EZVIZ has made security the cornerstone to everything we do and build. We thank all security researchers and professionals who help test, identify and mitigate potential vulnerabilities in EZVIZ products, to make sure we continue to respectfully protect people and homes.
Notice about Vulnerability in EZVIZ NAS products
Initial Release Date: 2026-02-28
If you believe you have discovered a security or privacy vulnerability, please do not hesitate to report it to our YesWeHack bounty program. If you don't want to register the program account, you can also send it directly to our email security@ezviz.com. Within one working day, we will acknowledge the vulnerability received and assess the problem; within three working days, we will provide a conclusion and, if necessary, contact the reporter. We will promptly provide you with updates on the issue's resolution.
Relevant business departments address vulnerabilities with remediation timelines determined by the severity and complexity of the issue. Critical and high-risk vulnerabilities are resolved within 24 hours, medium-risk vulnerabilities within three business days, and low-risk vulnerabilities within seven business days. Certain vulnerabilities may be subject to version release constraints, in which case remediation timelines are determined on a case-by-case basis. Critical or high-impact vulnerabilities may prompt the issuance of separate emergency security advisories.