SECURITY ACKNOWLEDGMENTS
Security researchers make our products safer, and we want to say thank you in public. This page lists the people who reported vulnerabilities in Y Soft products and worked with us to get them fixed before the details went public.
Finding a vulnerability takes skill. Reporting it responsibly takes patience. Both deserve credit.
Report a vulnerability
If you believe you have found a security issue in SAFEQ Cloud, SAFEQ 6, YSoft HARDWARE (including card readers), or another Y Soft product, please report it through our vulnerability reporting form. You can also email security@ysoft.com. For sensitive details, please encrypt your message with our PGP key. Our machine-readable contact details are published in security.txt.
A good report helps us move faster. Please include:
A good report helps us move faster. Please include:
-
The affected product, component, and version
-
A clear description of the issue and its potential impact
-
Steps to reproduce, and a proof of concept if you have one
-
How you would like to be credited, if at all
While you investigate, please:
- Only access the data you need to demonstrate the issue, and do not keep, modify, or share it
- Avoid anything that degrades service for our customers, such as denial-of-service testing
- Do not use social engineering, phishing, or physical attacks
- Give us reasonable time to fix the issue before you disclose it publicly
How we credit researchers
We add a researcher to this page when:
- They are the first to report a valid security vulnerability in a Y Soft product
- They followed coordinated disclosure and did not publish details before a fix was available
- They agree to be named, in the form they choose (name, handle, company, or link)
Entries are published once the fix has been released. If you prefer to stay anonymous, that is fine too, and our thanks are no smaller.
HALL OF FAME
2026
Researcher
Affiliation
Finding
Hubert Decyusz
AFINE
SAFEQ 6, CVE-2025-13175
Karol Mazurek
AFINE
SAFEQ 6, CVE-2025-13175
Naif Alsaleh
Independent researcher
SAFEQ 6 (legacy version), independent report of CVE-2021-31859
2024
Researcher
Affiliation
Finding
Matei "Mal" Badanoiu
Independent researcher
SAFEQ 6, CVE-2022-23861, CVE-2022-23862
Marian-Razvan Ilisanu
Independent researcher
SAFEQ 6, CVE-2022-23861
2018
Researcher
Affiliation
Finding
Ca Way Le
usd AG
SAFEQ 6 and card reader, CVE-2018-15498
Stefan Schmer
usd AG
SAFEQ 6 and card reader, CVE-2018-15498
Questions about this page? Contact us through the vulnerability reporting form. For more about how we protect our products and customers, visit our Information Security Policy and Trust Center.