What is the official website of 24S ?

The official website of 24S is https://www.24s.com/en-fr/women.

What is 24S's cybersecurity risk score?

24S has an AI-generated cybersecurity risk score of 764 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has 24S experienced?

According to Rankiteo, 24S currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has 24S been affected by any supply chain cyber incidents ?

According to Rankiteo, 24S has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Salesforce (Incident ID: TIFLVMCHR1770865579) Salesforce (Incident ID: LOUPARVOLTIFJAP1770908674)

Does 24S have SOC 2 Type 1 certification ?

According to Rankiteo, 24S is not certified under SOC 2 Type 1.

Does 24S have SOC 2 Type 2 certification ?

According to Rankiteo, 24S does not hold a SOC 2 Type 2 certification.

Does 24S comply with GDPR ?

According to Rankiteo, 24S is not listed as GDPR compliant.

Does 24S have PCI DSS certification ?

According to Rankiteo, 24S does not currently maintain PCI DSS compliance.

Does 24S comply with HIPAA ?

According to Rankiteo, 24S is not compliant with HIPAA regulations.

Does 24S have ISO 27001 certification ?

According to Rankiteo,24S is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does 24S operate in ?

24S operates primarily in the Retail Apparel and Fashion industry.

How many employees does 24S have ?

24S employs approximately 207 people worldwide.

Does 24S own any subsidiaries ?

24S presently has no subsidiaries across any sectors.

How many LinkedIn followers does 24S have ?

24S's official LinkedIn profile has approximately 62,639 followers.

What is the NAICS classification code for 24S ?

24S is classified under the NAICS code 448, which corresponds to Clothing and Clothing Accessories Stores.

Does 24S have a Crunchbase profile ?

No, 24S does not have a profile on Crunchbase.

Does 24S have a LinkedIn profile ?

Yes, 24S maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/24s.

How many cybersecurity incidents has 24S experienced ?

As of June 14, 2026, Rankiteo reports that 24S has experienced 13 cybersecurity incidents.

How many peer or competitor companies does 24S have ?

24S has an estimated 5,041 peer or competitor companies worldwide.

What types of cybersecurity incidents has 24S faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware, Breach and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

24S

Boost Score +25 with badge (5 left)

764

/1000

Fair

789

/1000

Fair

24S Vendor Cyber Rating & Cyber Score

24s.com

Add Your Compliance Badge

24S is a Maison within the LVMH (Louis Vuitton Moët Hennessy) group. Since 2017, 24S has been the ultimate online curator of Parisian style, offering an exclusive selection of over 150 Fashion and Beauty brands. From discovering exclusive collections to the thrill of opening our signature boxes, pleasure is at the heart of the 24S experience. Here, fashion becomes a playground where you can reinvent yourself endlessly. A Parisian selection. 24S gives women all over the world the key to Parisian elegance. The style experts at 24S channel their Parisian style to select the most-coveted pieces from each collection, and style them with the season's latest trends. From historic fashion houses to emerging designers, the newest trends to

24S A.I CyberSecurity Scoring

Scoring History

24S

24S CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

SEPHORA

Cyber Attack

6/2026

SEPTHE178049083...

SEPHORA

Breach

4/2026

SEP1780946094

Christian Dior Cout...

Breach

3/2026

CHR1773773151

Christian Dior Cout...

Breach

2/2026

Salesforce

TIFLVMCHR177086...

24S

Breach

9/2025

CHR159271509302...

24S

Breach

7/2025

LVM852071225

24S

Breach

7/2025

LOU026510209062...

Christian Dior Cout...

Ransomware

100

5/2025

CHRMAR176950442...

24S

Cyber Attack

5/2025

CHR316343111172...

24S

Breach

1/2025

CHR706072225

Louis Vuitton

Breach

1/2025

Salesforce

LOUPARVOLTIFJAP...

24S

Breach

100

11/2024

CHR243322409162...

24S

Breach

07/2019

SEP2372423

Loading…

A.I.

24S Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for 24S

Incidents vs Retail Apparel and Fashion Industry Avg (This Year)

No incidents recorded for 24S in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for 24S in 2026.

Incident Types 24S vs Retail Apparel and Fashion Industry Avg (This Year)

No incidents recorded for 24S in 2026.

Incident History - 24S (X = Date, Y = Severity)

Loading…

SUBSIDIARY

24S Subsidiaries

24S

Retail Apparel and Fashion

Website: https://www.24s.com/en-fr/women

Company Size: 51-200 employees

LVMHRetail Luxury Goods and Jewelry

Louis VuittonRetail Luxury Goods and Jewelry

DFS Group LimitedRetail

Samaritaine Paris Pont-NeufRetail

Acqua di ParmaRetail Luxury Goods and Jewelry

ThéliosRetail Luxury Goods and Jewelry

ZENITH WatchesRetail Luxury Goods and Jewelry

SEPHORARetail

Christian Dior CoutureRetail Luxury Goods and Jewelry

KENZO ModeRetail Apparel and Fashion

BerlutiRetail Luxury Goods and Jewelry

Maison Francis KurkdjianPersonal Care Product Manufacturing

FRED JewelryRetail Luxury Goods and Jewelry

NOWNESSMedia Production

LVMH Fashion Group North America Retail Luxury Goods and Jewelry

REPOSSIRetail Luxury Goods and Jewelry

Nona SourceRetail Apparel and Fashion

NUDE SkincarePersonal Care Product Manufacturing

HeristoriaRetail Luxury Goods and Jewelry

BvlgariRetail Luxury Goods and Jewelry

CELINERetail Luxury Goods and Jewelry

Benefit CosmeticsPersonal Care Product Manufacturing

LoeweRetail Luxury Goods and Jewelry

GuerlainPersonal Care Product Manufacturing

GIVENCHYRetail Luxury Goods and Jewelry

Loro PianaRetail Luxury Goods and Jewelry

BelmondHospitality

Copacabana Palace, A Belmond HotelHospitality

Le Manoir aux Quat'Saisons, A Belmond HotelHospitality

Maroma, A Belmond HotelHospitality

Mount Nelson, A Belmond HotelHospitality

Hotel Cipriani, A Belmond HotelHospitality

Venice Simplon-Orient-ExpressHospitality

Grand Hotel EuropeHospitality

Caruso, A Belmond HotelHospitality

Reid's Palace, A Belmond HotelHospitality

La Residencia, A Belmond HotelHospitality

Hotel das Cataratas, A Belmond HotelHospitality

The Cadogan, A Belmond HotelHospitality

Grand Hotel Timeo, A Belmond HotelHospitality

Belmond SafarisTravel Arrangements

Villa San Michele, A Belmond HotelHospitality

Castello di Casole, A Belmond HotelHospitality

Cap Juluca, A Belmond HotelHospitality

Villa Sant'Andrea, A Belmond HotelHospitality

British Pullman, A Belmond TrainTravel Arrangements

Royal Scotsman, A Belmond TrainTravel Arrangements

La Samanna, A Belmond HotelHospitality

Palacio Nazarenas, A Belmond HotelHospitality

Las Casitas, A Belmond HotelHospitality

Casa de Sierra Nevada, A Belmond HotelHospitality

Rio Sagrado, A Belmond HotelHospitality

Sanctuary Lodge, A Belmond HotelHospitality

Jimbaran Puri, A Belmond HotelHospitality

Eastern & Oriental Express, A Belmond TrainHospitality

Monasterio, A Belmond HotelHospitality

Les Bateaux BelmondHospitality

Splendido, A Belmond HotelHospitality

Miraflores Park, A Belmond HotelHospitality

21 ClubRestaurants

LVMH Fragrance BrandsPersonal Care Product Manufacturing

Parfums GivenchyPersonal Care Product Manufacturing

KENZO ParfumsPersonal Care Product Manufacturing

MAKE UP FOR EVERPersonal Care Product Manufacturing

TAG HeuerRetail Luxury Goods and Jewelry

RIMOWARetail Luxury Goods and Jewelry

CHAUMETRetail Luxury Goods and Jewelry

Marc JacobsRetail Apparel and Fashion

HublotRetail Luxury Goods and Jewelry

Les EchosNewspaper Publishing

Les Echos STARTNewspaper Publishing

Les Echos Leadership & ManagementInformation Services

Les Echos Entrepreneurs Médias en ligne

The InnovatorNewspaper Publishing

FendiRetail Luxury Goods and Jewelry

Loading…

24S Similar Companies

Bata Group

cb bata.com

The Bata Group is one of the world's leading manufacturers and retailers of quality footwear. A global concern with more than 32,000 employees, 21 production facilities, over 5,300 stores in more than 70 countries across the globe, Bata has been providing the best shoes at the best prices, backed by unparalleled service, for 125+ years. Since its founding on September 21, 1894, by Thomas Bata, the company has consistently demonstrated its commitment to responsible and innovative business models in the belief that capital is not just money, buildings or technology, but, more importantly, people, knowledge and core values. This visionary approach has enabled the company to meet each new challenge with creativity and foresight, while earning the trust and confidence of customers, employees and the communities in which it does business. Today, Bata's pioneering decentralized production system, featuring semi-autonomous regional facilities guided by three regional business units, allows the company to quickly adapt to changes in the marketplace and seize potential growth opportunities. It also continues Bata's long tradition of being sensitive to cultural and national differences, and enables it to proudly function as a local company in every country it serves. Follow us on facebook.com/bata

C&A

c-and-a.com

Ever since our founding by the brothers Clemens and August in 1841, C&A has been at the forefront of fashion. From making 'ready-to-wear' a thing when custom-made was the norm, to popularising miniskirts in the 60s, introducing the Com-bi-kini in the 70s, Bio Cotton in early 2000 and the first Cradle-to-Cradle Gold certified garment (www.c-a.com/c2c) in 2017 - we have always evolved with the times, making stylish and quality clothes possible for everyone. And while C&A and the world around us has changed over the decades, one thing has remained the same: our dedication to offering sustainable and quality fashion for the entire family. Each day we welcome millions of visitors in about 1300 stores across 17 European countries. C&A is one of the most enduring and pioneering retailer brands in global apparel. That is because, for us the future is not tomorrow, or next quarter. We think in generations. This also means that we aspire for a future fashion industry that is more innovative and sustainable; one that has moved towards a circular future, and promotes a cycle of use, reuse and rebirth of clothing. That future will be possible because of our remarkable colleagues. From customer friendly Sales Associates to stylish Designers and expert Merchandise Planners – we all share a common passion and respect for our customers, our planet and each other. Do you see yourself as part of this strong team? Then visit us on https://www.c-and-a.com/eu/en/corporate/company/careers/start to browse our job opportunities - and join the company! Imprint: https://www.c-and-a.com/de/de/corporate/impressum/

Under Armour

underarmour.com

Under Armour is obsessed with being better, stronger, and more focused than anyone else out there. Our mission: to make athletes better. Our vision: to inspire you with performance solutions you never knew you needed and can’t imagine living without. Our values define and unite us, the beliefs that are the red thread that connect everyone at Under Armour. Our values are rallying cries, reminding us why we’re here, and fueling everything we do. LOVE ATHLETES We believe in waking up every morning to make athletes legendary. From the best of the best to the ones just getting started, we put the athlete at the center of everything we do. We create fearlessly with the courage and conviction to defy convention. We innovate by taking bold and smart risks. We show up big where athletes train, compete, and recover. CELEBRATE THE WINS We believe our victories, big and small, bring us together as a team. We celebrate our accomplishments, giving credit where it's due. We take time to have fun. We channel past successes to inspire our next win. STAND FOR EQUALITY We believe sport is the great unifier. We don't sit on the sidelines; we speak up for fairness and equity. We treat each other with respect. We apply different perspectives in our work. We come together as a force for good to serve the communities we represent. ACT SUSTAINABLY We believe our work is not just what we do but how we do it. We work ethically and efficiently to perfect performance while reusing the Earth's resources. We seek new information to develop lasting solutions. We protect our planet for all who now play, and all who will play, on our home field. FIGHT ON TOGETHER We believe strength is built through tackling adversity. We act with an enterprise mindset in the best interest of the Brand. We help each other overcome obstacles. We act with integrity, have honest conversations and grow over mistakes. We approach challenges with positive intent and never quit.

C&A Brasil

cea.com.br

A C&A foi fundada em 1841 pelos irmãos holandeses Clemens e August. Suas iniciais deram origem ao nome da marca. Somamos mais de 1,8 mil unidades em 24 países da Europa, América Latina e Ásia e estamos entre as maiores redes de varejo do mundo. No Brasil, tudo começou em 1976, com a inauguração da nossa primeira loja no Shopping Ibirapuera, em São Paulo. Claro que, desde lá, muita coisa mudou. Mas nossa filosofia de trabalho continua a mesma – oferecer o melhor da moda por preços acessíveis! Hoje já temos mais de 330 lojas em 150 cidades e mais de 15 mil profissionais empregados. Muita gente, não é!? E sabe qual é o segredo do nosso sucesso? Além da busca constante por inovação, há também nosso esforço para superar as expectativas das pessoas e deixar um legado positivo. Desde outubro de 2019 somos uma empresa listada na Bolsa brasileira (B3), com destaque no varejo brasileiro em aspectos que englobam desde a sustentabilidade na rede de fornecimento até a jornada omnicanal oferecida a nossa cliente. Missão e valores Somos uma empresa inovadora, divertida e, acima de tudo, apaixonada pelas pessoas. Ao longo de mais de 180 anos de história, atuamos com ética e foco para que você e todos os nossas clientes estejam sempre satisfeitos. A responsabilidade social e a transparência acompanham a a marca desde o início e são compartilhadas com quem nos relacionamos - funcionários, fornecedores, clientes, investidores e a comunidade. Publicamos anualmente o Relatório de Sustentabilidade, reforçando o compromisso com a transparência em todas as áreas de atuação da empresa e construindo uma moda com impacto positivo. Informamos que tópicos de publicidade, spam ou que não estiverem de acordo com a proposta desta página serão removidos.

URBN (Urban Outfitters, Anthropologie Group, Free People & Nuuly)

urbn.com

URBN Urban Outfitters, Inc. (www.urbn.com) is a portfolio of global consumer brands comprised of Anthropologie, Anthropologie Weddings, Free People, FP Movement, Terrain, Urban Outfitters, Nuuly, Reclectic, and Menus & Venues. At URBN, we Lead with Creativity…. Creativity guides our approach to product, environment, experience, and community. It drives our vision, strategy, and decision-making. It touches every job at URBN. Over the last 50 years, we have inspired our customers through our creative and entrepreneurial approach to products and services.

Ralph Lauren

ralphlauren.com

Ralph Lauren Corporation (NYSE:RL) is a global leader in the design, marketing and distribution of luxury lifestyle products in five categories: apparel, footwear & accessories, home, fragrances and hospitality. For more than 50 years, Ralph Lauren has sought to inspire the dream of a better life through authenticity and timeless style. Its reputation and distinctive image have been developed across a wide range of products, brands, distribution channels and international markets. The Company’s brand names – which include Ralph Lauren, Ralph Lauren Collection, Ralph Lauren Purple Label, Polo Ralph Lauren, Double RL, Lauren Ralph Lauren, Polo Ralph Lauren Children and Chaps, among others – constitute one of the world’s most widely recognized families of consumer brands.

Tapestry

tapestry.com

Our global house of brands unites the magic of Coach and Kate Spade New York. By intertwining different people and ideas, we push ourselves in our work and expand the bounds of possibility. Learn about our iconic brands: tapestry.com/our-brands We’ve grown by finding people dedicated to the dream all over the world. We hold ourselves to high standards in every material and process, and we embrace difference by design because diverse perspectives are at the heart of creativity. We find brilliance in the intersections—of beauty and function, of heritage and innovation, of accessibility and aspiration—which is how we bring together magic and logic in our craft. Find out about our people and employer priorities: tapestry.com/responsibility/our-people The result is that we stand taller together, elevating the best in our people and brands. We use our collective strengths to move our customers and empower our communities, to make the fashion industry sustainable, and to build a house that’s equitable, inclusive, and diverse. Individually, our brands are iconic. Together, we can stretch what’s possible. See our values and commitments to support our people, communities and planet: tapestry.com/responsibility __ Please Be Advised - Recruitment Scams: Tapestry and its brands will only reach out to interview, make an offer of employment or conduct onboarding activities for candidates who have applied through our careers site. If you find a job posting on a third-party job site, such as LinkedIn, please know that a legitimate posting will direct you to our careers site to apply. When interviewing for a position, the candidate experience will include live interaction, such as a video conference or phone call, with a Recruiter and/or company employee(s). Be aware of suspicious recruitment activity. If you think you are a victim of an employment scam, please visit the Federal Trade Commission website: https://www.consumer.ftc.gov/articles/0243-job-scams

HUGO BOSS

hugoboss.com

At HUGO BOSS, we firmly believe that the passion and dedication of our employees is the essence for the successful execution of our “CLAIM 5 TOUCHDOWN” growth strategy. A strong commitment to empowering people and teams is therefore firmly anchored in “CLAIM 5 TOUCHDOWN”. In this context, our HUGO BOSS values — entrepreneurial spirit, personal ownership, team mentality, simplicity & quality, and youthful spirit — play a key role. They form the guiding principle for day-to-day cooperation and are intended to foster a spirit of mutual trust. The aim is to create an environment that enables all employees to develop their individual talents and thus directly contribute to the success of “CLAIM 5 TOUCHDOWN”. On top of that, HUGO BOSS intends to continue positioning itself as one of the most attractive employers in the fashion industry. This, in turn, should enable us to attract the best talents in the sector.

Levi Strauss & Co.

cb levistrauss.com

You’re an original. So are we. We’re a company of people who like to forge our own path. We invented the blue jean in 1873, and we reinvented khaki pants in 1986. We pioneered labor and environmental guidelines in manufacturing. And we work to build sustainability into everything we do. We just might be the original startup. Our brands — Levi’s®, Dockers®, Beyond Yoga®, Denizen® and Signature by Levi Strauss & Co.™ — stand for freedom and self-expression around the world. And for more than 170 years, we’ve used the strength of our brands to lead with our values and make an outsized impact on the world. There’s plenty of room to make your mark here. We employ more than 15,000 people around the world, and this is a place where everyone contributes to the conversation. Levi Strauss & Co. is an equal opportunity employer and all qualified applicants will receive consideration for employment without regard to race, color, religion, gender, national origin, disability status, protected veteran status or any other characteristic protected by law.

Loading…

NEWS

24S CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 04, 2026 10:32 AM

Pakistan Sets Up 24/7 Cybersecurity Control Room Amid Rising Threats

The Government of Pakistan's National Cyber Emergency Response Team (nCERT) has established a 24/7 National Cybersecurity Control Room at...

Read Article

February 24, 2026 08:00 AM

Cybersecurity Showdown: CrowdStrike’s Acquisition Spree vs Palo Alto’s Platform Play

Both CrowdStrike (NASDAQ: CRWD) and Palo Alto Networks (NASDAQ: PANW) operate at the center of enterprise cybersecurity, share the same...

Read Article

February 18, 2026 08:00 AM

CIRA MDR delivers a 24/7 Canadian-based managed detection and response cybersecurity service

Calian signs on as first service provider for CIRA MDR with their Canadian-based security operations centre...

Read Article

February 09, 2026 08:00 AM

Consider These 2 Cybersecurity Stocks as AI Threats Surge in 2026

Palo Alto Networks ... Palo Alto Networks (NASDAQ:PANW) is another cybersecurity company that's misunderstood and could be quick to recover after...

Read Article

February 06, 2026 08:00 AM

NINJIO Cybersecurity Training Launches for Students on Feb. 24

The traditional, lengthy training format is gone. NINJIO delivers short, animated episodes that are both entertaining and educational.

Read Article

January 01, 2026 08:00 AM

The NASDAQ Cybersecurity ETF Looks Like One of 2026’s Best Investments

The First Trust NASDAQ Cybersecurity ETF (NASDAQ:CIBR) gained ~13% in 2025, trailing the Nasdaq-100 by nearly 7 percentage points.

Read Article

November 24, 2025 08:00 AM

Ex-CISA officials, CISOs aim to stop the spread of hacklore

Afraid of connecting to public Wi-Fi? Terrified to turn your Bluetooth on? You may be falling for "hacklore," tall tales about cybersecurity...

Read Article

November 04, 2025 08:00 AM

37 years ago this week, the Morris worm infected 10% of the Internet within 24 hours — worm slithered out and sparked a new era in cybersecurity

This week in 1988, Cornell graduate student Robert Tappan Morris unleashed his eponymous worm upon the Internet. The wave of infections grew...

Read Article

October 24, 2025 07:00 AM

Cybersecurity Awareness Month highlights new threats

Cybersecurity Awareness Month 2025 warns businesses of rising AI-driven attacks, supply-chain risks, and quantum threats amid growing...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-12175

SUMMARY

A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 4.7)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 4.7

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.2

REFERENCES

CVE-2026-12174

SUMMARY

A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 8.8)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-12183

SUMMARY

Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP POST request that supplies arbitrary credentials (e.g., action=dologin&login=<any_value>&pwd=<any_value>), and subsequent privileged endpoints under /php/ajax-main.php and /modules/* do not validate a server-side session. A remote unauthenticated attacker can invoke any administrative action exposed by the configuration module, including reading and modifying user rules, fuel tank gauges, fuel dispensers, relays, cash registers, bank terminals, fuel cards, price and customer displays, cash collection, and pricing rules.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-6428

SUMMARY

SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/. The vulnerable sink in sub calculate concatenates the unmodified Filter request parameter directly into a LIKE clause of the auxiliary $strsth2 statement and executes it via DBI without bound parameters: my $f = @$filters[0]; $f =~ s/\*/%/g; $strsth2 .= " AND $column LIKE '$f' "; This enables error-based SQL injection (e.g., via EXTRACTVALUE) and full read access to sensitive tables including borrowers (password hashes, 2FA secrets, PII), borrower_password_recovery, api_keys, and sessions. Proof of concept (error-based, single request): GET /cgi-bin/koha/reports/catalogue_out.pl?do_it=1&output=screen&Limit=10&Criteria=branchcode&Filter=x'+AND+EXTRACTVALUE(1,CONCAT(0x7e,VERSION(),0x7c,USER(),0x7c,DATABASE(),0x7e))--+- Cookie: CGISESSID=<LIBRARIAN_SESSION> The response body contains the DBI exception leaking the MariaDB version, database user, client IP, and database name, after which arbitrary data can be paged out using LIMIT n,1 / SUBSTRING(...). The vulnerable sink was introduced in commit 6bb77ae3e4 (2008-07-09); CVE-2015-4633 patched the same class in sibling files but did not generalise the fix to reports/catalogue_out.pl. Fixed in Koha 22.11.38, 24.11.16, 25.05.11, 25.11.05, 26.05.01, and 26.11.00 by replacing the raw concatenation with a parameterised placeholder.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.6)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:N/A:P

cvss3

Base Score: 7.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

cvss4

Base Score: 5.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:C/RE:X/U:Amber

Impact Score

4.7

Exploitability

2.8

REFERENCES

CVE-2026-5513

SUMMARY

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to be enabled (disabled by default).

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Impact Score

2.7

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…