channel.

Please provide as much detail as possible in the form below, including whether the vulnerability is being actively exploited. All submissions are treated confidentially.

Last reviewed: 10 September 2026.