I reported a Critical Bug but haven't received any reply yet

General
1

Ticket ID: 9656513

Hello Team,

I would like to follow up regarding a critical security issue I reported on the Upstox platform on 15 November 2025 at 2:49 AM.
The vulnerability results in exposure of personally identifiable information (PII), making it a matter of Critical severity.

I have already submitted a Proof of Concept demonstrating the issue, along with a brief description and an immediate remediation suggestion for the technical team. However, I have not received any response or acknowledgment yet.

Kindly provide an update on the current status of this report.

Thank you for your time and attention.

Bhavish Choudhary
Researcher Name: AnonymoushackerxD

2

We appreciate you reporting this to us. We will check your ticket ID and get back to you on this. Thanks.

3

Hello Ushnota ji,

(Thanks for filling out this form: Bug Bounty Submission

Youā€™re receiving this email because you filled out the following form using your email address. This form is owned by RKSV Securities India Pvt. Ltd.. Make sure you recognize and trust this form before copying or clicking on any links. If it looks suspicious, report it.

Hereā€™s what was receive)

If you want my mail id its Bhavishchoudhary8800@gmail.com from which I reported the bug

4

Hello any updats

5

Hi @Bhavish_7253658,

Rest assure, I have raised this internally and we are already in the process of reviewing it. Iā€™ll get back to you soon with an update, thank you.

6

Thank you for your support.

Finally, I got Bounty. Iā€™ll share my necessary details via email.

1 Like
7

@Bhavish_7253658 - Sure. Thanks for letting us know!