What is the official website of Cambrex ?

The official website of Cambrex is http://www.cambrex.com.

What is Cambrex's cybersecurity risk score?

Cambrex has an AI-generated cybersecurity risk score of 725 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Cambrex experienced?

According to Rankiteo, Cambrex currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Cambrex been affected by any supply chain cyber incidents ?

According to Rankiteo, Cambrex has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Cambrex have SOC 2 Type 1 certification ?

According to Rankiteo, Cambrex is not certified under SOC 2 Type 1.

Does Cambrex have SOC 2 Type 2 certification ?

According to Rankiteo, Cambrex does not hold a SOC 2 Type 2 certification.

Does Cambrex comply with GDPR ?

According to Rankiteo, Cambrex is not listed as GDPR compliant.

Does Cambrex have PCI DSS certification ?

According to Rankiteo, Cambrex does not currently maintain PCI DSS compliance.

Does Cambrex comply with HIPAA ?

According to Rankiteo, Cambrex is not compliant with HIPAA regulations.

Does Cambrex have ISO 27001 certification ?

According to Rankiteo,Cambrex is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Cambrex operate in ?

Cambrex operates primarily in the Pharmaceutical Manufacturing industry.

How many employees does Cambrex have ?

Cambrex employs approximately 1,543 people worldwide.

Does Cambrex own any subsidiaries ?

Cambrex presently has no subsidiaries across any sectors.

How many LinkedIn followers does Cambrex have ?

Cambrex's official LinkedIn profile has approximately 48,045 followers.

What is the NAICS classification code for Cambrex ?

Cambrex is classified under the NAICS code 3254, which corresponds to Pharmaceutical and Medicine Manufacturing.

Does Cambrex have a Crunchbase profile ?

No, Cambrex does not have a profile on Crunchbase.

Does Cambrex have a LinkedIn profile ?

Yes, Cambrex maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/cambrex.

How many cybersecurity incidents has Cambrex experienced ?

As of August 3, 2026, Rankiteo reports that Cambrex has experienced 1 cybersecurity incidents.

How many peer or competitor companies does Cambrex have ?

Cambrex has an estimated 5,720 peer or competitor companies worldwide.

What types of cybersecurity incidents has Cambrex faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Cambrex

Boost Score +25 with badge (5 left)

725

/1000

Moderate

750

/1000

Fair

Cambrex Vendor Cyber Rating & Cyber Score

cambrex.com

Add Your Compliance Badge

Cambrex is a leading global contract development and manufacturing organization (CDMO) that provides drug substance development and manufacturing across the entire drug lifecycle, as well as comprehensive analytical and IND enabling services. With over 40 years of experience and a team of 2,000 experts servicing global clients from North America and Europe, Cambrex offers a range of specialized drug substance technologies and capabilities, including continuous flow, controlled substances, liquid-phase peptide synthesis, solid-state science, material characterization, and highly potent APIs.

Cambrex A.I CyberSecurity Scoring

Scoring History

Cambrex

Cambrex CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Cambrex

Breach

11/2023

CAM825072525

Loading…

A.I.

Cambrex Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Cambrex

Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)

No incidents recorded for Cambrex in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Cambrex in 2026.

Incident Types Cambrex vs Pharmaceutical Manufacturing Industry Avg (This Year)

No incidents recorded for Cambrex in 2026.

Incident History - Cambrex (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Cambrex Subsidiaries

Cambrex

Pharmaceutical Manufacturing

Website: http://www.cambrex.com

Company Size: 1,543

Snapdragon ChemistryResearch Services

Cambrex Karlskoga ABPharmaceutical Manufacturing

Loading…

Cambrex Similar Companies

Parexel

parexel.com

Parexel is a leading global clinical research organization (CRO) providing insights-driven Clinical and Consulting solutions to the world’s life sciences industry. Leveraging deep local knowledge and a global breadth of clinical, regulatory and therapeutic expertise, our 24,000+ professionals worldwide work in partnership with biopharmaceutical leaders, emerging innovators and sites to design and deliver clinical trials with patients in mind — broadening access and making clinical research a care option for anyone, anywhere. Our proven track record spans 40+ years and drives us forward, advancing clinical research in healthcare’s most complex areas while harnessing innovation to drive efficiencies across every phase of the clinical development process. Our insights-driven approach, proven delivery and trusted execution are accelerating the delivery of life-changing treatments to patients — With Heart.™ We continue to earn recognition industrywide, including the 2025 Scrip Award for “Best Contract Research Organization – Full-Service Provider,” 2024 Fierce Biotech CRO Award for "Innovative Approaches to Patient-Centric Research" and the 2024 and 2023 Society for Clinical Research Sites (SCRS) Eagle Award. Community Guidelines Because Parexel’s social media channels are open to the general public and employees, we are not responsible for views expressed other than our own. However, we do not tolerate posts that are: • Abusive, harassing or threatening to others. • Defamatory, offensive, obscene, vulgar or depicting violence. • Hateful targeting by race/ethnicity, age, color, creed, religion, gender, sexual preference or orientation, nationality or political beliefs. • Sexually explicit or pornographic. • Fraudulent, deceptive, libelous, misleading or unlawful. • Referencing criminal or illegal activity. • Spamming. We reserve the right to remove comments that do not adhere to our guidelines and report users who violate the rules of our page.

Hikma Pharmaceuticals

cb hikma.com

For almost 50 years, we’ve been creating high-quality medicines and making them accessible to the people who need them. We are a trusted, reliable partner and dependable source of over 800* high-quality generic, specialty and branded pharmaceutical products that hospitals, physicians and pharmacists need to treat their patients across North America, MENA and Europe. We have 29 manufacturing plants, 3 R&D hubs and c9,500 employees worldwide. *As of December 2025 Subscribe to our channel on YouTube https://youtube.com/@hikmapharmaceuticals5668 For all product information and enquiries, please contact us at [email protected]

Zoetis

zoetis.com

The world’s leading animal health company. We’ve been innovating ways to predict, prevent, detect, and treat animal illness for over 70 years, and we continue to stand by those raising and caring for animals worldwide – from veterinarians and pet owners to livestock farmers. Our leading portfolio and pipeline makes a difference in over 100 countries. Community Guidelines: This page is intended to share how Zoetis is advancing care for animals. We aspire to create a supportive community, but there are guidelines to which posts and comments on this page must adhere. If your post references a side effect related to any Zoetis product, we may contact you for more information. To monitor the safety of Zoetis products, we advise you to call our Veterinary Medical Information and Product Support Team at 1-888-963-8471; Support Team is available Mon-Fri 9am to 6:30pm ET. We reserve the right to remove any post/comment that violates LinkedIn Guidelines. As a last resort, we reserve the right to block users that demonstrate a repeated pattern of violating LinkedIn’s spirit of constructive, professional discourse. We respectfully request that you refrain from posting comments including: Unsolicited and/or unverified medical advice Vulgarity and/or profanity Discriminatory and/or derogatory comments, hate speech Politics and religion Personal attacks and/or threats Promotion of illegal activity Copyright/trademark infringements Topics that may be considered spam/advertising Our regular business hours are Mon-Fri 9am to 5pm ET. Zoetis does not endorse and is not responsible for information and opinions shared by community members. The information shared is provided for educational purposes only and is not intended to replace discussions with an animal healthcare professional. Testimonials represent individual experience only and the experiences and opinions of community members may be unique to the speaker. Terms of Use: https://www.zoetis.com/terms-of-use

Eli Lilly and Company

lilly.com

We're a medicine company turning science into healing to make life better for people around the world. It all started nearly 150 years ago with a clear vision from founder Colonel Eli Lilly: "Take what you find here and make it better and better." Harnessing the power of biotechnology, chemistry and genetic medicine, our scientists are urgently advancing science to solve some of the world's most significant health challenges. General Information and Guidelines: When you engage with us on LinkedIn, you're agreeing to these Community Guidelines: https://e.lilly/guidelines. If you have questions about a Lilly medicine, contact The Lilly Answers Center at 1-800-Lilly-Rx (1-800-545-5979) Monday through Friday, excluding company holidays.

Astellas Pharma

astellas.com

Astellas is a global life sciences company committed to turning innovative science into VALUE for patients. We provide transformative therapies in disease areas that include oncology, ophthalmology, urology, immunology and women's health. Through our research and development programs, we are pioneering new healthcare solutions for diseases with high unmet medical need. Visit our Global Astellas LinkedIn Community Guidelines to learn more about interacting with this page: https://www.astellas.com/en/global-linkedin-community-guidelines

Viatris

viatris.com

Viatris Inc. (NASDAQ: VTRS) is a global healthcare company uniquely positioned to bridge the traditional divide between generics and brands, combining the best of both to more holistically address healthcare needs globally. With a mission to empower people worldwide to live healthier at every stage of life, we provide access at scale. In 2022 alone, we supplied high-quality medicines to approximately 1 billion patients around the world. With our exceptionally extensive and diverse portfolio of medicines, a one-of-a-kind global supply chain designed to reach more people when and where they need them, and the scientific expertise to address some of the world’s most enduring health challenges, access takes on deep meaning at Viatris. We have the ability to touch all of life’s moments, from birth to end of life, acute conditions to chronic diseases. We are headquartered in the U.S., with global centers in Pittsburgh, Shanghai and Hyderabad, India Social Media Guidelines: https://newsroom.viatris.com/social-media-community-guidelines Investors: https://investor.viatris.com Corporate Social Responsibility: https://www.viatris.com/sustainability Connect with Viatris Instagram: https://www.instagram.com/viatrisinc X: https://www.x.com/viatrisinc Viatris and our recruiting firms will not ask for sensitive personal information, such as your social security number, date of birth or bank account details via text, email or social media. Additionally, Viatris representatives do not request payment or personal bank information nor send payment to purchase hardware on your own. Viatris.com is the primary source of all company job postings and authorized third-party career websites.

AUROBINDO PHARMA LTD

aurobindo.com

Aurobindo Pharma Limited (NSE: AUROPHARMA, BSE: 524804, Reuters: ARBN.NS, Bloomberg: ARBP IN) is an integrated global pharmaceutical company headquartered in Hyderabad, India. The Company develops, manufactures, and markets a wide range of generic pharmaceuticals, branded specialty drugs, and active pharmaceutical ingredients (APIs) across more than 150 countries. It is ranked among the top 10 generic companies in eight European nations and holds the distinction of being the largest generic pharmaceutical company in the United States. With over 30 state-of-the-art manufacturing and packaging facilities approved by leading global regulatory authorities including USFDA, UK MHRA, EDQM, Japan PMDA, WHO, Health Canada, South Africa MCC, and Brazil ANVISA, Aurobindo Pharma ensures the highest standards of quality. Its robust portfolio spans eight major therapeutic areas: Central Nervous System (CNS), Antiretroviral (ARV), Cardiovascular (CVS), Antibiotics, Gastroenterology, Anti-diabetics, Oncology, and Dermatology, supported by a strong R&D infrastructure that drives innovation, affordability, and accessibility.

Torrent Pharmaceuticals Ltd

cb torrentpharma.com

Torrent Pharma, with annual revenues of more than Rs 10,700 crores, is the flagship Company of the Torrent Group, with group revenues of Rs 41,000 crores. It is ranked 5th in the Indian Pharma Market and is among the Top 5 in the therapeutic segments of Cardiovascular (CV), Central Nervous System (CNS), Gastro-intestinal (GI), Vitamins Minerals Nutritionals (VMN) and Cosmo-Dermatology. The Company also has significant presence in diabetology, pain management, gynaecology, oncology and anti-infective segments. Torrent has 8 manufacturing facilities , of which 5 are USFDA approved. With R&D as the backbone for its growth in domestic & overseas market, it has invested significantly in R&D capabilities with state-of-the-art R&D infrastructure employing around 800 scientists. The acquisition of Elder Pharma's Indian branded business in 2013, Dermaceuticals business of Zyg Pharma in 2015, API plant of Glochem Industries in 2016, Women healthcare brands from Novartis and Unichem's Indian branded business along with its Sikkim Plant in 2017 strengthened Torrent Pharma's position in the Indian Pharma market. Torrent Pharma started international acquisitions in 2005 with entry into the German market. Today, the Company has presence in more than 50 countries and is ranked No. 1 among the Indian pharma Companies in Brazil and Germany. Torrent Pharma is committed towards “not just healthcare but lifecare.”

Takeda

cb takeda.com

We strive to transform lives. While the science we advance is constantly evolving, our core purpose is enduring. For more than two centuries, our values have guided us to do what’s right for patients and for society. We know that changing lives requires us to do things differently. We start by listening to and addressing what really matters to patients, the people who love them, and those in the healthcare system who provide care. And that’s what inspires us all to be bold, push boundaries and set new standards that open up greater opportunities. Read our community guidelines: https://takeda.info/communityguidelines

Loading…

NEWS

Cambrex CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 02, 2023 07:00 AM

The top 9 cyber security incidents in September 2023 | Cyber Security Hub

Here, Cyber Security Hub takes a look at the top cyber attacks, data breaches and cyber security incidents across the globe that happened in September, 2023.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18577

SUMMARY

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-10848

SUMMARY

The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that copied the message's uid and action fields with strncpy(out_buf, token + 1, outlen - 1) and then scanned the result with strchr(out_buf, '"'). Because strncpy does not NUL-terminate the destination when the source is at least outlen - 1 (127) bytes long, the subsequent strchr reads past the 128-byte destination buffer into adjacent stack memory; if a " byte is found beyond the buffer, a one-byte out-of-bounds NUL write also occurs. A related defect in extract_payload() runs strchr/strrchr over the receive buffer, which may not be NUL-terminated when a maximal-length frame fills it. The parsed bytes come directly from the OCPP central-system server over a websocket: the reader thread fills recv_buf via websocket_recv_msg() and calls parse_rpc_msg() on each inbound DATA frame (subsys/net/lib/ocpp/ocpp.c). A malicious or compromised central server, or an on-path attacker (OCPP is commonly deployed over plain ws://), can send an RPC frame whose uid or action field is 127+ bytes with no closing quote, triggering the out-of-bounds access. The primary impact is a remotely triggerable denial of service: the unbounded scan can fault on an unmapped page, and the stray NUL write can corrupt adjacent stack state. The over-read data is not reflected to the peer, so disclosure is limited. The feature is EXPERIMENTAL and must be explicitly enabled (CONFIG_OCPP). The fix replaces the manual parser with the bounds-respecting json_mixed_arr_parse() and copies the extracted uid with an explicitly NUL-terminated buffer, eliminating both over-reads.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7)

cvss3

Base Score: 7.0

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Impact Score

4.7

Exploitability

2.2

REFERENCES

CVE-2026-9856

SUMMARY

A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where keys from the `chat_template` dictionary are used directly as filenames without proper validation. An attacker can exploit this by publishing a malicious Hugging Face Hub repository with a crafted `tokenizer_config.json` file. When a victim downloads and saves the tokenizer or processor, the attacker-controlled keys can escape the intended save directory, enabling arbitrary file writes with attacker-controlled content. This vulnerability affects multiple processors inheriting from `ProcessorMixin`, including Idefics, Florence, Gemma, Phi, and Qwen-VL.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-65321

SUMMARY

PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied input such as a single quote followed by SQL syntax causes the parser to terminate the string literal prematurely, enabling data exfiltration via UNION SELECT, execution of destructive statements, and attacker-controlled CTAS destination and content.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-10774

SUMMARY

Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private Beacon Key into a PSA key slot under CONFIG_BT_MESH_PRIV_BEACONS (enabled by default), but subnet_keys_destroy() guarded the matching psa_destroy_key() with CONFIG_BT_MESH_V1d1. That Kconfig symbol was removed when explicit Mesh 1.0.1 support was dropped, so the destroy branch became permanently dead code and the import is never balanced by a destroy. The imbalanced teardown is reached every time subnet keys are destroyed: deleting a subnet (Config Server NetKey Delete), completing a Key Refresh Procedure (which retires the old key set), and resetting/re-provisioning the node. The over-the-air triggers are processed only under the node's device key, so they are exercisable by the provisioner or network administrator that owns the node, reachable over the Bluetooth Mesh network. With the default CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT of 16, repeated add/delete or key-refresh cycles exhaust the shared PSA key-slot pool after roughly a dozen rounds. Once exhausted, bt_mesh_private_beacon_key() and thus subnet creation fail: the node can no longer add subnets or complete key refresh, and other PSA crypto consumers on the device may be starved, until the device is rebooted. The fix aligns the destroy guard with the import guard (CONFIG_BT_MESH_PRIV_BEACONS) so each slot is freed.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 2.4)

cvss3

Base Score: 2.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

0.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…