What is the official website of ADEV ENVIRONNEMENT ?

The official website of ADEV ENVIRONNEMENT is http://www.rskgroup.fr.

What is ADEV ENVIRONNEMENT's cybersecurity risk score?

ADEV ENVIRONNEMENT has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has ADEV ENVIRONNEMENT experienced?

According to Rankiteo, ADEV ENVIRONNEMENT currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has ADEV ENVIRONNEMENT been affected by any supply chain cyber incidents ?

According to Rankiteo, ADEV ENVIRONNEMENT has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does ADEV ENVIRONNEMENT have SOC 2 Type 1 certification ?

According to Rankiteo, ADEV ENVIRONNEMENT is not certified under SOC 2 Type 1.

Does ADEV ENVIRONNEMENT have SOC 2 Type 2 certification ?

According to Rankiteo, ADEV ENVIRONNEMENT does not hold a SOC 2 Type 2 certification.

Does ADEV ENVIRONNEMENT comply with GDPR ?

According to Rankiteo, ADEV ENVIRONNEMENT is not listed as GDPR compliant.

Does ADEV ENVIRONNEMENT have PCI DSS certification ?

According to Rankiteo, ADEV ENVIRONNEMENT does not currently maintain PCI DSS compliance.

Does ADEV ENVIRONNEMENT comply with HIPAA ?

According to Rankiteo, ADEV ENVIRONNEMENT is not compliant with HIPAA regulations.

Does ADEV ENVIRONNEMENT have ISO 27001 certification ?

According to Rankiteo,ADEV ENVIRONNEMENT is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does ADEV ENVIRONNEMENT operate in ?

ADEV ENVIRONNEMENT operates primarily in the Environmental Services industry.

How many employees does ADEV ENVIRONNEMENT have ?

ADEV ENVIRONNEMENT employs approximately 34 people worldwide.

Does ADEV ENVIRONNEMENT own any subsidiaries ?

ADEV ENVIRONNEMENT presently has no subsidiaries across any sectors.

How many LinkedIn followers does ADEV ENVIRONNEMENT have ?

ADEV ENVIRONNEMENT's official LinkedIn profile has approximately 551 followers.

Does ADEV ENVIRONNEMENT have a Crunchbase profile ?

No, ADEV ENVIRONNEMENT does not have a profile on Crunchbase.

Does ADEV ENVIRONNEMENT have a LinkedIn profile ?

Yes, ADEV ENVIRONNEMENT maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/adev-environnement.

How many cybersecurity incidents has ADEV ENVIRONNEMENT experienced ?

As of June 14, 2026, Rankiteo reports that ADEV ENVIRONNEMENT has experienced 1 cybersecurity incidents.

How many peer or competitor companies does ADEV ENVIRONNEMENT have ?

ADEV ENVIRONNEMENT has an estimated 8,482 peer or competitor companies worldwide.

What types of cybersecurity incidents has ADEV ENVIRONNEMENT faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

ADEV ENVIRONNEMENT

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

ADEV ENVIRONNEMENT Vendor Cyber Rating & Cyber Score

rskgroup.fr

Add Your Compliance Badge

ADEV ENVIRONNEMENT is an ecology and biodiversity company based in the Tours region

ADEV ENVIRONNEMENT A.I CyberSecurity Scoring

Scoring History

ADEV ENVIRONNEMENT

ADEV ENVIRONNEMENT CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

ADEV ENVIRONNEMENT

Cyber Attack

10/2025

JEN273212710242...

Loading…

A.I.

ADEV ENVIRONNEMENT Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for ADEV ENVIRONNEMENT

Incidents vs Environmental Services Industry Avg (This Year)

No incidents recorded for ADEV ENVIRONNEMENT in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for ADEV ENVIRONNEMENT in 2026.

Incident Types ADEV ENVIRONNEMENT vs Environmental Services Industry Avg (This Year)

No incidents recorded for ADEV ENVIRONNEMENT in 2026.

Incident History - ADEV ENVIRONNEMENT (X = Date, Y = Severity)

Loading…

SUBSIDIARY

ADEV ENVIRONNEMENT Subsidiaries

ADEV ENVIRONNEMENT

Environmental Services

Website: http://www.rskgroup.fr

Company Size: 34

124

RSK GroupEnvironmental Services

BinniesCivil Engineering

Binnies DCWWCivil Engineering

ADASEnvironmental Services

ADAS ArboricultureEnvironmental Services

RSK Habitat ManagementEnvironmental Services

FarmPEPFarming

MWH TreatmentConstruction

RSK Middle EastEnvironmental Services

Copper ConsultancyPublic Relations and Communications Services

RSK AfricaEnvironmental Services

RSK GeosciencesEnvironmental Services

RSK Geophysics and SafegroundEnvironmental Services

RSK GeospatialSurveying and Mapping Services

Carbon Zero ConsultingServices for Renewable Energy

CS2 Chartered SurveyorsConstruction

CAN RenewablesServices for Renewable Energy

CANCivil Engineering

Nature PositiveEnvironmental Services

Cambridge Environmental Assessments, part of RSK ADAS LtdChemical Manufacturing

RSK EnvironmentEnvironmental Services

RSK International Projects GroupEnvironmental Services

BMG ResearchMarket Research

Absolute Solar and Wind LtdRenewable Energy Semiconductor Manufacturing

GeocoreCivil Engineering

Spencer Quantum LtdConstruction

Envireau WaterEnvironmental Services

Proeon Systems Ltd.Automation Machinery Manufacturing

CX Utilities Ltd (An RSK Company)Utilities

The MSS GroupEnvironmental Services

The Woodhouse Partnership Ltd (TWPL)Business Consulting and Services

Woodhouse AustralasiaBusiness Consulting and Services

Inis Environmental Consultants Ltd.Environmental Services

EDP Consultants AustraliaEnvironmental Services

C J Associates Geotechnical LtdConstruction

cbec eco-engineering UK & EuropeEnvironmental Services

ADAS LandscapeArchitecture and Planning

Stephenson HallidayEnvironmental Services

Richard Irvin FM LimitedFacilities Services

WatertrainEducation

RSK WildingEnvironmental Services

RSK APACEnvironmental Services

RSK ResponseEnvironmental Services

Salix River and WetlandEnvironmental Services

Silcock Leedham Group LimitedConstruction

HydrofixServices for Renewable Energy

Pharos Generator Services LimitedMechanical Or Industrial Engineering

RSK AcousticsArchitecture and Planning

RSK AsbestosEnvironmental Services

Ian Farmer Associates (1998) LimitedCivil Engineering

MG Scaffolding LtdConstruction

RSK BENELUX BVEnvironmental Services

RSK NetherlandsEnvironmental Services

RSK EnvironnementBusiness Consulting and Services

HI-LINEEnvironmental Services

Up and UnderCivil Engineering

Calibrate Energy LtdRenewable Energy Semiconductor Manufacturing

Aurora Health Physics Services LtdEnvironmental Services

W Crowder & Sons LtdWholesale

RSK EcologyEnvironmental Services

CR Civil EngineeringCivil Engineering

Nicholas O'Dwyer LtdEnvironmental Services

Civil Engineering InternationalCivil Engineering

Amphos 21Environmental Services

WRc GroupResearch Services

Structural SoilsCivil Engineering

WGM Engineering LtdEngineering Services

AxisOil and Gas

Headland Archaeology (UK) LtdEnvironmental Services

PellingsConstruction

Centara Ltd - Surveying, Engineering and CADUtilities

EcologiaEnvironmental Services

RSK Ireland Ltd.Environmental Services

Jennings O'Donovan & PartnersCivil Engineering

RSK BiocensusEnvironmental Services

FR ConsultantsConstruction

Central AllianceConstruction

SCPCivil Engineering

COGNICAConstruction

RSK AustraliaEnvironmental Services

ADAS PlanningArchitecture and Planning

Leap EnvironmentalEnvironmental Services

Non Destructive Testing Services LtdConstruction

RoC ConsultingConstruction

EDPBusiness Consulting and Services

Southern Ecological Solutions (SES)Environmental Services

Virtus EnergyComputers and Electronics Manufacturing

1stinrailCivil Engineering

Optisol Services LtdRenewable Energy Semiconductor Manufacturing

FishtekEnvironmental Services

MilestoneConstruction

Richard Allitt Associates LtdCivil Engineering

Remote Aerial SurveysPhotography

rsim Remote SimulationsCivil Engineering

RemedX LtdEnvironmental Services

Streetwise UK Management LtdConstruction

TWIG GroupEnvironmental Services

B-Line and Easy2PlotPrinting Services

RSK LDE (Land and Development Engineering)Civil Engineering

RSK DACH-RegionEnvironmental Services

WaldramsReal Estate

Milner AssociatesConstruction

LARSEN WATER MANAGEMENT LTDUtilities

Minerex Environmental Ltd.Environmental Services

Smith + Kennedy ArchitectsArchitecture and Planning

ATV Contract Services LtdEnvironmental Services

RSK CreativeDesign Services

Advantage RSKAlternative Dispute Resolution

RGM Environmental, Science and Technical support servicesEnvironmental Services

RSK RadiologicalEnvironmental Services

ATP Architects & Building SurveyorsArchitecture and Planning

Hawkins Electrical LtdAppliances, Electrical, and Electronics Manufacturing

Kirton Water Treatment ServicesUtilities

Travis BakerCivil Engineering

RSK Consents SolutionsUtilities

Acies Civil and Structural LtdCivil Engineering

Brown & May Marine LtdFisheries

RSK IWS Integrated Waste Solutions LtdUtilities

Dermot Casey Tree Care Ltd.Consumer Services

Homer Burgess LtdIndustrial Machinery Manufacturing

Enviroflow Management LimitedUtilities

Treefellers LtdEnvironmental Services

EDP Singapore PTEBusiness Consulting and Services

Technik GSConstruction

Loading…

ADEV ENVIRONNEMENT Similar Companies

Bureau Veritas Group

bureauveritas.com

Bureau Veritas is a world leader in Testing, Inspection and Certification. Our mission is at the heart of key challenges: quality, health and safety, environmental protection and social responsibility. Through our wide range of expertise, impartiality and independence, we foster confidence between companies, public authorities and clients. Bureau Veritas is a Business to Business to Society company, contributing to transform the world we live in. Driven by society, we are working ever more closely with our clients, addressing today’s crucial challenges and answering society’s aspirations. Bureau Veritas is listed on the Euronext Paris (Compartment A, code ISIN FR 0006174348, stock symbol: BVI).

Veolia

veolia.com

Veolia group aims to be the benchmark company for ecological transformation. With nearly 220,000 employees worldwide, the Group designs and provides game-changing solutions that are both useful and practical for water, waste and energy management. Through its three complementary business activities, Veolia helps to develop access to resources, preserve available resources, and replenish them. In 2021, the Veolia group supplied 79 million people with drinking water and 61 million people with wastewater service, produced nearly 48 million megawatt hours of energy and treated 48 million metric tons of waste. Veolia Environnement (listed on Paris Euronext: VIE) recorded consolidated revenue of €28.508 billion in 2021. ---- Le groupe Veolia a pour ambition de devenir l’entreprise de référence de la transformation écologique. Présent sur les cinq continents avec près de 220 000 salariés, le Groupe conçoit et déploie des solutions utiles et concrètes pour la gestion de l’eau, des déchets et de l’énergie qui participent à changer radicalement la donne. Au travers de ses trois activités complémentaires, Veolia contribue à développer l’accès aux ressources, à préserver les ressources disponibles et à les renouveler. En 2021, le groupe Veolia a servi 79 millions d’habitants en eau potable et 61 millions en assainissement, produit près de 48 millions de mégawattheures et valorisé 48 millions de tonnes de déchets. Veolia Environnement (Paris Euronext : VIE) a réalisé en 2021 un chiffre d’affaires consolidé de 28,508 milliards d’euros.

Eiffage Énergie Systèmes

eiffageenergiesystemes.com

Rejoindre Eiffage, c’est rejoindre une entreprise animée d’un esprit de famille unique. Nous recherchons des talents qui valorisent l’esprit d’équipe et l’entraide et qui souhaitent découvrir, progresser, innover dans un collectif engagé pour construire un avenir à taille humaine. Nous avons besoin de vos différences et de vos singularités car elles sont la richesse d’un Groupe qui donne sa chance à chacun. Rejoindre Eiffage, c’est rejoindre une grande entreprise qui a tous les atouts d’une petite ! _ Eiffage Énergie Systèmes est la marque des métiers de l’énergie du groupe Eiffage. Eiffage Énergie Systèmes conçoit, réalise, exploite et maintient des systèmes d'énergie. Experte en génies électrique, industriel, climatique et énergétique, Eiffage Énergie Systèmes propose des solutions innovantes portées par de nouvelles marques expertises: 👉 Clemessy, la marque dédiée à l’industrie 👉 Dorsalys, la marque dédiée aux infrastructures et réseaux 👉 Expercité, la marque dédiée aux villes et collectivités 👉 Terceo, la marque dédiée aux bâtiments tertiaires. ➡️ Eiffage Énergie Systèmes, c’est : 38 250 collaborateurs 7.2 Mds€ de chiffre d’affaires total 2.8 Mds€ de chiffre d’affaires en Europe 170 M€ de chiffre d’affaires Grand international (hors Europe) ➡️ Eiffage : 21.8 Mds € de chiffre d’affaires 78 200 salariés CA : 21,8 milliards d’euros 78 200 salariés 🌍 Présente dans plus de 50 pays, Eiffage Énergie Systèmes tisse une relation de proximité avec ses clients et offre ses expertises pointues afin de répondre au plus juste aux besoins énergétiques. Rejoindre Eiffage Énergie Systèmes c’est prendre part à des projets d’envergure et concevoir des solutions énergétiques respectueuses des Hommes et de l’environnement. C’est aussi évoluer dans un milieu professionnel d’avenir et participer à créer un avenir à taille humaine.

Veolia | Water Tech

veoliawatertechnologies.com

As the world leader in water technologies and services, Veolia relies on its 17,500 water technology experts to deliver innovative solutions that drive both performance and sustainability, without compromise. With over 4,400 technology patents and serving more than 14,000 customers worldwide, Veolia’s water technology activities generated 4.97 billion euros in revenue in 2024. These solutions are central to Veolia’s GreenUp strategic plan, accelerating the ecological transformation of cities and industries while safeguarding resources for the future

EQUANS

equans.com

Equans, a Bouygues group company, is a world leader in multi-technical services with offices in 20 country hubs. This brand expresses the desire to provide the right answer [ANS] to the equations [EQU] of our customers. We design and provide customised solutions to improve our customers’ buildings, technical equipment, systems and processes and to support them in optimising their use. With nearly 90,000 highly qualified employees and a strong geographic footprint through our historical local brands, we have excellent technical know-how in design, installation, maintenance and performance services, with a unique combination of skills as in HVAC, Cooling & Fire protection, Facility Management, Digital & ICT, Electrical, Mechanical & Robotics... Equans expertise and knowledge of our customers’ businesses now place us to support them in their transitions for modernisation and sustainable development.

Grupo Tragsa

tragsa.es

Tragsa Group is a group of public companies, integrated in the State Industrial Ownership Corporation (SEPI), which has become a full service supplier and a reference company to Public Administrations. It is formed by four enterprises: Tragsa (1977) responsible for works and services' execution and Tragsatec (1989) which performs engineering works and technical assistance for every sections of the Group. By these companies, the Group is able to take part in every stage of any project, from its conception and design to its execution. 40 years of experience working for Public Administrations and at the service of society, have settle this business group at the front line of the various fields where it intervenes, from agricultural, forest, livestock and rural development services to environmental conservation and protection. Tragsa Group is represented in all the national territory, what makes it possible to give a quick and efficient response to any request that may be done from the central, autonomic and local administrations. Moreover, our collaboration in more than 120 projects of Spanish cooperation – in over 35 different countries of Northern Africa, Sub-Saharan Africa, Latin America and the Caribbean, Asia, Europe and the Middle East – has given the company international importance. In every field of activity, the differentiating factor of the Group stands in its proved experience, its capacity to give a fast-response and adapt its work to Administration’s needs, and its high I+D+I profile, what makes the group able to provide leading edge technology and the highest quality services

RSK Group

rskgroup.com

RSK Group is a global leader in the delivery of environmental and engineering solutions. We recognise the urgent need for sustainable change and know that this will be achieved by delivering meaningful action, not just words. We are committed to supporting our clients and societies as they navigate these complex challenges, while making a positive impact. The business was founded in 1989, originally focused on providing environmental consultancy services to global energy clients. Today, while we remain a leader in environmental consultancy, the business is significantly more diverse. RSK delivers an unrivalled breadth and depth of environmental and engineering services, either as stand-alone projects or as large and integrated multidisciplinary solutions. The group believes this emphasis on multidisciplinary collaboration is essential for successfully addressing complex global challenges. This is why we have brought together pragmatic advice, forward-thinking engineering, cutting-edge innovation, digital solutions, and best-in-class delivery services. The group continues to deliver its ambitious global growth strategy. It now comprises more than 200 companies and employs over 16,000 people.

Republic Services

republicservices.com

Republic Services provides the most complete set of recycling, waste and environmental solutions from a single-source provider. We partner with customers to help them achieve their sustainability goals, driving both environmental and economic sustainability. We offer advanced recycling; solid waste, special waste and hazardous waste treatment and disposal; field and industrial services; 24/7 emergency response; and equipment rental and cleaning. We use our expertise to find new opportunities to reduce waste and promote circularity. From our network of state-of-the-art recycling centers to converting gas generated by our landfills into renewable energy to helping companies set and meet their sustainability goals – our 42,000 employees provide sustainable solutions that deliver results. #SustainabilityinAction

Environment Agency

www.gov.uk

We are the Environment Agency. We are the biggest and most wide-ranging environmental regulator in Europe. We work with businesses and communities to protect and improve the environment, for people and wildlife. And the need for our work is becoming ever more important. We protect and improve the environment across England to: • reduce the risks to people and properties from flooding • help businesses and communities adapt to climate change • reduce pressures on biodiversity • help businesses to make sure they don’t harm the environment through pollution or taking too much water • issue licences and permits, and take action against people who don’t take their environmental responsibilities seriously. None of this is possible without a multi-talented team of professional and dedicated people. And just like the environment we help to care for, we’re home to an incredible diversity of skills and knowledge. Today, we employ more than 12,000 people throughout England in a wide range of roles. You’ll find leading scientists and prominent geologists alongside public relations professionals, planners and policy advisors. We employ lawyers, enforcement officers and engineers, conservation scientists and marine biologists. And of course we have a wide team of support staff. We employ people at all stages of their career, from recent graduates to experienced leaders and internationally-renowned experts. Find out how we manage our social media accounts at https://www.gov.uk/government/organisations/environment-agency/about/social-media-use

Loading…

NEWS

ADEV ENVIRONNEMENT CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-12175

SUMMARY

A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 4.7)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 4.7

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.2

REFERENCES

CVE-2026-12174

SUMMARY

A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 8.8)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-12183

SUMMARY

Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP POST request that supplies arbitrary credentials (e.g., action=dologin&login=<any_value>&pwd=<any_value>), and subsequent privileged endpoints under /php/ajax-main.php and /modules/* do not validate a server-side session. A remote unauthenticated attacker can invoke any administrative action exposed by the configuration module, including reading and modifying user rules, fuel tank gauges, fuel dispensers, relays, cash registers, bank terminals, fuel cards, price and customer displays, cash collection, and pricing rules.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-6428

SUMMARY

SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/. The vulnerable sink in sub calculate concatenates the unmodified Filter request parameter directly into a LIKE clause of the auxiliary $strsth2 statement and executes it via DBI without bound parameters: my $f = @$filters[0]; $f =~ s/\*/%/g; $strsth2 .= " AND $column LIKE '$f' "; This enables error-based SQL injection (e.g., via EXTRACTVALUE) and full read access to sensitive tables including borrowers (password hashes, 2FA secrets, PII), borrower_password_recovery, api_keys, and sessions. Proof of concept (error-based, single request): GET /cgi-bin/koha/reports/catalogue_out.pl?do_it=1&output=screen&Limit=10&Criteria=branchcode&Filter=x'+AND+EXTRACTVALUE(1,CONCAT(0x7e,VERSION(),0x7c,USER(),0x7c,DATABASE(),0x7e))--+- Cookie: CGISESSID=<LIBRARIAN_SESSION> The response body contains the DBI exception leaking the MariaDB version, database user, client IP, and database name, after which arbitrary data can be paged out using LIMIT n,1 / SUBSTRING(...). The vulnerable sink was introduced in commit 6bb77ae3e4 (2008-07-09); CVE-2015-4633 patched the same class in sibling files but did not generalise the fix to reports/catalogue_out.pl. Fixed in Koha 22.11.38, 24.11.16, 25.05.11, 25.11.05, 26.05.01, and 26.11.00 by replacing the raw concatenation with a parameterised placeholder.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.6)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:N/A:P

cvss3

Base Score: 7.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

cvss4

Base Score: 5.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:C/RE:X/U:Amber

Impact Score

4.7

Exploitability

2.8

REFERENCES

CVE-2026-5513

SUMMARY

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to be enabled (disabled by default).

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Impact Score

2.7

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…