Reporting security vulnerabilities

Vulnerabilities in NODER products should be reported to . A report should include the model, the firmware version, and steps to reproduce the issue. You are not required to provide your identity – reports may be submitted anonymously.

We acknowledge receipt within 5 business days and provide an initial classification within 15 business days. We release fixes without undue delay.

We ask that you do not disclose details publicly until a fix has been released or 90 days have passed since the report, that you do not test on our customers' production systems without their consent, and that you do not copy other people's data. We do not take legal action against researchers who act in accordance with these rules and, with their consent, we credit them in the security advisory.

Security advisories

Information about resolved vulnerabilities is published here. No advisories have been published to date.

Support period

We provide security updates free of charge for 10 years after the end of sales of a given model.

This policy implements the requirements of Regulation (EU) 2024/2847 (Cyber Resilience Act).

Last updated: 08.10.2026.