What is the official website of Amazon Clinic ?

The official website of Amazon Clinic is https://clinic.amazon.com/?ref_=LI_LK.

What is Amazon Clinic's cybersecurity risk score?

Amazon Clinic has an AI-generated cybersecurity risk score of 778 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Amazon Clinic experienced?

According to Rankiteo, Amazon Clinic currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Amazon Clinic been affected by any supply chain cyber incidents ?

According to Rankiteo, Amazon Clinic has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: npm, Inc. (Incident ID: ELAGITAMAOPENPM1780050263) Socket (Incident ID: AWSSOC1778833973) Braintrust (Incident ID: AMAUSE1778092688) Amazon Web Services (AWS) (Incident ID: LIMAMA1777312775) Vercel (Incident ID: AMAVERGITSTR1775204764) Amazon Web Services (AWS) (Incident ID: AMASTA1775118743) Aqua Security (Incident ID: AQUUSEAMASALCIS1775046662) Amazon Web Services (AWS) (Incident ID: EUR1774635987) Amazon Web Services (AWS) (Incident ID: SALAMAMICPINRED1774269319) NPM (Incident ID: GOOAMANPMGIT1773319158) Amazon Web Services (AWS) (Incident ID: RELLEX1772562253) Amazon Web Services (AWS) (Incident ID: EUR1774628727) Amazon (Incident ID: AMAAPPMIC1770935300) ConnectWise (Incident ID: SMASIMCONAMADAT1775551328) Cisco (Incident ID: CISSAI1773859283) Amazon (Incident ID: LASAMA1769009064) LinkedIn (Incident ID: LINAWS1766995316) Microsoft Security (Incident ID: AMAORAMIC1770695748) Amazon Web Services (AWS) (Incident ID: AMAAWS1770152164) Cisco (Incident ID: SAL5732257091825) Wiz (Incident ID: AMAWIZ1768515615) NPM (Incident ID: GOONPMORGGOVAPPMETTHEAWSTIKK7-1773672350) Fortinet (Incident ID: FORCISAMAJPM1767748297)

Does Amazon Clinic have SOC 2 Type 1 certification ?

According to Rankiteo, Amazon Clinic is not certified under SOC 2 Type 1.

Does Amazon Clinic have SOC 2 Type 2 certification ?

According to Rankiteo, Amazon Clinic does not hold a SOC 2 Type 2 certification.

Does Amazon Clinic comply with GDPR ?

According to Rankiteo, Amazon Clinic is not listed as GDPR compliant.

Does Amazon Clinic have PCI DSS certification ?

According to Rankiteo, Amazon Clinic does not currently maintain PCI DSS compliance.

Does Amazon Clinic comply with HIPAA ?

According to Rankiteo, Amazon Clinic is not compliant with HIPAA regulations.

Does Amazon Clinic have ISO 27001 certification ?

According to Rankiteo,Amazon Clinic is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Amazon Clinic operate in ?

Amazon Clinic operates primarily in the Hospitals and Health Care industry.

How many employees does Amazon Clinic have ?

Amazon Clinic employs approximately None employees people worldwide.

Does Amazon Clinic own any subsidiaries ?

Amazon Clinic presently has no subsidiaries across any sectors.

How many LinkedIn followers does Amazon Clinic have ?

Amazon Clinic's official LinkedIn profile has approximately followers.

What is the NAICS classification code for Amazon Clinic ?

Amazon Clinic is classified under the NAICS code 62, which corresponds to Health Care and Social Assistance.

Does Amazon Clinic have a Crunchbase profile ?

No, Amazon Clinic does not have a profile on Crunchbase.

Does Amazon Clinic have a LinkedIn profile ?

Yes, Amazon Clinic maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/amazon-clinic.

How many cybersecurity incidents has Amazon Clinic experienced ?

As of June 15, 2026, Rankiteo reports that Amazon Clinic has experienced 61 cybersecurity incidents.

How many peer or competitor companies does Amazon Clinic have ?

Amazon Clinic has an estimated 33,035 peer or competitor companies worldwide.

What types of cybersecurity incidents has Amazon Clinic faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability, Data Leak, Ransomware, Breach and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Amazon Clinic

Boost Score +25 with badge (5 left)

778

/1000

Fair

803

/1000

Good

Amazon Clinic Vendor Cyber Rating & Cyber Score

amazon.com

Add Your Compliance Badge

Amazon Clinic makes it convenient to find treatment online for common conditions. Just answer a few questions, and a clinician will send you a personalized treatment plan.

Amazon Clinic A.I CyberSecurity Scoring

Scoring History

Amazon Clinic

Amazon Clinic CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Amazon Web Services...

Cyber Attack

100

6/2026

GOOAMA178116664...

Amazon Web Services...

Cyber Attack

5/2026

npm, Inc.

ELAGITAMAOPENPM...

Amazon Science

Vulnerability

5/2026

OPEANTAMAXAI177...

AWS for Healthcare ...

Cyber Attack

5/2026

Socket

AWSSOC177883397...

Amazon Science

Breach

5/2026

Braintrust

AMAUSE177809268...

Amazon Web Services...

Cyber Attack

4/2026

Amazon Web Serv...

LIMAMA177731277...

Amazon

Cyber Attack

4/2026

ELFTEMCOUGRUAMA...

Amazon Web Services...

Cyber Attack

4/2026

Vercel

AMAVERGITSTR177...

Amazon Web Services...

Vulnerability

100

4/2026

Amazon Web Serv...

AMASTA177511874...

AWS Partners

Vulnerability

4/2026

AWSGITSTR177516...

Amazon Web Services...

Vulnerability

100

4/2026

Aqua Security

AQUUSEAMASALCIS...

Amazon Web Services...

Cyber Attack

3/2026

Amazon Web Serv...

EUR1774635987

Amazon Web Services...

Vulnerability

100

3/2026

Amazon Web Serv...

SALAMAMICPINRED...

Amazon Web Services...

Vulnerability

3/2026

AMA1773707045

Amazon Web Services...

Cyber Attack

3/2026

NPM

GOOAMANPMGIT177...

Amazon Web Services...

Vulnerability

3/2026

AMA1772792723

Amazon Web Services...

Cyber Attack

100

3/2026

AMA1772678135

Amazon Web Services...

Breach

100

3/2026

Amazon Web Serv...

RELLEX177256225...

Amazon

Cyber Attack

3/2026

AMA1775744757

Amazon Web Services...

Breach

3/2026

Amazon Web Serv...

EUR1774628727

Amazon

Vulnerability

100

2/2026

Amazon

AMAAPPMIC177093...

Amazon

Cyber Attack

2/2026

ConnectWise

SMASIMCONAMADAT...

Amazon

Breach

2/2026

AMA1770339008

Amazon

Cyber Attack

2/2026

AMAINSCOIGOOFLI...

Amazon

Cyber Attack

2/2026

AMA1773987972

AWS Partners

Breach

1/2026

AWSDIGOVH176978...

Amazon

Vulnerability

100

1/2026

Cisco

CISSAI177385928...

Amazon

Cyber Attack

1/2026

Amazon

LASAMA176900906...

AWS Databases & Ana...

Cyber Attack

1/2026

HUNAWS177273537...

Amazon Web Services...

Vulnerability

100

1/2026

GOOAMAOPEANT177...

AWS Partners

Cyber Attack

12/2025

LINAWS176699531...

Amazon Web Services...

Cyber Attack

100

12/2025

Microsoft Secur...

AMAORAMIC177069...

Amazon

Vulnerability

12/2025

AMAUNIGOOWAK176...

Amazon Web Services...

Cyber Attack

100

12/2025

KUBNVITENALIAMA...

Amazon Web Services...

Breach

100

11/2025

Amazon Web Serv...

AMAAWS177015216...

Amazon Web Services...

Cyber Attack

11/2025

AMA1765965358

Amazon Clinic

Cyber Attack

100

10/2025

AMA023220210212...

Amazon Clinic

Cyber Attack

9/2025

AMA409264009232...

AWS Partners

Cyber Attack

100

9/2025

Cisco

SAL573225709182...

Amazon Web Services...

Vulnerability

100

9/2025

Wiz

AMAWIZ176851561...

For Industries

Vulnerability

8/2025

NPM

GOONPMORGGOVAPP...

Amazon Clinic

Cyber Attack

7/2025

RIN709072225

Amazon Clinic

Vulnerability

6/2025

AMA505082225

Amazon Clinic

Ransomware

100

5/2025

AMA503215011212...

Amazon Web Services...

Vulnerability

100

12/2024

Fortinet

FORCISAMAJPM176...

Amazon Clinic

Vulnerability

8/2024

AMA000082124

Amazon Clinic

Breach

7/2024

AMA000072524

Amazon Clinic

Cyber Attack

100

6/2024

AMA190211910222...

Amazon Clinic

Breach

09/2023

WHO04111223

Amazon Clinic

Vulnerability

6/2023

AMA016210111072...

Amazon Clinic

Data Leak

10/2021

TWI19174123

Amazon Web Services...

Cyber Attack

100

6/2021

AMA1768595116

Amazon Clinic

Breach

100

01/2021

RIN01518622

Amazon Web Services...

Cyber Attack

100

6/2020

AMA1780793273

Amazon Clinic

Data Leak

01/2020

AMA21461222

Amazon Clinic

Data Leak

01/2020

RIN211261222

Amazon Clinic

Data Leak

12/2019

RIN2178523

Amazon

Breach

6/2018

TIKAMA176901658...

Amazon Clinic

Data Leak

02/2018

AMA350181223

Amazon Clinic

Breach

3/2017

WHO631090125

Amazon Clinic

Cyber Attack

01/2016

AMA0417522

Loading…

A.I.

Amazon Clinic Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Amazon Clinic

Incidents vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Amazon Clinic in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Amazon Clinic in 2026.

Incident Types Amazon Clinic vs Hospitals and Health Care Industry Avg (This Year)

No incidents recorded for Amazon Clinic in 2026.

Incident History - Amazon Clinic (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Amazon Clinic Subsidiaries

Amazon Clinic

Hospitals and Health Care

Website: https://clinic.amazon.com/?ref_=LI_LK

Company Size: 10,001+ employees

AmazonSoftware Development

Amazon Web Services (AWS)IT Services and IT Consulting

AWS AIIT Services and IT Consulting

AWS Training & CertificationIT Services and IT Consulting

AWS StartupsIT Services and IT Consulting

AWS EventsIT Services and IT Consulting

AWS PartnersIT Services and IT Consulting

AWS Machine LearningIT Services and IT Consulting

AWS Executive InsightsInformation Technology & Services

AWS CareersIT Services and IT Consulting

AWS Databases & AnalyticsIT Services and IT Consulting

AWS Executive InsightsInformation Technology & Services

AWS for TelecomIT Services and IT Consulting

AWS for M&ESoftware Development

Amazon re:MARSInformation Technology & Services

AWS SupportTechnology, Information and Internet

AWS for Healthcare & Life SciencesIT Services and IT Consulting

AWS DevelopersTechnology, Information and Internet

AWS Machine LearningIT Services and IT Consulting

AWS for Financial ServicesIT Services and IT Consulting

AWS for Energy & UtilitiesIT Services and IT Consulting

AWS for Retail and Consumer GoodsIT Services and IT Consulting

AWS ProductsTechnology, Information and Internet

AWS On AirTechnology, Information and Internet

AWS for IndustrialIT Services and IT Consulting

AWS for AutomotiveIT Services and IT Consulting

AWS Machine LearningIT Services and IT Consulting

Amazon Web Services Artificial Intelligence Machine LearningIT Services and IT Consulting

AWS TVIT Services and IT Consulting

AWS for IndustriesIT Services and IT Consulting

AWS TVIT Services and IT Consulting

AWS for Aerospace & SatelliteIT Services and IT Consulting

Whole Foods MarketRetail

Whole Planet Philanthropic Fundraising Services

Whole KidsPhilanthropy

Whole CitiesNon-profit Organizations

Amazon AdsAdvertising Services

Souq.comTechnology, Information and Internet

Loading…

Amazon Clinic Similar Companies

Northwestern Medicine

cb nm.org

Northwestern Medicine is the collaboration between Northwestern Memorial HealthCare and Northwestern University Feinberg School of Medicine around a strategic vision to transform the future of health care. It encompasses the research, teaching, and patient care activities of the academic medical center. Sharing a commitment to superior quality, academic excellence and patient safety, the organizations within Northwestern Medicine comprise a combined workforce of more than 33,000 among clinical and administrative staff, medical and science faculty and medical students. Northwestern Medicine is comprised of more than 200 locations throughout the region, with five Northwestern Medicine hospitals ranked among “America's Best” by U.S. News & World Report, 2025 – 2026, our legacy of better medicine continues. What makes us better, makes you better.®

Aurora Health Care

cb aah.org

Aurora Health Care is proud to be a part of Advocate Health, the third-largest nonprofit integrated health system in the U.S. Advocate Health is the third-largest nonprofit, integrated health system in the United States, created from the combination of Advocate Aurora Health and Atrium Health. Providing care under the names Advocate Health Care in Illinois; Atrium Health in the Carolinas, Georgia and Alabama; and Aurora Health Care in Wisconsin, Advocate Health is a national leader in clinical innovation, health outcomes, consumer experience and value-based care. Headquartered in Charlotte, North Carolina, Advocate Health services nearly 6 million patients and is engaged in hundreds of clinical trials and research studies, with Wake Forest University School of Medicine serving as the academic core of the enterprise. It is nationally recognized for its expertise in cardiology, neurosciences, oncology, pediatrics and rehabilitation, as well as organ transplants, burn treatments and specialized musculoskeletal programs. Advocate Health employs nearly 150,000 team members across 68 hospitals and over 1,000 care locations, and offers one of the nation’s largest graduate medical education programs with over 2,000 residents and fellows across more than 200 programs. Committed to providing equitable care for all, Advocate Health provides nearly $5 billion in annual community benefits. Learn more: advocatehealth.org Read our social media community engagement guidelines: aah.org/social

Region Hovedstaden

regionh.dk

Det handler om liv. Om at bringe liv til verden og skabe livskvalitet. Om at redde liv og forbedre liv. Som medarbejder i Region Hovedstaden træder du ind i en verden af muligheder og mangfoldighed med plads til dine ambitioner. Du er en del af et stærkt fagligt miljø, hvor vi har fingeren på pulsen og gør hinanden bedre. Det er noget af det, vi gerne vil vise dig på Region Hovedstadens LinkedIn-profil. Gå ind på www.regionh.dk/job og læs mere om jobmulighederne.

City of Hope

cityofhope.org

City of Hope's mission is to deliver the cures of tomorrow to the people who need them today. Founded in 1913, City of Hope has grown into one of the largest cancer research and treatment organizations in the U.S. and one of the leading research centers for diabetes and other life-threatening illnesses. City of Hope research has been the basis for numerous breakthrough cancer medicines, as well as human synthetic insulin and monoclonal antibodies. With an independent, National Cancer Institute-designated comprehensive cancer center at its core, City of Hope brings a uniquely integrated model to patients spanning cancer care, research and development, academics and training, and innovation initiatives. City of Hope’s growing national system includes its Los Angeles campus, a network of clinical care locations across Southern California, a new cancer center in Orange County, California, and treatment facilities in Atlanta, Chicago and Phoenix. City of Hope’s affiliated group of organizations includes Translational Genomics Research Institute and AccessHope™.

Houston Methodist

houstonmethodist.org

Houston Methodist is one of the nation’s leading health systems and academic medical centers. The health system consists of eight hospitals: Houston Methodist Hospital, its flagship academic hospital in the Texas Medical Center, seven community hospitals and one long-term acute care hospital throughout the Greater Houston metropolitan area. Houston Methodist also includes a research institute; a comprehensive residency program; international patient services; freestanding comprehensive care, emergency care and imaging centers; and outpatient facilities. Houston Methodist employs more than 32,000 people. Come lead with us.

Indiana University Health

cb iuhealth.org

Indiana University Health is Indiana’s largest and most comprehensive system. A unique partnership with the Indiana University School of Medicine—one of the nation’s largest medical schools—gives patients access to groundbreaking research and innovative treatments, and it offers team members access to the latest science and the very best training—advancing healthcare for all. At IU Health, your personal and professional growth is a top priority. You will have access to many diverse opportunities to learn and develop in meaningful ways that matter most to you, such as advanced clinical training, leadership development, promotion opportunities and cross-training development.

IHH Healthcare

ihhhealthcare.com

A world-leading multinational healthcare provider, IHH believes that making a difference starts with our aspiration to Care. For Good. Our team of 70,000 people commit to deliver greater good to our patients, people, the public and our planet, as we live our purpose each day to touch lives and transform care. Through our portfolio of trusted brands – Acibadem, Fortis, Gleneagles, Island, Mount Elizabeth, Pantai, Parkway and Prince Court, – we offer our patients comprehensive and personalised care ranging from primary to quaternary, and even ancillary services such as laboratory, diagnostics, imaging and rehabilitation. With our scale and reach in 10 countries, we continue to raise the bar in healthcare in our key markets of Malaysia, Singapore, Türkiye, India, Greater China (including Hong Kong) and beyond. In partnership with our stakeholders, we will co-create a sustainable future for all as we work towards our vision to become the world’s most trusted healthcare services network.

Philips

cb philips.com

Over the past decade we have transformed into a focused leader in health technology. At Philips, our purpose is to improve people’s health and well-being through meaningful innovation. We aim to improve 2.5 billion lives per year by 2030, including 400 million in underserved communities. We see healthcare as a connected whole. Helping people to live healthily and prevent disease. Giving clinicians the tools they need to make a precision diagnosis and deliver personalized treatment. Aiding the patient's recovery at home in the community. All supported by a seamless flow of data. As a technology company, we – and our brand licensees – innovate for people with one consistent belief: there’s always a way to make life better. Visit our website: http://www.philips.com/ Follow our social media house rules https://www.philips.com/a-w/about-philips/social-media.html

Ministry Of Health, Malaysia (KKM)

moh.gov.my

The Ministry of Health (Malay: Kementerian Kesihatan), abbreviated MOH, is a ministry of the Government of Malaysia that is responsible for health system: health behavior, cancer, public health, health management, medical research, health systems research, respiratory medicine, health promotion, healthcare tourism, medical device, blood collection, leprosy control, clinical research, health care, dental care, health institution, laboratory, pharmaceutical, patient safety.

Loading…

NEWS

Amazon Clinic CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 22, 2025 08:00 AM

A comprehensive list of 2025 tech layoffs

The tech layoff wave is still kicking in 2025. Last year saw more than 150,000 job cuts across 549 companies, according to independent...

Read Article

December 19, 2025 08:00 AM

NHS supplier DXS International confirms cyber attack – here’s what we know so far

NHS software supplier DXS International has disclosed a cyber attack on its internal systems. The company provides clinical support...

Read Article

December 08, 2025 08:00 AM

CISA alerts of critical vulnerability impacting free program used for building user interfaces

A critical, unauthenticated remote code execution vulnerability known as React2Shell has been added to the Cybersecurity and Infrastructure...

Read Article

November 06, 2025 08:00 AM

How Student-Led Cybersecurity Clinics Are Transforming Digital Safety

Cybersecurity is a concern that affects all of us, from school districts to colleges to companies. Fortunately, there is an increased...

Read Article

October 08, 2025 07:00 AM

Cybersecurity In Healthcare Is Now A Clinical Safety Issue

Cyberattacks in healthcare are now clinical emergencies, disrupting patient care and exposing how cybersecurity and patient safety are...

Read Article

September 09, 2025 07:00 AM

How AI and politics hampered the secure open-source software movement

Tech giants pledged millions to secure open-source code. Then AI came along.

Read Article

August 25, 2025 07:00 AM

Credential harvesting campaign targets ScreenConnect cloud administrators

Researchers warn that attackers are using compromised Amazon email accounts in spear-phishing attacks that may lead to ransomware...

Read Article

July 31, 2025 07:00 AM

Here’s who’s pledged to improve medical data sharing

Dozens of organizations, including 11 health systems, have agreed to work together to help improve the sharing of medical data across...

Read Article

July 22, 2025 07:00 AM

Democrat senators warn Medicaid cuts could worsen rural hospital cybersecurity

Funding cuts enacted in the GOP's massive tax law will push cash-strapped rural providers to deprioritize cyber preparedness, according to...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-12191

SUMMARY

A vulnerability was found in Comma AI Openpilot 0.11. This issue affects the function pickle.load/pickle.loads of the file selfdrive/modeld/modeld.py of the component Pickle Module. The manipulation results in deserialization. The attack is only possible with local access. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-06-14

Updated

Date2026-06-14

RISK INFORMATION (Score: 7.8)

cvss2

Base Score: 6.8

Complexity: LOW

AV:L/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 7.8

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

1.8

REFERENCES

CVE-2026-12190

SUMMARY

A vulnerability has been found in Genspark AI Workspace App 2.8.4 on Android. This vulnerability affects unknown code of the component ai.mainfunc.genspark. The manipulation leads to improper authorization in handler for custom url scheme. The attack can only be performed from a local environment. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-06-14

Updated

Date2026-06-14

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 4.8

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12189

SUMMARY

A flaw has been found in Moovit Bus & Public Transit App 1.18 on Android. This affects an unknown part of the component com.tranzmate. Executing a manipulation can lead to improper authorization in handler for custom url scheme. The attack can only be executed locally. The exploit has been published and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-06-14

Updated

Date2026-06-14

RISK INFORMATION (Score: 5.3)

cvss2

Base Score: 4.3

Complexity: LOW

AV:L/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 1.9

Complexity: LOW

CVSS:4.0/AV:L/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.8

REFERENCES

CVE-2026-12188

SUMMARY

A vulnerability was detected in Grit42 Grit up to 0.11.0. Affected by this issue is some unknown functionality of the file modules/core/backend/app/controllers/concerns/grit/core/grit_entity_controller.rb of the component GritEntityController. Performing a manipulation results in sql injection. The attack may be initiated remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-06-14

Updated

Date2026-06-14

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-12187

SUMMARY

A security vulnerability has been detected in GL.iNet GL-MT3000 up to 4.4.5. Affected by this vulnerability is an unknown functionality of the file /usr/bin/one_click_upgrade of the component Online Firmware Upgrade Handler. Such manipulation leads to command injection. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. Upgrading to version 4.7 addresses this issue. Upgrading the affected component is advised. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Published

Date2026-06-14

Updated

Date2026-06-14

RISK INFORMATION (Score: 8.8)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…