Report a Vulnerability

Thank you for helping us improve the security of Solinteg products. Send reports to security@solinteg.com and encrypt sensitive details with our PGP key.

Our PGP Key

Verify the fingerprint before encrypting. Only trust the key that matches exactly.

Download
62AC8C5B6F9EE038428C7AE83CDA95662D213E32.asc
Fingerprint
62AC 8C5B 6F9E E038 428C 7AE8 3CDA 9566 2D21 3E32
Identity
Solinteg Security (Vulnerability Disclosure) <security@solinteg.com>

Verify the fingerprint before encrypting. Compare the fingerprint shown by your PGP software against the one above, group by group. The fingerprint served on this HTTPS page is the authoritative copy.

gpg --locate-keys security@solinteg.com

How to Encrypt Your Report

Pick whichever method matches your environment.

Import and verify our key

# 1) Download and import
curl -O https://security.solinteg.com/62AC8C5B6F9EE038428C7AE83CDA95662D213E32.asc
gpg --import 62AC8C5B6F9EE038428C7AE83CDA95662D213E32.asc

# 2) Verify the fingerprint
gpg --fingerprint security@solinteg.com
# must show: 62AC 8C5B 6F9E E038 428C  7AE8 3CDA 9566 2D21 3E32

Encrypt a report file

gpg --encrypt --recipient security@solinteg.com vulnerability-report.txt
# produces vulnerability-report.txt.gpg — attach this file to your email

Encrypt short text for the email body

gpg --armor --encrypt --recipient security@solinteg.com
# type or paste your text, then press Ctrl-D (Linux/macOS) or Ctrl-Z + Enter (Windows)
# copy the resulting "BEGIN PGP MESSAGE" block into the email body

Tip: Include your own public key or fingerprint so we can encrypt our reply.

Download 62AC8C5B6F9EE038428C7AE83CDA95662D213E32.asc from the link above.

Go to Account Settings → End-To-End Encryption → OpenPGP Key Manager.

File → Import Public Key(s) From File → select the downloaded .asc file.

Double-click the imported key and check the fingerprint against the one above.

Compose a message to security@solinteg.com, click the Security dropdown, and enable Encrypt (you may also Sign with your own key).

Send. Attachments are encrypted together with the message.

Install the Mailvelope extension for Chrome / Edge / Firefox.

Open the Mailvelope icon → Keyring → Import → select 62AC8C5B6F9EE038428C7AE83CDA95662D213E32.asc.

Verify the fingerprint of the imported key against the one above.

In your webmail compose window, click the Mailvelope lock icon to open the encrypted editor.

Write your report inside the encrypted editor, add attachments if needed, click Encrypt, then send.

What to Include in Your Report

To help us triage quickly, your report should include at least:

Your organization and contact information
Affected products, models and firmware versions
A clear description of the vulnerability
Known exploitation information, if any
Proof-of-concept, screenshots, logs, etc.
Your PGP public key or fingerprint for replies

Reports in English are preferred. We also accept reports in Chinese.