Is there any national or regional cibersecurity-related institution you can share your findings with?

They could put some more pressure on the manufacturer, or at least responsibly inform the public.