Report a Security Vulnerability

Steps to Report a Vulnerability

If you have discovered or suspect a security vulnerability on any systems owned or operated by UC Berkeley, please report it immediately:

Report the vulnerability to the Information Security Office by emailing security@berkeley.edu

Please provide as much information as possible; however:
Never include sensitive information over email, instead, call us at: (510) 664-9000 (option 4).

Include in your report:

  • Your name and contact information
  • Which systems are affected (IP addresses, hostnames, URLs, etc.)
  • Description of the security vulnerability and steps to reproduce the issue
  • Date and time the vulnerability was discovered
  • Any other known resources affected
Content tags