What is the official website of Buying for Schools ?

The official website of Buying for Schools is https://www.gov.uk/guidance/buying-for-schools.

What is Buying for Schools's cybersecurity risk score?

Buying for Schools has an AI-generated cybersecurity risk score of 762 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Buying for Schools experienced?

According to Rankiteo, Buying for Schools currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Buying for Schools been affected by any supply chain cyber incidents ?

According to Rankiteo, Buying for Schools has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Microsoft Dynamics 365 (Incident ID: ALL1785522998) Fortinet (Incident ID: FORGOV1783297461) Kraken Technology Group (Incident ID: UK-KRA1786368391)

Does Buying for Schools have SOC 2 Type 1 certification ?

According to Rankiteo, Buying for Schools is not certified under SOC 2 Type 1.

Does Buying for Schools have SOC 2 Type 2 certification ?

According to Rankiteo, Buying for Schools does not hold a SOC 2 Type 2 certification.

Does Buying for Schools comply with GDPR ?

According to Rankiteo, Buying for Schools is not listed as GDPR compliant.

Does Buying for Schools have PCI DSS certification ?

According to Rankiteo, Buying for Schools does not currently maintain PCI DSS compliance.

Does Buying for Schools comply with HIPAA ?

According to Rankiteo, Buying for Schools is not compliant with HIPAA regulations.

Does Buying for Schools have ISO 27001 certification ?

According to Rankiteo,Buying for Schools is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Buying for Schools operate in ?

Buying for Schools operates primarily in the Government Administration industry.

How many employees does Buying for Schools have ?

Buying for Schools employs approximately None employees people worldwide.

Does Buying for Schools own any subsidiaries ?

Buying for Schools presently has no subsidiaries across any sectors.

How many LinkedIn followers does Buying for Schools have ?

Buying for Schools's official LinkedIn profile has approximately 5,762 followers.

What is the NAICS classification code for Buying for Schools ?

Buying for Schools is classified under the NAICS code 92, which corresponds to Public Administration.

Does Buying for Schools have a Crunchbase profile ?

No, Buying for Schools does not have a profile on Crunchbase.

Does Buying for Schools have a LinkedIn profile ?

Yes, Buying for Schools maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/buying-for-schools.

How many cybersecurity incidents has Buying for Schools experienced ?

As of September 26, 2026, Rankiteo reports that Buying for Schools has experienced 31 cybersecurity incidents.

How many peer or competitor companies does Buying for Schools have ?

Buying for Schools has an estimated 13,485 peer or competitor companies worldwide.

What types of cybersecurity incidents has Buying for Schools faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Breach, Ransomware and Vulnerability.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Boost Score +25 with badge (5 left)

762

/1000

Fair

787

/1000

Fair

Buying for Schools Vendor Cyber Rating & Cyber Score

www.gov.uk

Add Your Compliance Badge

The Schools Commercial Team at the Department for Education (DfE) are helping schools save on their non-staff spend. We work directly with schools to provide help and support through providing access to buying guidance and support, promotion of School Business Professional (SBP) networks and signposting to benchmarking and insight tools. Our Get help buying for schools service launched in 2021. This is a free and impartial DfE service that supports schools with their buying. We can help schools buy compliantly, save time and secure great value. The service covers a wide range of services from catering and cleaning to insurance and utilities, and continues to evolve based on user feedback. We also offer schools a range of digital tools

Buying for Schools CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

UK Ministry of Defe...

Breach

8/2026

UK-HER178591219...

UK Ministry of Defe...

Breach

100

8/2026

UK-1785709637

Department for Educ...

Ransomware

100

7/2026

Microsoft Dynam...

ALL1785522998

UK Ministry of Defe...

Breach

100

7/2026

UK-1785371161

Foreign and Commonw...

Cyber Attack

100

7/2026

Fortinet

FORGOV178329746...

Cabinet Office

Breach

5/2026

CAB1777832879

UK Ministry of Defe...

Vulnerability

4/2026

Kraken Technolo...

UK-KRA178636839...

Buying for Schools

Vulnerability

12/2025

DCM1765433387

Buying for Schools

Breach

11/2025

UK-523475211042...

Buying for Schools

Cyber Attack

100

10/2025

UK-556215510202...

Foreign and Commonw...

Breach

10/2025

FOR1766412101

Buying for Schools

Ransomware

100

9/2025

DCM1764770468

Buying for Schools

Breach

100

8/2025

UK-841081625

Buying for Schools

Breach

6/2025

HMR745060625

UK Home Office

Breach

4/2025

UK-1777581082

Buying for Schools

Breach

100

7/2024

UK-421016421104...

Buying for Schools

Breach

100

6/2024

UK-169221610212...

Buying for Schools

Breach

100

4/2024

UK-493314910132...

Buying for Schools

Breach

100

8/2023

UK-707072025

Buying for Schools

Breach

100

7/2023

UK-221002221104...

Buying for Schools

Cyber Attack

100

01/2023

DEP225811123

Buying for Schools

Breach

100

6/2022

UK-289342811142...

Buying for Schools

Breach

100

2/2022

UK-503305010202...

Buying for Schools

Breach

1/2022

UK-559215509112...

Buying for Schools

Breach

11/2021

GOV1527121122

Buying for Schools

Breach

100

10/2021

UK-576295710232...

HM Revenue & Custom...

Cyber Attack

9/2021

HMR1782752907

Buying for Schools

Breach

100

8/2021

UK-552175511242...

Buying for Schools

Breach

100

6/2021

UK-089380810032...

Buying for Schools

Cyber Attack

100

09/2015

NAT233920422

Buying for Schools

Breach

100

6/2010

UK-069420609202...

Loading…

A.I.

BS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for BS

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for Buying for Schools in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Buying for Schools in 2026.

Incident Types BS vs Government Administration Industry Avg (This Year)

No incidents recorded for Buying for Schools in 2026.

Incident History - BS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Buying for Schools Subsidiaries

BS

Government Administration

Website: https://www.gov.uk/guidance/buying-for-schools

Company Size: 5,001-10,000 employees

Department for EducationGovernment Administration

UK Civil ServiceGovernment Administration

UK Ministry of DefenceDefense and Space Manufacturing

Defence Equipment & Support (DE&S)Defense and Space Manufacturing

Defence ProcurementDefense & Space

HM Revenue & CustomsGovernment Administration

UK Home OfficeGovernment Administration

Department of Health and Social CareGovernment Relations Services

Department for Business and TradeGovernment Administration

Business SupportGovernment Relations

GREAT Trade and InvestmentWholesale Import and Export

UK Business and Trade - North AmericaGovernment Relations Services

OfstedGovernment Administration

Department for Science, Innovation and TechnologyGovernment Administration

Careers at the Department for Science, Innovation and TechnologyGovernment Administration

Cabinet OfficeGovernment Administration

GOV.UKGovernment Relations Services

HM Government Public AppointmentsGovernment Administration

Department for International Development (DFID)Government Administration

UK-Africa Investment Summit 2020Government Administration

National Crime Agency (NCA)Law Enforcement

UK Financial Intelligence Unit (UKFIU)Law Enforcement

Department for Work and Pensions (DWP)Government Administration

Disability ConfidentGovernment Administration

See PotentialGovernment Administration

Department for Transport (DfT), United KingdomGovernment Administration

Foreign and Commonwealth OfficeGovernment Administration

Department for Environment, Food and Rural AffairsGovernment Administration

Defra digital, data, technology and securityIT Services and IT Consulting

Defra Public AppointmentsGovernment Administration

Forestry CommissionGovernment Administration

Food Standards AgencyGovernment Administration

Starting a Food BusinessFood & Beverages

Crown Prosecution ServiceLaw Practice

Department for Culture, Media and SportGovernment Administration

HM TreasuryPublic Policy Offices

Office of Financial Sanctions Implementation (OFSI)Government Administration

Office for National StatisticsGovernment Administration

Government Statistical ServiceGovernment Administration

Civil Service Fast Stream Statisticians' OutreachGovernment Administration

Census2021Government Administration

OfgemUtilities

Government Legal DepartmentLegal Services

Competition and Markets AuthorityGovernment Administration

Office of Rail and Road (ORR)Truck Transportation

OfqualGovernment Administration

DstlDefense and Space Manufacturing

Data Science ChallengeGovernment Administration

UK Export FinanceFinancial Services

Ministry of Housing, Communities and Local Government - LegacyGovernment Administration

Northern PowerhouseCivic and Social Organizations

Ministry of Housing, Communities and Local Government - LegacyGovernment Administration

HM Land RegistryGovernment Administration

OfwatUtilities

Regulators’ Alliance for Progressing Infrastructure Development (RAPID)Utilities

Charity Commission for England and WalesGovernment Administration

Northern Ireland OfficeGovernment Administration

Attorney General's Office (UK)Government Administration

Valuation Office AgencyGovernment Administration

Scotland OfficeGovernment Administration

NS&IFinancial Services

NS&I Government Payment ServicesGovernment Administration

UK Government Wales/Llywodraeth DU CymruGovernment Administration

Government Actuary's DepartmentGovernment Administration

UK Statistics Authority Government Administration

Infrastructure and Projects Authority (IPA)Government Administration

TeachingPrimary and Secondary Education

DfE Digital, Data and TechnologyGovernment Relations Services

Skills PartnerGovernment Administration

Loading…

Buying for Schools Similar Companies

Swiss Federal Administration

admin.ch

Seven departments, the Federal Chancellery and around 70 administrative units make up the Federal Administration. With around 38,000 employees, we are one of the largest employers in Switzerland. Everyone who works for the Federal Administration actively contributes to Switzerland's well-being and shapes the future of our country. We are as varied as Switzerland itself – we stand for active diversity and inclusion. Our employees come from all over the country and the Federal Administration is present throughout Switzerland. With us, you can expect diverse, challenging and unique tasks in all kinds of subject areas and specialist fields. As a modern employer, the Federal Administration enables its employees to combine work and private life with flexible forms of work and promotes their personal development with practical training and continuing professional development. * Vacancies in the administrative units can be found on their LinkedIn pages or at stelle.admin.ch.

Centers for Disease Control and Prevention

cdc.gov

CDC works 24/7 keeping America safe from health, safety and security threats, both foreign and domestic. Whether diseases start at home or abroad, are chronic or acute, curable or preventable, human error or deliberate attack, CDC fights it and supports communities and citizens to prevent it. CDC is the nation’s health protection agency - saving lives, protecting people from health threats, and saving money through prevention. For more information, please go to: http://www.cdc.gov/ Comment Policy: Please visit http://www.cdc.gov/SocialMedia/Tools/CommentPolicy.html to view CDC’s social media comment policy. Privacy Notice Regarding Third Party Websites: Privacy Notice: The Centers for Disease Control and Prevention uses third-party Web sites to share information and to encourage collaboration with the public. Third-party Web sites are not Government-owned or Government-operated. They are controlled and operated by a third party not affiliated with CDC. The CDC Privacy Policy does not apply to third-party Web sites or applications. To learn more about CDC’s privacy practices, please visit our Privacy Policy at https://www.cdc.gov/other/privacy.html.

US Government Accountability Office

gao.gov

For more information about GAO, please visit www.gao.gov. General Information The U.S. Government Accountability Office (GAO) is an independent, nonpartisan agency that works for Congress. Often called the "congressional watchdog," GAO investigates how the federal government spends taxpayer dollars. Mission Our Mission is to support the Congress in meeting its constitutional responsibilities and to help improve the performance and ensure the accountability of the federal government for the benefit of the American people. We provide Congress with timely information that is objective, fact-based, nonpartisan, non-ideological, fair, and balanced. GAO Social Media Terms of Use: https://www.facebook.com/usgao/app/250336418365488/

UWV

uwv.nl

Bij UWV werken we aan een samenleving waarin iedereen mee kan doen. We helpen mensen op weg bij het vinden of behouden van werk. In geval van ziekte kijken we wat iemand nog wél kan. En als werken niet mogelijk is, zorgt UWV snel voor inkomen. We geven op deskundige en efficiënte wijze uitvoering aan werknemersverzekeringen, zoals de WW, WIA, WAO, WAZ, Wajong, Wazo en Ziektewet. Bij UWV werken ruim 22.000 mensen, die allen bijdragen aan een samenleving waarin iedereen mee kan doen. Onze medewerkers zijn er voor werkzoekenden, werkenden, mensen met een afstand tot de arbeidsmarkt, stakeholders én werkgevers. Als je bij UWV werkt, weet je waar je het voor doet: mensen verder helpen met werk en inkomen. Werken bij UWV is tastbaar, je werkt aan echte vraagstukken van mensen, ieder met eigen uitdagingen, ambities en drijfveren. Zo leveren medewerkers van UWV allemaal een bijdrage aan een samenleving waarin iedereen mee kan doen. Want bij UWV werk je niet alleen voor jezelf. Je werkt voor ons allemaal.

Texas Health and Human Services

texas.gov

Texas Health and Human Services, also known as the Texas Health and Human Services Commission (HHSC), helps more than 7.5 million Texans every month. The agency supports the needs of mothers, children and families through programs such as Medicaid, CHIP, SNAP, women’s health and behavioral health services. HHSC provides long-term services and supports for seniors and people with disabilities, and operates state supported living centers for residents with intellectual and developmental disabilities and state psychiatric hospitals. HHSC also regulates health care providers, professions and facilities to protect the health and safety of Texans.

Transportation Security Administration (TSA)

tsa.gov

The Transportation Security Administration (TSA) is a component agency of the U.S. Department of Homeland Security (DHS), committed to securing the nation’s transportation systems to ensure safe and efficient travel for all. Our mission is to protect the American people by preventing threats and disruptions in the transportation sector, while enhancing the overall passenger experience. 🔹 Mission: Safeguard transportation systems and prevent security threats 🔹 Vision: Achieve a secure and resilient transportation network 🔹 Values: Integrity, Excellence, Accountability, and Innovation More than 60,000 people around the world make up #TeamTSA and ensure the safety of millions of people each day as they travel by plane, train, automobile or ferry. From the officers you see on the frontlines to our cybersecurity and mission support teams, we’re working hard to combat evolving threats and keep you safe. Join us in our commitment to a more secure travel experience. For more information, visit tsa.gov.

State of Florida

myflorida.com

Join Florida’s talented workforce to fulfill your professional goals and achieve a meaningful career. Our talented public servants work hard to serve more than 19 million residents across Florida, and you, too, can realize success in the Sunshine State. Working in Florida’s state government means being responsive to the issues impacting the taxpayers of our state. Florida’s state government boasts both fast-paced work environments in which critical thinking and creative problem-solving are a must as well as steady employment opportunities that prize consistent service to our state’s residents. In some positions, state employment means being able to influence policy decisions and help implement change. In others, state employment means being the reliable resource that our taxpayers have come to expect from Florida’s public servants. All positions offer the ability to gain valuable experience quickly, improving your overall skillset. The State of Florida is seeking individuals with leadership skills, creativity and dedication to their fellow Floridians and individuals who recognize the professional development opportunities and achievements possible through state service. Florida boasts the third largest population in the country and is richly diverse in both population and landscape. With an award-winning park system, warm weather and beautiful bodies of water, Florida is the perfect environment for recreational activities and outdoor enthusiasts. Our favorable tax climate means your income goes further and our business-friendly policies foster private sector growth. Joining Florida’s talented, diverse workforce provides the opportunity to achieve your professional goals while living in a state that values quality of life, culture and recreation. For employment opportunities with the State of Florida, visit https://jobs.myflorida.com.

I work for NSW

nsw.gov.au

The NSW public sector includes ten departments and many agencies and organisations working together to develop policy and deliver important services such as health, education, housing, transport and infrastructure across NSW. We are over 300,000 dedicated people who share the same values - making a difference, giving back and responding to the future. Read our community guidelines: bit.ly/PD-community-guidelines

NOAA: National Oceanic & Atmospheric Administration

cb noaa.gov

Welcome! We're the National Oceanic & Atmospheric Administration or NOAA. From daily weather forecasts, severe storm warnings and climate monitoring to fisheries management, coastal restoration and supporting marine commerce, our products and services support economic vitality and affect more than one-third of America’s gross domestic product. NOAA’s dedicated scientists use cutting-edge research and high-tech instrumentation to provide citizens, planners, emergency managers and other decision makers with reliable information they need when they need it. *Looking for your official local weather forecast? Enter your zip code at www.weather.gov or mobile.weather.gov for mobile device users. *Interested in working for NOAA? Find job openings by typing "NOAA" in the search field at www.USAjobs.gov. Connect with us on social media: X: @NOAA Bluesky: noaa.gov Facebook: www.facebook.com/noaa Instagram: www.instagram.com/noaa YouTube: www.youtube.com/noaa LinkedIn: www.linkedin.com/company/noaa For a list of NOAA's major social media channels by mission area, please visit www.noaa.gov/stay-connected

Loading…

NEWS

Buying for Schools CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 03, 2025 04:51 PM

Reuters Next - Blackstone CTO stays thinking about cybersecurity platforms to buy or leverage keeps him "up at night"

Reuters Next - Blackstone CTO stays thinking about cybersecurity platforms to buy or leverage keeps him up at night .

Read Article

December 03, 2025 08:03 AM

Key facts: Xiaomi to buy back 2.5M shares; must preload cybersecurity app

On December 2, 2025, Xiaomi Corporation announced a buyback of 2.5 million Class B shares for a total of HKD 101.5 million, as reported in a...

Read Article

November 21, 2025 08:00 AM

PANW vs. CSCO: Which Cybersecurity Stock Should You Buy Right Now?

PANW vs. CSCO: Which Cybersecurity Stock Should You Buy Right Now? ... Palo Alto Networks (PANW) and Cisco Systems (CSCO) are well-known players...

Read Article

November 19, 2025 08:00 AM

6 Cybersecurity Stocks to Buy Now

With a boost in global security spending expected this year, these cybersecurity stocks are worth a closer look.

Read Article

October 12, 2025 07:00 AM

3 Cybersecurity Stocks You Can Buy and Hold for the Next Decade

Fortinet ... Fortinet, Zscaler, and Cloudflare are all reliable long-term cybersecurity plays. As the S&P 500 hovers near its record high and...

Read Article

October 06, 2025 07:00 AM

PANW vs. QLYS: Which Cybersecurity Stock is the Better Buy Now?

While Palo Alto Networks focuses broadly on next-generation firewalls, cloud security and AI-driven threat detection, Qualys serves a niche...

Read Article

October 06, 2025 07:00 AM

CrowdStrike vs. Okta: Which Cybersecurity Stock is a Smart Buy?

While CrowdStrike specializes in endpoint protection and extended detection and response (XDR), offering AI-native cloud security through its...

Read Article

October 05, 2025 07:00 AM

Is CrowdStrike Holdings (CRWD) the Best Cybersecurity Stock to Buy Now?

(NASDAQ:CRWD) as it gained 44%. A cloud-based endpoint security provider that secures a range of devices, endpoints, and cloud environments,...

Read Article

September 23, 2025 07:00 AM

5 Cybersecurity Stocks to Buy for a Strong and Secured Portfolio

We recommend five cybersecurity stocks for the rest of 2025 to strengthen your portfolio. These are CrowdStrike Holdings Inc. ( CRWD Quick Quote

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-96795

SUMMARY

Horilla is an HR and CRM software. Prior to 2.0.0, HorillaListView.export_data in horilla_views/generic/cbv/views.py accepts an authenticated user's columns POST parameter, takes field_tuple[1], interpolates it into dynamic_fn_str as Python source, and passes the generated function definition to exec(). A crafted string that remains valid under ast.literal_eval can inject Python syntax into a default argument evaluated during function definition, allowing arbitrary operating-system commands to execute with the application process privileges, including root privileges in the shipped Docker image. This issue is fixed in version 2.0.0.

Published

Date2026-09-25

Updated

Date2026-09-25

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-86066

SUMMARY

Horilla is an HR and CRM software. Prior to 2.0.0, approve_validate_attendance_request at /attendance/approve-validate-attendance-request/ changes attendance_validated, is_validate_request_approved, approved_by, and related pending-request state through an HTTP GET before calling attendance.save(), so Django does not require CSRF validation for the action. An unauthenticated attacker can cause a logged-in manager with attendance.change_attendance to make a top-level request that carries the manager's SameSite=Lax session cookie, silently approving attendance with the victim's privileges and attributing the approval to the victim in the audit trail. This issue is fixed in version 2.0.0.

Published

Date2026-09-25

Updated

Date2026-09-25

RISK INFORMATION (Score: )

cvss4

Base Score: 5.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:A/VC:N/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-57449

SUMMARY

Actual is a local-first personal finance tool. Prior to 26.7.0, Actual Sync Server's CORS proxy is intended to let authenticated users fetch resources only from repositories listed in the official plugin allowlist. When `ACTUAL_GITHUB_TOKEN` is configured, the proxy automatically attaches the server's GitHub token to GitHub requests. The GitHub API allowlist check uses a raw `startsWith()` prefix test for `/repos/{owner}/{repo}` without requiring a path boundary after the repository name. If an allowlisted public plugin repository is `https://github.com/acme/plugin`, the proxy also accepts GitHub API URLs. Those URLs are outside the allowlisted repository but still pass because their API path starts with `/repos/acme/plugin`. The proxy then forwards the request with the server's `ACTUAL_GITHUB_TOKEN`, allowing any authenticated Actual user to read private GitHub resources reachable by that token. Version 26.7.0 fixes the issue.

Published

Date2026-09-25

Updated

Date2026-09-25

RISK INFORMATION (Score: )

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/actualbudget/actual/security/advisories/GHSA-m62c-5q34-f3cf

CVE-2026-92842

SUMMARY

The convert.base64-encode, convert.quoted-printable-encode and convert.quoted-printable-decode stream filters accept a line-break-chars option whose length is tracked separately from the string itself. The filter constructors duplicate the value with pestrdup(), which stops at the first NUL byte, while keeping the original length. When the filter later emits a line break it copies the recorded length out of the truncated allocation, reading past its end and placing adjacent heap bytes into the filter output.

Published

Date2026-09-25

Updated

Date2026-09-25

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

https://github.com/php/php-src/security/advisories/GHSA-88hq-2827-7pg6

CVE-2026-91768

SUMMARY

The IPv6 branch of the FastCGI client access check compares only the first 12 bytes of a 16-byte IPv6 address, so listen.allowed_clients matches on a /96 prefix instead of the exact address. An attacker who can source an address sharing the first 96 bits with an allowed one passes the check and reaches the FastCGI endpoint.

Published

Date2026-09-25

Updated

Date2026-09-25

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/php/php-src/security/advisories/GHSA-62xp-839h-2637

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Buying for Schools Vendor Cyber Rating & Cyber Score

BS A.I CyberSecurity Scoring

Buying for Schools CyberSecurity News & History

BS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for BS

Incidents vs Government Administration Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types BS vs Government Administration Industry Avg (This Year)

Incident History - BS (X = Date, Y = Severity)

Buying for Schools Subsidiaries

BS

Buying for Schools Similar Companies

Swiss Federal Administration

Centers for Disease Control and Prevention

US Government Accountability Office

UWV

Texas Health and Human Services

Transportation Security Administration (TSA)

State of Florida

I work for NSW

NOAA: National Oceanic & Atmospheric Administration

Buying for Schools CyberSecurity News

Reuters Next - Blackstone CTO stays thinking about cybersecurity platforms to buy or leverage keeps him "up at night"

Key facts: Xiaomi to buy back 2.5M shares; must preload cybersecurity app

PANW vs. CSCO: Which Cybersecurity Stock Should You Buy Right Now?

6 Cybersecurity Stocks to Buy Now

3 Cybersecurity Stocks You Can Buy and Hold for the Next Decade

PANW vs. QLYS: Which Cybersecurity Stock is the Better Buy Now?

CrowdStrike vs. Okta: Which Cybersecurity Stock is a Smart Buy?

Is CrowdStrike Holdings (CRWD) the Best Cybersecurity Stock to Buy Now?

5 Cybersecurity Stocks to Buy for a Strong and Secured Portfolio

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Buying for Schools CyberSecurity News & History

BS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for BS

Incidents vs Government Administration Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types BS vs Government Administration Industry Avg (This Year)

Incident History - BS (X = Date, Y = Severity)

Buying for Schools Subsidiaries

BS

Buying for Schools Similar Companies

Swiss Federal Administration

Centers for Disease Control and Prevention

US Government Accountability Office

UWV

Texas Health and Human Services

Transportation Security Administration (TSA)

State of Florida

I work for NSW

NOAA: National Oceanic & Atmospheric Administration

Buying for Schools CyberSecurity News

Reuters Next - Blackstone CTO stays thinking about cybersecurity platforms to buy or leverage keeps him "up at night"

Key facts: Xiaomi to buy back 2.5M shares; must preload cybersecurity app

PANW vs. CSCO: Which Cybersecurity Stock Should You Buy Right Now?

6 Cybersecurity Stocks to Buy Now

3 Cybersecurity Stocks You Can Buy and Hold for the Next Decade

PANW vs. QLYS: Which Cybersecurity Stock is the Better Buy Now?

CrowdStrike vs. Okta: Which Cybersecurity Stock is a Smart Buy?

Is CrowdStrike Holdings (CRWD) the Best Cybersecurity Stock to Buy Now?

5 Cybersecurity Stocks to Buy for a Strong and Secured Portfolio

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo