How I Got Acknowledged by Rolls-Royce (BMW Group) 🚗🔐

May 4, 2026 3 min read Utsavpari Gosai

Hello Hackers 👨‍💻🔐

Rolls-Royce Logo

I hope you’re all doing well and continuing to secure our digital landscape 🌐🛡️

Today, I want to share my experience of getting recognized by Rolls-Royce wich owned by BMW Group 🚗💼

🚀 The Beginning

After being recognized by brands like Mercedes, Lamborghini (under Volkswagen Audi Group), and Ferrari, I decided to explore the Rolls-Royce bug bounty program.

During my research, I found their vulnerability disclosure policy and started testing 🔍🐛

🧪 The Discovery

While testing, I discovered an injection vulnerability 💉 along with an Oracle debug error message exposing internal system information ⚠️

This kind of information disclosure could potentially help attackers understand backend systems.

I responsibly reported the issue via their official disclosure email 📩

⏳ The Waiting Phase

After submitting the report, I waited patiently...

1 month ⏳… 2 months ⏳… 3 months ⏳… but no response ❌

Instead of giving up, I decided to dig deeper 🔎

📩 Direct Outreach

I found a cybersecurity officer associated with BMW and Rolls-Royce and reached out directly 📩

This turned out to be a great decision 👍

✅ Response & Outcome

I finally received a response from the security officer 🙌

Rolls-Royce Logo

They acknowledged my report, thanked me, and confirmed that the issue has been forwarded to the relevant team and is currently being fixed 🔧✅

🏅 Final Result

  • ✅ Vulnerability discovered and reported responsibly
  • ⏳ No response for 3 months initially
  • 📩 Direct communication led to acknowledgment
  • 🔧 Issue confirmed and under fixing stage
  • 🏆 Recognition from Rolls-Royce (BMW Group)

💡 Final Thoughts

  • 🔍 Deep research always pays off
  • ⏳ Patience is crucial in bug bounty hunting
  • 📩 Sometimes direct communication is necessary
  • 🏆 Recognition is a big achievement

That’s the story of how I got recognized by Rolls-Royce 🚀

Unfortunately, I cannot disclose full technical details yet as the issue is still being resolved 🔒

If you have any questions, feel free to reach out via my Linktree DMs 🔗💬

Thank You,
MR.X FACTOR

🔗 Handles:

← Back To Homepage