Diebold Vulnerability Disclosure

generated: '2026-09-06'
method: searched
probe: true
source: https://www.dieboldnixdorf.com/en-us/support/globalsecurityportal/contactsecurity/
program:
  published: true
  kind: contact-form
  name: Global Security Portal — Contact Security Experts
  url: https://www.dieboldnixdorf.com/en-us/support/globalsecurityportal/contactsecurity/
  intake: web form
  categories:
  - Compliance request regarding security vulnerabilities
  - Potential vulnerabilities related to enterprise infrastructure
  - Security vulnerabilities with products and services
  security_txt: false
  pgp_key: false
  bug_bounty: false
  safe_harbor_stated: false
  sla_stated: false
evidence:
- source: https://www.dieboldnixdorf.com/en-us/support/globalsecurityportal/contactsecurity/
  status: 200
  kind: disclosure intake form
  detail: Page titled "Global Security Portal | Contact Security Experts". The "Select Type of Security Concern"
    field offers three vulnerability-reporting options verbatim as listed above; the page states someone from the
    security team will make contact.
- source: https://www.dieboldnixdorf.com/en-us/support/globalsecurityportal/
  status: 200
  kind: security portal
  detail: Threat-intelligence and security-notification portal; publishes info.gsp@dieboldnixdorf.com for ACTive
    Security Notifications access requests.
- source: https://www.dieboldnixdorf.com/.well-known/security.txt
  status: 404
  kind: negative probe
- source: https://hackerone.com/dieboldnixdorf
  status: 404
  kind: negative probe
- source: https://bugcrowd.com/dieboldnixdorf
  status: 404
  kind: negative probe
correction: This artifact previously cited https://www.dieboldnixdorf.com/vulnerability-disclosure/ as its source.
  That URL returns HTTP 200 but serves the site's soft-404 page (HTML titled "404 | Diebold Nixdorf", meta robots
  noindex) — it is not a disclosure policy and the page does not exist. Corrected 2026-09-06 to the Global Security
  Portal intake form, which is a real, reachable vulnerability-reporting channel. No security.txt, PGP key, bug
  bounty, safe harbour statement or response SLA is published.