Infineon thanks security researchers who report vulnerabilities in our publicly reachable IT systems and services. Valid reports help us protect Infineon, our customers, and the digital infrastructure that depends on our technology.

Reports are handled under our Vulnerability Notification Process. Infineon does not operate a bug-bounty program and does not pay rewards. An entry on this page is our form of recognition.

  • Submit a report through the Vulnerability Notification Process (encrypted e-mail to cert@infineon.com).
  • After your report is validated, let us know whether you would like to appear on this page.
  • Choose how you wish to be credited: with your full name, an alias, or not at all.
  • Optionally, include an affiliation and a link to one professional profile (LinkedIn or X).

Removal: You may request removal at any time by e-mailing cert@infineon.com with the subject “Request of removal from WoF”.

Out-of-scope and invalid reports are not listed. This page does not publish technical details of findings.

The following researchers have helped us improve Infineon’s security.

No entries yet.