Comparison Overview
Autogrill

Autogrill
Palazzo Z Strada 5, Rozzano - Milanofiori, Italy, 20089, IT
Last Update: 23/04/2026
Autogrill is the world’s leading provider of food & beverage services for travellers. The Group is present in 30 countries on 4 continents, operates in about 774 locations managing about 3,300 points of sale with about 46,000 employees and is present in 139 airports. A...

In-N-Out Burger
4199 Campus Drive, Irvine, 92612, US
Last Update: 01/04/2026
In-N-Out Burger was founded in 1948 by Harry and Esther Snyder in Baldwin Park, California, and remains privately owned and operated. Under the direction of the Snyder family, the company has opened restaurants throughout California, Nevada, Arizona, Utah, Texas, Orego...
Compliance Ranges Comparison

Autogrill







In-N-Out Burger






Benchmark & Cyber Underwriting Signals
Incidents vs Restaurants Industry Avg (This Year)
No incidents recorded for Autogrill in 2026.
Incidents vs Restaurants Industry Avg (This Year)
No incidents recorded for In-N-Out Burger in 2026.
Incident History - Autogrill (X = Date, Y = Severity)
Autogrill cyber incidents detection timeline including parent company and subsidiaries.
Incident History - In-N-Out Burger (X = Date, Y = Severity)
In-N-Out Burger cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Autogrill

In-N-Out Burger
FAQ
Latest Global CVEs
An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command
The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.
An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSON GeometryCollection containing a Polygon with a strict-winding CRS. Strict-winding polygons are intentionally unsupported for indexing, but the guard that rejects them does not inspect members of a GeometryCollection, allowing the unsafe path to be reached which ends with an ensuing null-pointer dereference.
The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.
An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.