Comparison Overview
Castrol
Castrol
Whitchurch Hill, Pangbourne, Berkshire, RG8 7QR, GB
Last Update: 02/04/2026
Castrol is a worldwide leader in high performance lubricants for the automotive, industrial, marine and aerospace industries. Castrol manufactures products on a global basis, supplying customers in over 150 countries around the world. Castrol is a wholly-owned subsidia...
ADNOC Group
Corniche Road, Abu Dhabi, 898, AE
Last Update: 10/09/2026
We are one of the world's leading energy producers, and a primary catalyst for Abu Dhabi’s growth and diversification. We operate across the entire hydrocarbon value chain, through a network of fully-integrated businesses, with interests that range from exploration, p...
Compliance Ranges Comparison
Castrol
ADNOC Group
Benchmark & Cyber Underwriting Signals
Incidents vs Oil and Gas Industry Avg (This Year)
No incidents recorded for Castrol in 2026.
Incidents vs Oil and Gas Industry Avg (This Year)
No incidents recorded for ADNOC Group in 2026.
Incident History - Castrol (X = Date, Y = Severity)
Castrol cyber incidents detection timeline including parent company and subsidiaries.
Incident History - ADNOC Group (X = Date, Y = Severity)
ADNOC Group cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents
Castrol
ADNOC Group
FAQ
Latest Global CVEs
vLLM through 0.29.0 fails to properly clean up decode-side metadata for rejected inference requests in prefill/decode disaggregated deployments. Remote attackers can submit requests with max_tokens=0 to exhaust decode-worker memory without bound until the worker restarts.
- https://github.com/vllm-project/vllm
- https://github.com/vllm-project/vllm/blob/v0.29.0/vllm/distributed/kv_transfer/kv_connector/v1/nixl/push_worker.py#L162-L181
- https://github.com/vllm-project/vllm/pull/55677
- https://www.vulncheck.com/advisories/vllm-through-0.29.0-memory-exhaustion-via-rejected-requests
redis-parser through 3.0.0 contains a denial of service vulnerability in the RESP protocol parser that allows malicious Redis endpoints to crash the client process through unbounded recursion on nested arrays. Attackers can send crafted RESP byte streams with repeated array headers that exhaust the V8 call stack, causing an uncaught RangeError that terminates the Node.js process without triggering error handling callbacks.
- https://github.com/NodeRedis/node-redis-parser
- https://github.com/NodeRedis/node-redis-parser/blob/701655430f5f7d9ca00892a02f7eefcbc1193a98/lib/parser.js#L204-L213
- https://github.com/NodeRedis/node-redis-parser/blob/701655430f5f7d9ca00892a02f7eefcbc1193a98/lib/parser.js#L291-L306
- https://github.com/redis/ioredis/issues/2108
- https://www.vulncheck.com/advisories/redis-parser-through-3.0.0-denial-of-service-via-unbounded-recursion
Improper neutralization of special elements in output used by a downstream component ('injection') in Azure Cosmos DB allows an authorized attacker to elevate privileges over a network.
Server-side request forgery (ssrf) in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.
Missing authentication for critical function in Azure AI Foundry allows an unauthorized attacker to elevate privileges over a network.