Security & CVE Disclosure
PrivateLAN is committed to transparent and responsible vulnerability disclosure in accordance with the EU Cyber Resilience Act (CRA).
Vulnerability Disclosure Policy
We follow a coordinated disclosure approach. If you discover a security vulnerability in PrivateLAN, please report it privately so we can investigate and issue a fix before public disclosure. We aim to acknowledge reports within 5 business days and release a patch within 90 days.
Report vulnerabilities via our support ticket system — or see our machine-readable security.txt (RFC 9116).
We will not take legal action against researchers who act in good faith, avoid data destruction, and do not disclose vulnerabilities publicly before a fix is available. We credit researchers in our CVE records unless they prefer anonymity.
No vulnerabilities disclosed
No security vulnerabilities have been publicly disclosed for PrivateLAN at this time. If you believe you have found a vulnerability, please submit a support ticket.
