What is the official website of Bloomberg Learning | AI Strategy Program ?

The official website of Bloomberg Learning | AI Strategy Program is https://emrt.us/BBERG-AI-LI-AU.

What is Bloomberg Learning | AI Strategy Program's cybersecurity risk score?

Bloomberg Learning | AI Strategy Program has an AI-generated cybersecurity risk score of 787 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Bloomberg Learning | AI Strategy Program experienced?

According to Rankiteo, Bloomberg Learning | AI Strategy Program currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Bloomberg Learning | AI Strategy Program been affected by any supply chain cyber incidents ?

According to Rankiteo, Bloomberg Learning | AI Strategy Program has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Bloomberg Learning | AI Strategy Program have SOC 2 Type 1 certification ?

According to Rankiteo, Bloomberg Learning | AI Strategy Program is not certified under SOC 2 Type 1.

Does Bloomberg Learning | AI Strategy Program have SOC 2 Type 2 certification ?

According to Rankiteo, Bloomberg Learning | AI Strategy Program does not hold a SOC 2 Type 2 certification.

Does Bloomberg Learning | AI Strategy Program comply with GDPR ?

According to Rankiteo, Bloomberg Learning | AI Strategy Program is not listed as GDPR compliant.

Does Bloomberg Learning | AI Strategy Program have PCI DSS certification ?

According to Rankiteo, Bloomberg Learning | AI Strategy Program does not currently maintain PCI DSS compliance.

Does Bloomberg Learning | AI Strategy Program comply with HIPAA ?

According to Rankiteo, Bloomberg Learning | AI Strategy Program is not compliant with HIPAA regulations.

Does Bloomberg Learning | AI Strategy Program have ISO 27001 certification ?

According to Rankiteo,Bloomberg Learning | AI Strategy Program is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Bloomberg Learning | AI Strategy Program operate in ?

Bloomberg Learning | AI Strategy Program operates primarily in the Higher Education industry.

How many employees does Bloomberg Learning | AI Strategy Program have ?

Bloomberg Learning | AI Strategy Program employs approximately None employees people worldwide.

Does Bloomberg Learning | AI Strategy Program own any subsidiaries ?

Bloomberg Learning | AI Strategy Program presently has no subsidiaries across any sectors.

How many LinkedIn followers does Bloomberg Learning | AI Strategy Program have ?

Bloomberg Learning | AI Strategy Program's official LinkedIn profile has approximately followers.

What is the NAICS classification code for Bloomberg Learning | AI Strategy Program ?

Bloomberg Learning | AI Strategy Program is classified under the NAICS code 6113, which corresponds to Colleges, Universities, and Professional Schools.

Does Bloomberg Learning | AI Strategy Program have a Crunchbase profile ?

No, Bloomberg Learning | AI Strategy Program does not have a profile on Crunchbase.

Does Bloomberg Learning | AI Strategy Program have a LinkedIn profile ?

Yes, Bloomberg Learning | AI Strategy Program maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/bloomberg-learning-ai-strategy-program.

How many cybersecurity incidents has Bloomberg Learning | AI Strategy Program experienced ?

As of August 29, 2026, Rankiteo reports that Bloomberg Learning | AI Strategy Program has not experienced any cybersecurity incidents.

How many peer or competitor companies does Bloomberg Learning | AI Strategy Program have ?

Bloomberg Learning | AI Strategy Program has an estimated 17,348 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

BLASP

Boost Score +25 with badge (5 left)

787

/1000

Fair

812

/1000

Good

Bloomberg Learning | AI Strategy Program Vendor Cyber Rating & Cyber Score

emrt.us

Add Your Compliance Badge

Bloomberg Learning's six-week AI Strategy: Driving Impact for Business program, offered in collaboration with Emeritus, provides a holistic perspective on AI solutions, including generative AI and the legal and ethical challenges it presents. Benefit from a powerful curriculum enriched with insights from Bloomberg journalists and industry experts who have their fingers on the pulse of the latest advancements in the world of AI. Your team will emerge future-ready with the acumen to implement AI for business.

BLASP A.I CyberSecurity Scoring

Scoring History

BLASP

Bloomberg Learning | AI Strategy Program CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

BLASP Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for BLASP

Incidents vs Higher Education Industry Avg (This Year)

No incidents recorded for Bloomberg Learning | AI Strategy Program in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Bloomberg Learning | AI Strategy Program in 2026.

Incident Types BLASP vs Higher Education Industry Avg (This Year)

No incidents recorded for Bloomberg Learning | AI Strategy Program in 2026.

Incident History - BLASP (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Bloomberg Learning | AI Strategy Program Subsidiaries

BLASP

Higher Education

Website: https://emrt.us/BBERG-AI-LI-AU

Company Size: None employees

178

Kellogg Executive Education | Chief Marketing Officer ProgramHigher Education

Cambridge Judge Business School | Chief Technology Officer ProgrammeHigher Education

Cambridge Judge Business School | Chief Human Resources Officer ProgrammeHigher Education

Wharton Executive Education | CRO ProgramHigher Education

Wharton Executive Education | Scaling a Business: How to Build a UnicornHigher Education

Wharton Executive Education | C-Suite Leaders Program — IndiaHigher Education

Wharton Executive Education | C-Suite Leaders Program — Middle EastHigher Education

Cambridge Judge Business School | Diversity, Equity and InclusionHigher Education

Wharton Executive Education | Emerging COO ProgramHigher Education

Cambridge Judge Business School | Digital Transformation: From Strategy to ExecutionHigher Education

Cambridge Judge Business School | Mastering Change ManagementHigher Education

Cambridge Judge Business School | People Analytics: Transforming HR Strategy with Data ScienceHigher Education

Kellogg Executive Education | C-Suite Program in AI and Digital TransformationHigher Education

Wharton Executive Education | CSO ProgramHigher Education

Berkeley | Fintech: Frameworks, Applications, and StrategiesHigher Education

Berkeley | Technology Leadership ProgramHigher Education

Wharton Executive Education | Corporate Governance: Maximize Your Effectiveness in the BoardroomHigher Education

Wharton Executive Education | Leadership Program in AI and AnalyticsHigher Education

Cambridge Judge Business School | Circular Economy and Sustainability StrategiesHigher Education

Cambridge Judge Business School | Business Analytics and AI: Decision-Making Using DataHigher Education

Innovation of Products and Services by EMERITUSHigher Education

Python for Data ScienceEducation Administration Programs

Berkeley | Artificial Intelligence: Business Strategies and ApplicationsHigher Education

Berkeley | Chief Strategy Officer (CSO) ProgramHigher Education

ROTMAN | Generative AI for Business: Driving Growth and Competitive AdvantageHigher Education

Michigan Engineering | Leadership Development Program in ManufacturingHigher Education

Board Director Program from Michigan Ross Executive EducationHigher Education

MIT xPRO | AI Strategy and Product InnovationHigher Education

Kellogg Executive Education | Strategic Communication for LeadersHigher Education

Michigan Engineering | Leadership Development Program in Supply ChainHigher Education

Michigan Engineering | Construction Project ManagementHigher Education

Wharton Executive Education | M&A and Corporate Development StrategiesHigher Education

Professional Certificate in Data Engineering program from MIT xPROE-Learning Providers

Post Graduate Certificate in Cybersecurity from MIT xPROE-Learning Providers

Cambridge Judge Business School | Strategic Thinking for the CXOHigher Education

Cambridge Judge Business School | Family Business Leadership ProgrammeHigher Education

Kellogg Executive Education | Professional Certificate in Product ManagementHigher Education

Kellogg Executive Education | Accelerated Marketing Leadership ProgramHigher Education

Steering Complex Projects | Cambridge Judge Business School Executive EducationEducation Administration Programs

Wharton Executive Education | Emerging CFO ProgramHigher Education

Carnegie Mellon University School of Computer Science Executive EducationHigher Education

Texas Executive Education | Sustainability Leadership ProgramHigher Education

MIT xPRO | Supply Chain Management: Leading with AI and Digital TransformationHigher Education

Wharton Executive Education - Executive Compensation: Strategies and FrameworksHuman Resources Services

MIT xPRO AI Strategy and Leadership ProgramHigher Education

MIT xPRO | AI for Senior ExecutivesHigher Education

Wharton Executive Education: Mastering Talent ManagementE-Learning Providers

Berkeley | Leading Complex ProjectsHigher Education

Post Graduate Certificate in Data Engineering from MIT xPROE-Learning Providers

MIT xPRO | Senior Executive Program for Technology LeadersHigher Education

Kellogg Executive Education | Business Strategies for Growth: Fewer, Bigger, BolderHigher Education

Post Graduate Certificate in Full Stack Development from MIT xPROE-learning

MIT xPRO | Medical Technology Program for Global LeadersHigher Education

Berkeley | Marketing Analytics and AI: Strategies and ToolsHigher Education

Emory Executive Education | Healthcare Leadership Program for ExecutivesHigher Education

INSEAD | Chief Operating Officer ProgrammeHigher Education

MIT Sloan | Unlocking Your Leadership SignatureHigher Education

Kellogg Executive Education | B2B Marketing: Growth Strategies for Your OrganizationHigher Education

Carnegie Mellon University School of Computer Science - Programming with PythonHigher Education

Wharton Executive Education | Supply Chain AnalyticsEducation

Emory Executive Education | Executive Decision Making for Healthcare LeadersHigher Education

MIT xPRO | Rapid Prototyping TechnologiesTechnology, Information and Internet

Wharton Executive Education | Business Analytics for Senior Executives ProgramHigher Education

MIT xPRO | NanotechnologyTechnology, Information and Internet

MIT xPro | Professional Certificate in Game DesignHigher Education

Wharton Executive Education | Global C-Suite ProgramHigher Education

Kellogg - Advertising and Marketing Communication StrategyMarketing Services

Kellogg Executive Education | AI Strategies for Business TransformationHigher Education

Michigan Ross | Michigan Engineering Pro-Ed | CDAIO ProgramHigher Education

Wharton Executive Education | Management Development ProgramHigher Education

Wharton Executive Education | Business Analytics: From Data to InsightsE-learning

Kellogg Executive Education | Digital Marketing Strategies: Data, Automation, AI & AnalyticsHigher Education

MIT Sloan | Mastering Design ThinkingHigher Education

Kellogg Executive Education | Senior Management Program in AI and Digital TransformationHigher Education

Kellogg Executive Education | Mastering Sales: A Toolkit for SuccessHigher Education

MIT xPRO | Drug and Medical Device Development: A Strategic Approach - Online ProgramHigher Education

Digital Transformation (Online) by UC Berkeley Executive EducationE-Learning Providers

MIT's Machine Learning (Online)Higher Education

Negotiation and Influence by EMERITUSEducation Administration Programs

NYU RLab UX Design Principles for AR & VRE-Learning Providers

Data Science (Online) by UC Berkeley Executive EducationE-Learning Providers

MIT xPRO | Tech CEO ProgramHigher Education

Kellogg Executive Education | Strategies That Build Winning BrandsHigher Education

Wharton Executive Education | Entrepreneurship Acceleration ProgramHigher Education

Cambridge Judge Business School | AI Leadership ProgrammeHigher Education

London Business School | Global C-Suite Leadership (GLCXO) ProgrammeHigher Education

Cambridge Judge Business School | Board Director ProgrammeHigher Education

MIT xPRO | Applied AI in Healthcare: Innovation Strategy and LeadershipHigher Education

MIT xPRO | AI and Cybersecurity: Strategies for Resilience and DefenseHigher Education

Kellogg Executive Education | AI-Driven Product StrategyHigher Education

UCLA | Board Director ProgramHigher Education

Wharton Executive Education | Board Readiness ProgramHigher Education

Kellogg Executive Education | Advanced Certificate in Digital Marketing and AI Strategies for GrowthHigher Education

Kellogg Executive Education's General Management Program (GMP)Higher Education

Kellogg Executive Education | Advanced Certificate in Brand Strategy and Digital MarketingHigher Education

Kellogg Executive Education | Product Strategy: Develop and Manage Successful ProductsHigher Education

MIT xPRO | Chief Operating Officer (COO) ProgramHigher Education

Loading…

Bloomberg Learning | AI Strategy Program Similar Companies

University of Cincinnati

uc.edu

The University of Cincinnati, top 5 university for co-op and internships, offers students a balance of academic excellence and real-world experience. Since its founding in 1819, UC has been the source of many discoveries creating positive change for society, including the first antihistamine, the first cooperative education program, the first electronic organ, and the oral polio vaccine. Each year, this urban, public, research university graduates nearly 10,000 students, adding to more than 300,000 living alumni around the world. UC is the largest employer in the Cincinnati region, with an economic impact of more than $4.2 billion.

Liberty University

liberty.edu

Located in the foothills of the Blue Ridge Mountains in Lynchburg, Va., Liberty University has been 𝘛𝘳𝘢𝘪𝘯𝘪𝘯𝘨 𝘊𝘩𝘢𝘮𝘱𝘪𝘰𝘯𝘴 𝘧𝘰𝘳 𝘊𝘩𝘳𝘪𝘴𝘵 𝘴𝘪𝘯𝘤𝘦 1971. Offering more than 700 unique programs of study from the certificate to the doctoral level, Liberty equips students with the values, knowledge, and skills essential for impacting tomorrow’s world.

Boston University School of Public Health

bu.edu

Ranked in the top 10 schools and programs of public health in the world by US News and World Report, Boston University School of Public Health provides the opportunity to engage in world-renowned research, scholarship, social justice, and public health practice. Founded in 1976, BUSPH offers master- and doctoral-level education in public health, as well as continuing learning opportunities. The faculty in six departments (biostatistics; community health sciences; environmental health; epidemiology; global health; and health law, policy & management) conduct policy-changing public health research around the world, with the mission of improving the health of populations—especially the disadvantaged, underserved, and vulnerable—locally, nationally, and internationally.

Northwestern University

northwestern.edu

Northwestern is one of the nation’s premier research universities, combining innovative teaching and pioneering research in a highly collaborative, multidisciplinary, and diverse environment. Northwestern provides both students and faculty exceptional opportunities for intellectual, personal, and professional growth in beautiful settings, with two campuses located on Lake Michigan: a 240-acre campus in Evanston, minutes north of Chicago, and a 25-acre campus in downtown Chicago. A third campus in Doha, Qatar was founded in 2008. For more information visit http://www.northwestern.edu

University of Arkansas

uark.edu

The University of Arkansas is Arkansas' only R1 research institution and is the flagship land-grant campus of the U of A System. We provide an internationally competitive education for undergraduate and graduate students in more than 200 academic programs and contribute more than $2.2 billion in economic impact to the state of Arkansas. The Carnegie Foundation classifies the U of A among the top 3 percent of colleges and universities in America with the highest level of research activity. U.S. News & World Report ranks the University of Arkansas among its top American public research universities. Founded in 1871, the University of Arkansas comprises 10 colleges and schools and maintains a low student-to-faculty ratio that promotes personal attention and close mentoring to provide all students with life-changing opportunities. The U of A is dedicated to Arkansas and works to build a better world.

Western Governors University

wgu.edu

WGU, www.wgu.edu, is an online university for the 21st century. We are driven by a mission to expand access to higher education through online, competency-based degree programs. Since its establishment in 1997, WGU has grown into a national university, serving more than 180,000 students from all 50 states. The university continues to open doors for adult learners who need flexibility to achieve their education and career goals. WGU’s innovative competency-based academic approach makes it possible, allowing individuals to fit their education into their lives, not the other way around. WGU was founded by the governors of 19 U.S. states. WGU is also supported by over 20 major corporations and foundations who believe in WGU’s commitment to producing highly competent graduates. Curious about our new look and feel? Read more here: https://www.wgu.edu/blog/2025/12/new-look-focused-on-pathways-to-opportunity.html

RMIT University

rmit.edu.au

RMIT is a global university of technology, design and enterprise. One of Australia's original tertiary institutions, RMIT University enjoys an international reputation for excellence in professional and vocational education, applied research, and engagement with the needs of industry and the community. RMIT is a world leader in Art and Design; Architecture and the Built Environment; Engineering; Accounting and Finance; and Business and Management Studies. CRICOS provider code: 00122A

Virginia Commonwealth University

vcu.edu

We’re Virginia Commonwealth University — the university FOR Virginia. You will see an incredible mix of attitudes, styles and stories. Inclusion is our heartbeat and it drives us to tackle difficult challenges others can’t or won’t. We do things differently here, because we know that different works. We're proud of our rankings, but they don't define us. Rankings don’t change lives, we do. VCU’s unequaled combination of excellence, diversity, research and creativity makes success possible for every one of our 300,000+ RAMily members. And that makes us one of the most innovative universities in the U.S. We are Richmond's largest employer. And we prove every day that when you come to VCU, you can become anything. As one of Virginia’s top three research institutions, every student has the chance to participate in activities that result in breakthrough work. Our sponsored research has increased 71% since 2018, to $464.6 million. And our discoveries have led to thousands of patents and successful student startups. In addition, our VCU Health System is dedicated to ending health care disparities. We are Richmond's top hospital and serve as a renowned training facility for future health care leaders. All students receive unique benefits to improve their quality of life, and to make a difference by helping others. Every step moves society closer to the next life-changing solution. Our graduates are trained to make an impact in the world, and they carry that responsibility wherever they go. We reject traditional thinking and champion the unconventional, setting standards that others follow. We give our students the freedom to rewrite the rule books and the skills to disrupt expectations. We’re pursuing a future that’s built by us. A future that improves learning and health for ALL. Learn more at: linkin.bio/vcu

The University of North Carolina at Chapel Hill

unc.edu

Carolina’s vibrant people and programs attest to the University’s long-standing place among leaders in higher education since it was chartered in 1789 and opened its doors for students in 1795 as the nation’s first public university. Situated in the beautiful college town of Chapel Hill, N.C., UNC has earned a reputation as one of the best universities in the world. Carolina prides itself on a strong, diverse student body, academic opportunities not found anywhere else, and a value unmatched by any public university in the nation. UNC-Chapel Hill's LinkedIn comments guidelines: Thank you for liking the LinkedIn page of the University of North Carolina at Chapel Hill. This page highlights information about the people and programs at Carolina. Consistent with UNC-Chapel Hill’s Policy on Prohibited Discrimination, Harassment and Related Misconduct, and the North Carolina Campus Free Speech Act, we encourage your comments and opinions as they relate to our posts. This page is actively monitored for relevance. Carolina reserves the right to remove any comments that are not related to the particular post, make unsupported accusations, contain ad-hominem attacks, use obscene language or images, are blatant spam, contain advertisements, or contain inappropriate personal information or sensitive information. Repeated violation of these guidelines or behavior that substantially disrupts the maintenance of this page could result in a user being blocked from the page. Thanks for keeping the page enjoyable for everyone. Go Tar Heels!

Loading…

NEWS

Bloomberg Learning | AI Strategy Program CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 03, 2025 08:00 AM

US Slashes Pay Incentives at Already Weakened Cyber Agency

The Trump administration is ending a pay incentive program intended to hire and retain experts in the federal government's primary civilian...

Read Article

December 01, 2025 08:00 AM

Strategy CEO Hints Bitcoin Sales May Loom as Shares Sink

Strategy Inc. said it had created a $1.4 billion reserve to fund future dividend and interest payments, in a bid to temper fears that the...

Read Article

November 26, 2025 08:00 AM

A comprehensive list of 2025 tech layoffs

A complete list of all the known layoffs in tech, from Big Tech to startups, broken down by month throughout 2024 and 2025.

Read Article

November 19, 2025 08:00 AM

6 Cybersecurity Stocks to Buy Now

With a boost in global security spending expected this year, these cybersecurity stocks are worth a closer look.

Read Article

November 06, 2025 08:00 AM

Inside the Bloomberg Terminal’s AI

One leader describes the use of AI in Bloomberg's key technology as “an evolution, not a revolution.”

Read Article

November 04, 2025 08:00 AM

Telefonica to Halve 2026 Dividend in Shift to Focus on Growth

Telefónica SA shares fell the most in more than five years after Spain's largest telecom operator by revenue cut its free cash flow guidance...

Read Article

November 01, 2025 07:00 AM

Mark Zuckerberg drops to 5th place on Bloomberg Billionaires Index following Meta’s massive AI spending

Tech News News: Mark Zuckerberg, Meta CEO, has fallen two spots on the Bloomberg Billionaires Index. This decline stems from Meta's...

Read Article

October 21, 2025 07:00 AM

AI’s Double Edge: Cybersecurity’s Human Frontier

The persistent threat of social engineering, now supercharged by artificial intelligence, casts a long shadow over corporate cybersecurity.

Read Article

October 21, 2025 07:00 AM

Fear sweeps the C-suite—companies pour millions into security as threats against executives surge

Personal security provided to executives jumped from 17% to 27% of companies in two years while cybersecurity protections tripled, a Goldman...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-55867

SUMMARY

Graylog is a free and open log management platform. From 6.2.0 until 6.3.12, 7.0.7, and 7.1.2, the DELETE /users/{userId}/tokens/{idOrToken} endpoint implemented by UsersResource.revokeToken() in graylog2-server/src/main/java/org/graylog2/rest/resources/users/UsersResource.java checks USERS_TOKENREMOVE permission against the attacker-controlled userId path parameter before resolving the token selected by idOrToken. An authenticated user can provide an authorized userId while accessTokenService.loadById() or accessTokenService.load() resolves a token belonging to another user, including a service account or administrator, after which accessTokenService.destroy() deletes that token without checking AccessToken.getUserName(). The issue does not expose token contents, but unauthorized deletion causes integrity impact and can disrupt access-token-based integrations. This issue is fixed in versions 6.3.12, 7.0.7, and 7.1.2.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-55860

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb does not gate clear-text password authentication plugins on transport encryption because the AuthenticationPlugin interface has no capability for a plugin to require a secure connection. A hostile or man-in-the-middle MariaDB server can send an AuthSwitchRequest naming mysql_clear_password or dialog (PAM) over a plain-TCP unencrypted connection, and AuthenticationFlow permits ClearPasswordPluginFlow or PamPluginFlow to return the user's password as cleartext bytes on the wire. The disclosed credentials can subsequently be used to authenticate directly to the database server. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55859

SUMMARY

MariaDB Connector/R2DBC is a non-blocking MariaDB and MySQL client implemented in Java. Prior to 1.4.1, org.mariadb:r2dbc-mariadb encodes and decodes all character data under the assumption that the connection character set is UTF-8. A server can announce a mid-session change to character_set_client through the OK-packet session-state-tracking mechanism, including through SET NAMES executed by a stored routine or trigger, server configuration, or a hostile or man-in-the-middle server. If the new character set is not UTF-8, the driver continues to exchange UTF-8 while the server interprets the same bytes under a different encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value raises R2dbcNonTransientResourceException with SQLState 08000 and closes the connection. This issue is fixed in version 1.4.1.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55858

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, the connector encodes and decodes protocol text and performs client-side escaping under the assumption that the connection character set is UTF-8. The server can report a mid-session change to character_set_client through OK-packet session-state tracking, including a change caused by SET NAMES, a stored routine or trigger, server configuration, or a hostile server. If character_set_client changes to a non-UTF-8 value, the driver continues to read and write UTF-8 while the server interprets the same bytes under another encoding, causing silent data corruption and a client/server charset-confusion mismatch that can defeat byte-wise quoting or escaping. The fix accepts only utf8, utf8mb3, or utf8mb4 after initialization; any other value causes SQLException with SQLState 08000 and closes the connection. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-55857

SUMMARY

MariaDB Connector/J is used to connect applications developed in Java to MariaDB and MySQL databases. Prior to 2.7.14, 3.3.5, 3.4.3, and 3.5.9, PAM dialog authentication can be coerced into transmitting the account password over an insecure connection. The mysql_clear_password plugin is gated behind a secure transport, but the sibling PAM handler SendPamAuthPacketFactory, named dialog by the server, does not declare that requirement and inherits the default secure-required value false; older branches implement the same affected behavior in SendPamAuthPacket. A hostile or man-in-the-middle server can send an Authentication Switch Request for dialog over plain TCP, causing the driver to return the user's password in cleartext when sslMode=DISABLE and restrictedAuth=null, which is the default configuration. Properly verified TLS and local Unix sockets are not exposed to this transport vector. This issue is fixed in versions 2.7.14, 3.3.5, 3.4.3, and 3.5.9.

Published

Date2026-08-28

Updated

Date2026-08-28

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…