What is Bosch UK & Ireland's cybersecurity risk score?

Bosch UK & Ireland has an AI-generated cybersecurity risk score of 754 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Bosch UK & Ireland experienced?

According to Rankiteo, Bosch UK & Ireland currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Bosch UK & Ireland been affected by any supply chain cyber incidents ?

According to Rankiteo, Bosch UK & Ireland has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Bosch UK & Ireland have SOC 2 Type 1 certification ?

According to Rankiteo, Bosch UK & Ireland is not certified under SOC 2 Type 1.

Does Bosch UK & Ireland have SOC 2 Type 2 certification ?

According to Rankiteo, Bosch UK & Ireland does not hold a SOC 2 Type 2 certification.

Does Bosch UK & Ireland comply with GDPR ?

According to Rankiteo, Bosch UK & Ireland is not listed as GDPR compliant.

Does Bosch UK & Ireland have PCI DSS certification ?

According to Rankiteo, Bosch UK & Ireland does not currently maintain PCI DSS compliance.

Does Bosch UK & Ireland comply with HIPAA ?

According to Rankiteo, Bosch UK & Ireland is not compliant with HIPAA regulations.

Does Bosch UK & Ireland have ISO 27001 certification ?

According to Rankiteo,Bosch UK & Ireland is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Bosch UK & Ireland operate in ?

Bosch UK & Ireland operates primarily in the Software Development industry.

How many employees does Bosch UK & Ireland have ?

Bosch UK & Ireland employs approximately 297 people worldwide.

Does Bosch UK & Ireland own any subsidiaries ?

Bosch UK & Ireland presently has no subsidiaries across any sectors.

How many LinkedIn followers does Bosch UK & Ireland have ?

Bosch UK & Ireland's official LinkedIn profile has approximately 17,161 followers.

What is the NAICS classification code for Bosch UK & Ireland ?

Bosch UK & Ireland is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Bosch UK & Ireland have a Crunchbase profile ?

No, Bosch UK & Ireland does not have a profile on Crunchbase.

Does Bosch UK & Ireland have a LinkedIn profile ?

Yes, Bosch UK & Ireland maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/bosch-uk.

How many cybersecurity incidents has Bosch UK & Ireland experienced ?

As of September 14, 2026, Rankiteo reports that Bosch UK & Ireland has experienced 3 cybersecurity incidents.

How many peer or competitor companies does Bosch UK & Ireland have ?

Bosch UK & Ireland has an estimated 30,898 peer or competitor companies worldwide.

What types of cybersecurity incidents has Bosch UK & Ireland faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability and Breach.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

BUI

Boost Score +25 with badge (5 left)

754

/1000

Fair

779

/1000

Fair

Bosch UK & Ireland Vendor Cyber Rating & Cyber Score

https://www.bosch.co.uk/?utm_source=LinkedIn&utm_medium=LinkedIn_BoschUK&utm_campaign=LinkedIn_domainclick

Add Your Compliance Badge

Hey there, welcome to Bosch UK. We're a leading supplier of technology and services. Born in 1898, the UK was the company's first international foray. And, today the region is Bosch's second largest market in Europe. Growing quickly from our automotive roots, we're transforming into a leading IoT partner, offering innovative solutions for connected living, connected mobility, and connected industry. Using our expertise in sensor technology, software and services, as well as our own IoT cloud, we offer our customers connected, cross-domain solutions all from a single source. Want to get to know us better? Press the follow button, or visit www.bosch.co.uk Data protection policy : https://bit.ly/3wGWNZw

BUI

Bosch UK & Ireland CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Bosch UK & Ireland

Breach

12/2025

BOS1764973211

Bosch

Breach

12/2025

BOS1780504416

Bosch UK & Ireland

Vulnerability

100

1/2024

BOS334333310272...

Loading…

A.I.

BUI Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for BUI

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for Bosch UK & Ireland in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Bosch UK & Ireland in 2026.

Incident Types BUI vs Software Development Industry Avg (This Year)

No incidents recorded for Bosch UK & Ireland in 2026.

Incident History - BUI (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Bosch UK & Ireland Subsidiaries

BUI

Software Development

Website: https://www.bosch.co.uk/?utm_source=LinkedIn&utm_medium=LinkedIn_BoschUK&utm_campaign=LinkedIn_domainclick

Company Size: 297

BoschSoftware Development

Bosch Global Software TechnologiesSoftware Development

Bosch IndiaMotor Vehicle Manufacturing

Bosch BrasilSoftware Development

Bosch Rexroth BrasilAutomation Machinery Manufacturing

Bosch Projects do BrasilIndustrial Machinery Manufacturing

Bosch USASoftware Development

Robert Bosch Tool Corporation NAManufacturing

Dremel Power ToolsConsumer Goods

Bosch RexrothAutomation Machinery Manufacturing

ctrlX OS EcosystemAutomation Machinery Manufacturing

CU.BE by Bosch RexrothHerstellung von Industriemaschinen

Bosch TürkiyeIndustrial Machinery Manufacturing

Bosch Turkey Automotive TechnologyMotor Vehicle Manufacturing

Bosch Turkey Industrial TechnologyIT Services and IT Consulting

Bosch MobilityAutomobil

Bosch Security and Safety SystemsAppliances, Electrical, and Electronics Manufacturing

Conference solutions by BoschProductie huishoudelijke apparaten en consumentenelektronica

Bosch PortugalSoftware Development

Bosch Industry Consulting PortugalMechanical Or Industrial Engineering

INNOVATIVE CAR HMIFabricação de veículos automotores, reboques e carrocerias

Projeto Safe CitiesSecurity and Investigations

Bosch Middle EastIT Services and IT Consulting

Bosch ChinaIT Services and IT Consulting

Bosch RomaniaMotor Vehicle Manufacturing

Bosch MagyarországSoftware Development

Bosch Australia & New ZealandIndustrial Machinery Manufacturing

Bosch Australia Manufacturing Solutions (BAMS)Manufacturing

Bosch ResearchResearch Services

Bosch Power ToolsAppliances, Electrical, and Electronics Manufacturing

Bosch Professional Power Tools and AccessoriesHerstellung von Haushalts-, Elektro- und Elektronikgeräten

Bosch DigitalIT Services and IT Consulting

Bosch Home Comfort GroupRenewable Energy Semiconductor Manufacturing

Bosch Thermotechnik GmbHRenewable Energy Semiconductor Manufacturing

Bosch Sensortec GmbHSemiconductor Manufacturing

Bosch Service SolutionsBusiness Consulting and Services

Bosch Secure Truck ParkingTransport, Logistik, Lieferkette und Lagerhaltung

Bosch PolskaIndustrial Machinery Manufacturing

Bosch FranceIndustrial Machinery Manufacturing

Bosch Home Comfort FranceIngénierie mécanique ou industrielle

Bosch Mobility Aftermarket FranceIndustrie automobile

Bosch Rodez Manufacturing and ServicesFabrication de machines industrielles

Bosch Hydrogen EnergyErneuerbare Energien und Halbleiterproduktion

Bosch NordicIT Services and IT Consulting

Bosch Energy and Building SolutionsElectrical Equipment Manufacturing

Bosch Software InnovationsSoftware Development

Bosch SwitzerlandSoftware Development

Bosch JapanMotor Vehicle Manufacturing

Bosch the NetherlandsTechnology, Information and Internet

Bosch Automotive NAMotor Vehicle Manufacturing

Bosch Business InnovationsVenture Capital and Private Equity Principals

Bosch Connected IndustryInformation Technology & Services

Bosch VenturesVenture Capital and Private Equity Principals

Bosch Manufacturing Solutions | BMGAutomation Machinery Manufacturing

Bosch Rexroth CanadaIndustrial Automation

Bosch ConnectedWorldIT Services and IT Consulting

Bosch Engineering and Production ServicesBusiness Consulting and Services

Junkers BoschHVAC and Refrigeration Equipment Manufacturing

Bosch Industrial PortugalIndustrial Machinery Manufacturing

CyberCompareIT Services and IT Consulting

CyberCompare Security DaysEvents Services

Bosch BelgiumTechnology, Information and Internet

Bosch Comercial e Industrial EspañaIndustrial Machinery Manufacturing

Bosch CanadaSoftware Development

Bosch Digital BulgariaIT Services and IT Consulting

Bosch Software FlowSoftware Development

Bosch Digital Twin IndustriesSoftware Development

Bosch Life Safety SystemsFire Protection

Bosch Automotive Service Solutions UKIT Services and IT Consulting

Loading…

Bosch UK & Ireland Similar Companies

Alibaba Group

alibabagroup.com

🌍Alibaba Group is on a mission to make it easy to do business anywhere! Guided by our passion and imagination, we’re leading the way in AI, cloud computing and e-commerce. We aim to build the future infrastructure of commerce, and we aspire to be a good company that lasts for 102 years.

GlobalLogic

cb globallogic.com

GlobalLogic, a Hitachi Group company, is a trusted partner in design, data, and digital engineering for the world’s largest and most innovative companies. Since our inception in 2000, we have been at the forefront of the digital revolution, helping to create some of the most widely used digital products and experiences. Our purpose is to positively impact society and the planet through cutting-edge technology. Together with our clients, we are engineering impact through intelligent products, platforms, and services that are designed for desirability, engineered for excellence, and curated for intelligence. Our people-first culture fosters shoulder-to-shoulder teamwork, supported by a unique lab model and flexible delivery options, including onshore, nearshore, and offshore solutions. We also prioritize environmental stewardship in our product development and are committed to leveraging the diversity of thoughts as a driver for business innovation, attracting and developing talent, and sustainable growth. We are proud of our global recognitions: Leader in the ISG Provider Lens™ Digital Engineering Services 2024 U.S. report Everest Group's Software Product Engineering Services Peak Matrix 2024 Star Performer in Major Contender in Everest Group’s Trust & Safety Peak Matrix 2024 2024 EcoVadis Silver Sustainability Rating Join us as we continue to shape the future of digital engineering and create lasting impacts for businesses and communities worldwide: globallogic.com

Baidu, Inc.

baidu.com

Baidu is a leading AI company with strong Internet foundation, driven by our mission to “make the complicated world simpler through technology”. Founded in 2000 as a search engine platform, we were an early adopter of artificial intelligence in 2010. Since then, we have established a full AI stack, from deep learning frameworks to models and applications, with industry-leading self-developed technology at every level. Over the past two decades, we have built a diversified portfolio of products and services, spanning an ecosystem of hundreds of millions of users, millions of developers, and hundreds of thousands of enterprises. We have now integrated our leading AI capabilities into our offerings, driving innovative use cases. Join us to shape the future of AI and technology. For media inquiries, contact us at [email protected]. For career opportunities, visit https://talent.baidu.com/static/index.html

TOTVS

cb totvs.com

Olá, somos a TOTVS! A maior empresa de tecnologia do Brasil. 🤓 Líder absoluta em sistemas e plataformas para empresas, a TOTVS possui mais de 70 mil clientes. Indo muito além do ERP, oferece tecnologia completa para digitalização dos negócios por meio de 3 unidades de negócio: - Gestão: ERPs, soluções cross e sistemas especializados visando garantir mais produtividade, eficiência e governança para os negócios; 💻 - Techfin: ERP Banking que oferece soluções de crédito B2B e pagamento, integrados a sistemas de gestão; 💸 - RD Station: Ferramentas digitais de marketing, vendas e relacionamento, para empresas de todos os portes e segmentos. 🚀 Nos últimos 5 anos, a companhia investiu R$3 bilhões em pesquisa e desenvolvimento para atender de maneira cada vez mais especializada empresas de 12 segmentos da economia, tornando-se um trusted advisor de seus clientes. A TOTVS é uma potência tecnológica que apoia a evolução de empresas de norte a sul do país. O Brasil, que faz, faz com TOTVS.

Expedia Group

expediagroup.com

At Expedia Group (NASDAQ: EXPE), we believe travel is a force for good – it opens minds, builds connections, and bridges divides. We create transformative tech that enables unforgettable experiences for all travelers, everywhere. Our trusted family of brands are known and loved by millions, and we power more trips than anyone else. To learn more about our vision of a more open world through travel, visit www.expediagroup.com. We’re committed to providing an inclusive and accessible recruiting experience for candidates with disabilities, or other physical or mental health conditions. If you require an accommodation or adjustment for any part of the application or recruitment process, please let us know by completing our Accommodation Request Form or contacting your recruiter. Employment opportunities and job offers at Expedia Group will always come from Expedia Group’s Talent Acquisition and hiring teams. Never provide sensitive, personal information to someone unless you’re confident about who they are. We do not send job offers via email, or any other messaging tools, to individuals we have not had prior contact with. Our email domain is @expediagroup.com. Our official careers website, where you can to find and apply for job openings, is careers.expediagroup.com/jobs. If you require customer service support to cancel, change or ask about a refund for your trip, you can connect with our 24/7 Virtual Agent through the following links: Expedia: https://www.expedia.com/helpcenter Hotels.com: https://service.hotels.com/en-us/ Vrbo: https://help.vrbo.com/ For additional assistance, direct message us on Twitter @ExpediaHelp with your itinerary number and email address: https://twitter.com/ExpediaHelp

Intuit

intuit.com

Intuit is a global technology platform that helps our customers and communities overcome their most important financial challenges. Serving millions of customers worldwide with TurboTax, QuickBooks, Credit Karma and Mailchimp, we believe that everyone should have the opportunity to prosper and we work tirelessly to find new, innovative ways to deliver on this belief. We encourage conversations on this page and will not delete comments that follow our terms of use. In order to keep this a safe community, the below posts may be removed: Repeated posts of the same content, spam or posts from fake accounts or profiles, offensive language or material, threats to others in the community, posts deliberately aimed to have a negative effect on the community or conversations.

Microsoft

cb microsoft.com

Every company has a mission. What's ours? To empower every person and every organization to achieve more. We believe technology can and should be a force for good and that meaningful innovation contributes to a brighter world in the future and today. Our culture doesn’t just encourage curiosity; it embraces it. Each day we make progress together by showing up as our authentic selves. We show up with a learn-it-all mentality. We show up cheering on others, knowing their success doesn't diminish our own. We show up every day open to learning our own biases, changing our behavior, and inviting in differences. Because impact matters. Microsoft operates in 190 countries and is made up of approximately 228,000 passionate employees worldwide.

DiDi

didiglobal.com

DiDi Global Inc. is a leading mobility technology platform. It offers a wide range of app-based services across Asia Pacific, Latin America, and other global markets, including ride hailing, taxi hailing, designated driving, hitch and other forms of shared mobility as well as certain energy and vehicle services, food delivery, and intra-city freight services. DiDi provides car owners, drivers, and delivery partners with flexible work and income opportunities. It is committed to collaborating with policymakers, the taxi industry, the automobile industry, and the communities to solve the world’s transportation, environmental, and employment challenges through the use of AI technology and localized smart transportation innovations. DiDi strives to create better life experiences and greater social value, by building a safe, inclusive, and sustainable transportation and local services ecosystem for cities of the future.

PedidosYa

pedidosya.com

We’re the delivery market leader in Latin America. Our platform connects over 77.000 restaurants, supermarkets, pharmacies and stores with millions of users. Nowadays we operate in more than 500 cities in Latinamerica. And we are now over 3.400 employees. PedidosYa is available for iOS, Android and Windows Phone operating systems and downloads are now over 20 million.

Loading…

NEWS

Bosch UK & Ireland CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 19, 2025 10:41 PM

Best kettle 2025: Our favourite rapid-boil, quiet and smart models tested

Looking to brew the perfect cuppa? We've put the best kettles through rigorous testing.

Read Article

December 18, 2025 05:18 PM

5 best tabletop dishwashers for squeaky clean plates in small spaces

With plenty of small designs to choose from, we've found the best table top dishwashers 2023 from Bosch, Russell Hobbs, Zanussi and more.

Read Article

December 17, 2025 10:12 AM

The 15 best cordless vacuums of 2025, tested by experts

We spent weeks testing stick vacuum cleaners at home, rating each on suction power, ease of use and cleaning performance.

Read Article

December 10, 2025 08:00 AM

Oldham business offered exclusive access to Bosch hydrogen HQ

Oldham Engineering Ltd has been chosen to join a select group of Greater Manchester businesses visiting Bosch's global...

Read Article

December 08, 2025 08:00 AM

Rochdale firm chosen for hydrogen mission to Bosch HQ in Germany

A Rochdale-based water treatment specialist is among a select group of Greater Manchester firms heading to Bosch's hydrogen headquarters in...

Read Article

December 08, 2025 08:00 AM

The best washing machines for fresh clean clothes, recommended by expert buyers

Which washing machines are most reliable and energy-efficient? We asked the experts and found out.

Read Article

December 05, 2025 08:00 AM

The best dishwashers, recommended by experts

Our experts review the best dishwashers and explain why it is worth splashing out on extra features that can make your easier.

Read Article

November 28, 2025 08:00 AM

15 best cordless stick vacuum cleaners to buy now, tried and tested

We've tested over 155 stick vacuums and these are the 15 best cordless vacuum cleaners to buy now, including Dyson, Vax, Shark, Tefal and...

Read Article

November 24, 2025 08:00 AM

“I tried Bosch's electric cleaning brush and now I can’t clean without it”

Is it worth buying an electric cleaning brush? Our household advice editor firmly thinks so. Here's what happened when she tried one out.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-90603

SUMMARY

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be launched remotely. The name of the patch is f013270957f75e439eaf97eb2a93decb32a4543e. Applying a patch is advised to resolve this issue.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90602

SUMMARY

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 3.5)

cvss2

Base Score: 4.0

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:P/A:N

cvss3

Base Score: 3.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.1

REFERENCES

CVE-2026-90601

SUMMARY

A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the component REST API. The manipulation results in improper authentication. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90600

SUMMARY

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15892

SUMMARY

The mcumgr SMP settings-management group handlers settings_mgmt_read(), settings_mgmt_write(), and settings_mgmt_delete() in subsys/mgmt/mcumgr/grp/settings_mgmt/src/settings_mgmt.c allocate a key_name buffer (and, for read, a data buffer) via k_malloc() when CONFIG_MCUMGR_GRP_SETTINGS_BUFFER_TYPE_HEAP is enabled, relying on the end: label to k_free() them. When CONFIG_MCUMGR_GRP_SETTINGS_ACCESS_HOOK is also enabled and the application access hook rejects a request by returning status MGMT_CB_ERROR_RC, the handler executed return ret_rc; directly, bypassing end: and leaking the heap allocation on every rejected request. The settings handlers are reachable over the unauthenticated SMP transport (Bluetooth LE, UART, or UDP, depending on product configuration). The access hook is the mechanism applications use to deny unauthorized settings access, and MGMT_CB_ERROR_RC is a common rejection style, so an attacker who can send settings read/write/delete commands that the hook rejects triggers a heap leak on each attempt. Because the leaked memory is never reclaimed until reboot, a sustained stream of rejected requests monotonically exhausts the kernel heap until k_malloc() fails, denying mcumgr service and impacting any other heap consumer on the device — a denial of service. The impact is availability-only; there is no memory corruption or information disclosure. Only configurations that select the heap buffer type, enable the access hook, and register a hook that returns MGMT_CB_ERROR_RC are affected (the default stack buffer type cannot leak).

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Bosch UK & Ireland Vendor Cyber Rating & Cyber Score

BUI A.I CyberSecurity Scoring

Bosch UK & Ireland CyberSecurity News & History

BUI Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for BUI

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types BUI vs Software Development Industry Avg (This Year)

Incident History - BUI (X = Date, Y = Severity)

Bosch UK & Ireland Subsidiaries

BUI

Bosch UK & Ireland Similar Companies

Alibaba Group

GlobalLogic

Baidu, Inc.

TOTVS

Expedia Group

Intuit

Microsoft

DiDi

PedidosYa

Bosch UK & Ireland CyberSecurity News

Best kettle 2025: Our favourite rapid-boil, quiet and smart models tested

5 best tabletop dishwashers for squeaky clean plates in small spaces

The 15 best cordless vacuums of 2025, tested by experts

Oldham business offered exclusive access to Bosch hydrogen HQ

Rochdale firm chosen for hydrogen mission to Bosch HQ in Germany

The best washing machines for fresh clean clothes, recommended by expert buyers

The best dishwashers, recommended by experts

15 best cordless stick vacuum cleaners to buy now, tried and tested

“I tried Bosch's electric cleaning brush and now I can’t clean without it”

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Bosch UK & Ireland CyberSecurity News & History

BUI Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for BUI

Incidents vs Software Development Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types BUI vs Software Development Industry Avg (This Year)

Incident History - BUI (X = Date, Y = Severity)

Bosch UK & Ireland Subsidiaries

BUI

Bosch UK & Ireland Similar Companies

Alibaba Group

GlobalLogic

Baidu, Inc.

TOTVS

Expedia Group

Intuit

Microsoft

DiDi

PedidosYa

Bosch UK & Ireland CyberSecurity News

Best kettle 2025: Our favourite rapid-boil, quiet and smart models tested

5 best tabletop dishwashers for squeaky clean plates in small spaces

The 15 best cordless vacuums of 2025, tested by experts

Oldham business offered exclusive access to Bosch hydrogen HQ

Rochdale firm chosen for hydrogen mission to Bosch HQ in Germany

The best washing machines for fresh clean clothes, recommended by expert buyers

The best dishwashers, recommended by experts

15 best cordless stick vacuum cleaners to buy now, tried and tested

“I tried Bosch's electric cleaning brush and now I can’t clean without it”

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo