Vulnerability Disclosures

Vulnerabilities we have found and reported to the organisations responsible through coordinated disclosure. To report a vulnerability to us, get in touch.
Featured Image
2026 • Scottish Government

The Scottish Government Open Data Portal Vulnerability Disclosure

Reported and resolved through the Scottish Government vulnerability disclosure programme. Published with coordinated timing after remediation.

ControlPlane AI Security Team responsibly discloses a critical hardcoded-admin-token vulnerability in the Scottish Government's open data portal.

Vulnerability disclosure
security pentesting cloud
Featured Image
2026 • Department for Education

The Department for Education 'Register of Training Providers' Vulnerability Disclosure

Reported and resolved through the Department for Education vulnerability disclosure programme. Published with coordinated timing after remediation.

ControlPlane AI Security Team responsibly discloses authorisation gaps in the Department for Education's Register of Training Providers.

Vulnerability disclosure
security pentesting cloud
Featured Image
2026 • Department for Education

The Department for Education 'Get Help Buying for Schools' Vulnerability Disclosure

Reported and resolved through the Department for Education vulnerability disclosure programme. Published with coordinated timing after remediation.

ControlPlane AI Security Team responsibly discloses an access-control vulnerability in the Department for Education's procurement support service.

Vulnerability disclosure
security pentesting cloud

We value your privacy

Cookies are used to enhance your browsing experience.