What is the official website of CBP Office of Professional Responsibility ?

The official website of CBP Office of Professional Responsibility is https://www.cbp.gov/careers/opr.

What is CBP Office of Professional Responsibility's cybersecurity risk score?

CBP Office of Professional Responsibility has an AI-generated cybersecurity risk score of 762 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has CBP Office of Professional Responsibility experienced?

According to Rankiteo, CBP Office of Professional Responsibility currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has CBP Office of Professional Responsibility been affected by any supply chain cyber incidents ?

According to Rankiteo, CBP Office of Professional Responsibility has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: SolarWinds (Incident ID: SOL1780734225) LiteSpeed Technologies (Incident ID: CISLIT1779899124) Nightwing (Incident ID: CISNIG1779150346) Arista Networks (Incident ID: ARICIS1781094274) F5 (Incident ID: F51774844643) SolarWinds (Incident ID: SOL1770194061) Cisco (Incident ID: CIS1766051696) Notepad++ (Incident ID: NOT1765821620) Nightwing (Incident ID: NIGCIS1779216319) Cisco (Incident ID: US-1776976007) Microsoft Security Response Center (Incident ID: CISMIC1771331760) VMware (Incident ID: BRO1769309760) Fortinet (Incident ID: CISSYMFBIFOR1768715192)

Does CBP Office of Professional Responsibility have SOC 2 Type 1 certification ?

According to Rankiteo, CBP Office of Professional Responsibility is not certified under SOC 2 Type 1.

Does CBP Office of Professional Responsibility have SOC 2 Type 2 certification ?

According to Rankiteo, CBP Office of Professional Responsibility does not hold a SOC 2 Type 2 certification.

Does CBP Office of Professional Responsibility comply with GDPR ?

According to Rankiteo, CBP Office of Professional Responsibility is not listed as GDPR compliant.

Does CBP Office of Professional Responsibility have PCI DSS certification ?

According to Rankiteo, CBP Office of Professional Responsibility does not currently maintain PCI DSS compliance.

Does CBP Office of Professional Responsibility comply with HIPAA ?

According to Rankiteo, CBP Office of Professional Responsibility is not compliant with HIPAA regulations.

Does CBP Office of Professional Responsibility have ISO 27001 certification ?

According to Rankiteo,CBP Office of Professional Responsibility is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does CBP Office of Professional Responsibility operate in ?

CBP Office of Professional Responsibility operates primarily in the Government Administration industry.

How many employees does CBP Office of Professional Responsibility have ?

CBP Office of Professional Responsibility employs approximately None employees people worldwide.

Does CBP Office of Professional Responsibility own any subsidiaries ?

CBP Office of Professional Responsibility presently has no subsidiaries across any sectors.

How many LinkedIn followers does CBP Office of Professional Responsibility have ?

CBP Office of Professional Responsibility's official LinkedIn profile has approximately 4,961 followers.

What is the NAICS classification code for CBP Office of Professional Responsibility ?

CBP Office of Professional Responsibility is classified under the NAICS code 92, which corresponds to Public Administration.

Does CBP Office of Professional Responsibility have a Crunchbase profile ?

No, CBP Office of Professional Responsibility does not have a profile on Crunchbase.

Does CBP Office of Professional Responsibility have a LinkedIn profile ?

Yes, CBP Office of Professional Responsibility maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/cbp-office-of-professional-responsibility.

How many cybersecurity incidents has CBP Office of Professional Responsibility experienced ?

As of July 19, 2026, Rankiteo reports that CBP Office of Professional Responsibility has experienced 57 cybersecurity incidents.

How many peer or competitor companies does CBP Office of Professional Responsibility have ?

CBP Office of Professional Responsibility has an estimated 13,046 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

COPR

Boost Score +25 with badge (5 left)

762

/1000

Fair

787

/1000

Fair

CBP Office of Professional Responsibility Vendor Cyber Rating & Cyber Score

cbp.gov

Add Your Compliance Badge

The men and women of OPR transcend the traditional investigative functions of most law enforcement internal affairs units, combining a unique mix of authorities, capabilities, and expertise focused on the unique dual mission of safeguarding and promoting the integrity and security of the CBP workforce.

COPR A.I CyberSecurity Scoring

Scoring History

COPR

CBP Office of Professional Responsibility CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Cybersecurity and I...

Vulnerability

100

6/2026

SolarWinds

SOL1780734225

Cybersecurity and I...

Vulnerability

100

5/2026

LiteSpeed Techn...

CISLIT177989912...

U.S. Department of ...

Cyber Attack

100

5/2026

US-1782931085

Cybersecurity and I...

Breach

100

5/2026

Nightwing

CISNIG177915034...

Cybersecurity and I...

Vulnerability

100

5/2026

Arista Networks

ARICIS178109427...

Cybersecurity and I...

Vulnerability

100

4/2026

LINCISMIC177793...

Cybersecurity and I...

Vulnerability

100

3/2026

F51774844643

U.S. Department of ...

Cyber Attack

100

2/2026

SCOUS-177246174...

Cybersecurity and I...

Cyber Attack

100

2/2026

CISPAL177036707...

Cybersecurity and I...

Vulnerability

100

2/2026

SolarWinds

SOL1770194061

Cybersecurity and I...

Breach

2/2026

CIS1770197400

U.S. Department of ...

Breach

1/2026

US-CUSU-S176859...

U.S. Immigration an...

Breach

100

1/2026

HOMU-S176832898...

Cybersecurity and I...

Cyber Attack

100

1/2026

FBICISUS-UNI176...

U.S. Department of ...

Vulnerability

100

12/2025

US-1767173563

Cybersecurity and I...

Vulnerability

100

12/2025

Cisco

CIS1766051696

Cybersecurity and I...

Vulnerability

12/2025

Notepad++

NOT1765821620

CBP Office of Profe...

Breach

11/2025

USC373373711252...

Cybersecurity and I...

Breach

100

11/2025

Nightwing

NIGCIS177921631...

Cybersecurity and I...

Vulnerability

10/2025

VERCIS177923186...

Cybersecurity and I...

Cyber Attack

100

9/2025

Cisco

US-1776976007

CBP Office of Profe...

Breach

9/2025

FEM319293109302...

Cybersecurity and I...

Cyber Attack

100

8/2025

CIS1770890877

U.S. Department of ...

Ransomware

100

7/2025

US-1771976815

U.S. Department of ...

Cyber Attack

100

7/2025

US-NOZTRE177433...

CBP Office of Profe...

Cyber Attack

100

7/2025

CIS1765368172

CBP Office of Profe...

Breach

7/2025

FEM180271810022...

CBP Office of Profe...

Breach

6/2025

FEM536235310012...

CBP Office of Profe...

Cyber Attack

100

6/2025

CIS1765251340

Cybersecurity and I...

Breach

5/2025

CIS1779207877

CBP Office of Profe...

Cyber Attack

100

5/2025

CIS119221110142...

CBP Office of Profe...

Cyber Attack

100

4/2025

US-598525911262...

CBP Office of Profe...

Breach

100

1/2025

CIS001012825

U.S. Immigration an...

Breach

1/2025

UNIU-S177046516...

CBP Office of Profe...

Cyber Attack

100

12/2024

CIS000122124

CBP Office of Profe...

Vulnerability

100

12/2024

US-001010525

Cybersecurity and I...

Vulnerability

100

10/2024

Microsoft Secur...

CISMIC177133176...

CBP Office of Profe...

Breach

8/2024

FEM309233009302...

CBP Office of Profe...

Vulnerability

100

8/2024

CIS005080624

CBP Office of Profe...

Cyber Attack

100

6/2024

CIS000080624

CBP Office of Profe...

Cyber Attack

100

6/2024

FEM153321510062...

CBP Office of Profe...

Cyber Attack

100

1/2024

CIS1765238766

Cybersecurity and I...

Vulnerability

100

1/2024

VMware

BRO1769309760

CBP Office of Profe...

Ransomware

10/2023

CYB2047151023

Cybersecurity and I...

Vulnerability

9/2023

CIS1769475575

CBP Office of Profe...

Breach

100

5/2023

DEP190311909232...

CBP Office of Profe...

Breach

100

5/2023

US-464164610052...

CBP Office of Profe...

Ransomware

100

1/2023

CIS427092125

CBP Office of Profe...

Breach

12/2022

USI233311222

Cybersecurity and I...

Ransomware

100

7/2021

CISTHEFBI177484...

Cybersecurity and I...

Cyber Attack

6/2021

Fortinet

CISSYMFBIFOR176...

CBP Office of Profe...

Ransomware

100

6/2020

US-341071125

CBP Office of Profe...

Vulnerability

100

6/2018

CIS000122224

CBP Office of Profe...

Breach

01/2018

USD331181223

CBP Office of Profe...

Breach

100

6/2017

FEM74612323

CBP Office of Profe...

Data Leak

02/2016

USD181261023

CBP Office of Profe...

Cyber Attack

100

6/2015

CIS033210310112...

Loading…

A.I.

COPR Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for COPR

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for CBP Office of Professional Responsibility in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for CBP Office of Professional Responsibility in 2026.

Incident Types COPR vs Government Administration Industry Avg (This Year)

No incidents recorded for CBP Office of Professional Responsibility in 2026.

Incident History - COPR (X = Date, Y = Severity)

Loading…

SUBSIDIARY

CBP Office of Professional Responsibility Subsidiaries

COPR

Government Administration

Website: https://www.cbp.gov/careers/opr

Company Size: 501-1,000 employees

U.S. Department of Homeland SecurityGovernment Administration

Cybersecurity and Infrastructure Security AgencyGovernment Administration

CISA Alumni GroupComputer and Network Security

FEMAGovernment Administration

FEMA Region 6Government Administration

FEMA TrainingGovernment Administration

FEMA Region 8Government Administration

FEMA Region 5Government Administration

National Flood Insurance Program FEMAInsurance

FEMA Region 2Emergency and Relief Services

FEMA National Advisory Council (NAC)Government Administration

FEMA Region 4Government Administration

FEMA Region 7Government Administration

U.S. Secret ServiceLaw Enforcement

U.S. Immigration and Customs Enforcement (ICE)Law Enforcement

Transportation Security Administration (TSA)Government Administration

USCISGovernment Administration

U.S. Coast GuardArmed Forces

USCG Contracting & Procurement EnterpriseGovernment Administration

U.S. Coast Guard Maritime CommonsMaritime Transportation

U.S. Coast Guard CiviliansGovernment Administration

U. S. Coast Guard Office of LeadershipArmed Forces

DHS Science and Technology DirectorateGovernment Administration

U.S. Department of Homeland Security, Office of Intelligence and Analysis, Private Sector EngagementGovernment Administration

Federal Law Enforcement Training CentersLaw Enforcement

Office of the Citizenship and Immigration Services Ombudsman (CIS Ombudsman)Government Administration

Department of Homeland Security Office of the Chief Financial OfficerGovernment Administration

U.S. Customs and Border ProtectionGovernment Administration

Loading…

CBP Office of Professional Responsibility Similar Companies

IBGE

ibge.gov.br

The Brazilian Institute of Geography and Statistics or IBGE (Portuguese: Instituto Brasileiro de Geografia e Estatística), is the agency responsible for statistical, geographic, cartographic, geodetic and environmental information in Brazil. The IBGE performs a national census every ten years, and the questionnaires account for information such as age, household income, literacy, education, occupation and hygiene levels. IBGE is an institution of the Federal Government, constituted a public foundation by Decree Law No. 161 of February 13, 1967, and is bound to the Brazilian Department of Planning, Budget and Management. It has four directors and two other central organs. IBGE has a network of national research and dissemination components, comprising: 27 state units (26 in state capitals and one in the Federal District); 27 centres for documentation and dissemination of information (26 in the capital and one in the Federal District); 581 data collection agencies in major cities. The IBGE also maintains the Roncador Ecological Reserve, situated 35 km south of Brasília.

Swiss Federal Administration

admin.ch

Seven departments, the Federal Chancellery and around 70 administrative units make up the Federal Administration. With around 38,000 employees, we are one of the largest employers in Switzerland. Everyone who works for the Federal Administration actively contributes to Switzerland's well-being and shapes the future of our country. We are as varied as Switzerland itself – we stand for active diversity and inclusion. Our employees come from all over the country and the Federal Administration is present throughout Switzerland. With us, you can expect diverse, challenging and unique tasks in all kinds of subject areas and specialist fields. As a modern employer, the Federal Administration enables its employees to combine work and private life with flexible forms of work and promotes their personal development with practical training and continuing professional development. * Vacancies in the administrative units can be found on their LinkedIn pages or at stelle.admin.ch.

Secretaría de Educación Pública

onlinecareer360.com

MISIÓN/PROPÓSITO: La SEP tiene como propósito esencial crear condiciones que permitan asegurar el acceso de todas las mexicanas y mexicanos a una educación de calidad, en el nivel y modalidad que la requieran y en el lugar donde la demanden. VISIÓN: En el año 2025, México cuenta con un sistema educativo amplio, articulado y diversificado, que ofrece educación para el desarrollo humano integral de su población. El sistema es reconocido nacional e internacionalmente por su calidad y constituye el eje básico del desarrollo cultural, científico, tecnológico, económico y social de la Nación.

State of Missouri

mo.gov

Build the Missouri of tomorrow. Ensure a strong foundation today. Join a group of innovative team members focused on driving the State of Missouri forward. As public servants, our team members have the opportunity to produce work that is both lasting and important. This work serves to protect families, communities, and our natural resources. No matter where you are in your career, whether entry level or senior level, a career with the State of Missouri will challenge you to grow both personally and professionally. Though one employer, there is no shortage of exciting opportunities as there are many career paths you may take within the State. If you are searching for a job that transforms lives, including your own, a career with the State of Missouri is the perfect fit!

U.S. Department of the Treasury

treasury.gov

The Treasury Department is the executive agency responsible for promoting economic prosperity and ensuring the financial security of the United States. The Department is responsible for a wide range of activities such as advising the President on economic and financial issues, encouraging sustainable economic growth, and fostering improved governance in financial institutions. The Department of the Treasury operates and maintains systems that are critical to the nation's financial infrastructure, such as the production of coin and currency, the disbursement of payments to the American public, revenue collection, and the borrowing of funds necessary to run the federal government. The Department works with other federal agencies, foreign governments, and international financial institutions to encourage global economic growth, raise standards of living, and to the extent possible, predict and prevent economic and financial crises. The Treasury Department also performs a critical and far-reaching role in enhancing national security by implementing economic sanctions against foreign threats to the U.S., identifying and targeting the financial support networks of national security threats, and improving the safeguards of our financial systems.

Ministero dell'Interno

interno.gov.it

Il ministero dell'Interno è una struttura complessa il cui assetto organizzativo è disciplinato dal D.L.vo n. 300/99 e dai provvedimenti attuativi. A livello centrale, si articola in uffici di diretta collaborazione con il ministro (D.P.R. n. 98/2002) e cinque dipartimenti (D.P.R. n. 398/2001 e successive modificazioni); a livello periferico, in Prefetture-Uffici Territoriali di Governo, Questure e Comandi dei Vigili del fuoco.

Ville de Montréal

montreal.ca

Montréal est la plus grande ville francophone d’Amérique et elle se distingue par sa vitalité culturelle exceptionnelle et des forces créatrices reconnues mondialement. Elle se développe un peu plus chaque jour en une ville contemporaine, inclusive et dynamique sur les plans économique, culturel et social. Visant à offrir aux Montréalaises et aux Montréalais un lieu de vie agréable et prospère, la Ville de Montréal veut rester à l’écoute des besoins changeants de sa population afin de s’y adapter de façon continue. Pour ce faire, elle mise sur les compétences et l’expertise de ses 28 000 employés au service de 1,8 million de citoyens.

Commonwealth of Massachusetts

cb mass.gov

Year after year, the Commonwealth of Massachusetts has continued to pioneer bold legislative actions and programs, some of which have been embraced on a national scale. We are always looking for talented individuals to help us maintain this momentum and improve the services that millions of people depend on every day. If you’re looking for an innovative work environment where you can really make a difference, check out the job opportunities with the Commonwealth of Massachusetts. This page is managed according to the Mass.gov social media policy: https://www.mass.gov/info-details/massgov-social-media-policy. Comments that do not follow our policy may be removed.

City of Philadelphia

phila.gov

With a workforce of 30,000 people, and opportunities in 1,000 different job categories, the City of Philadelphia is one of the largest employers in Southeastern Pennsylvania. As an employer, we operate through the guiding principles of service, integrity, respect, accountability, collaboration, diversity and inclusion. We strive to effectively deliver services, to resolve the challenges facing our city, and to make Philadelphia a place where all of our residents have the opportunity to reach their potential. To learn more about job opportunities, visit www.phila.gov or follow #PHLCityJobs.

Loading…

NEWS

CBP Office of Professional Responsibility CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 31, 2025 01:54 PM

Weekly U.S.-Mexico Border Update: 2025 migration data, ICE purge, cybersecurity and civil liberties

Fiscal 2025 data show a big drop in migration amid the Trump crackdown, though numbers have risen sharply since July. Border Patrol agents...

Read Article

October 30, 2025 10:37 AM

Fatal Vehicle Pursuit Near University of Texas at El Paso Leaves Several Illegal Aliens Dead

CBP has announced that a Border Patrol Agent assigned to the United States Border Patrol's El Paso Station observed a group of suspected...

Read Article

October 29, 2025 08:54 PM

Working for ICE

Career paths in management, information technology, law, mission support, public affairs and community outreach are available within the agency.

Read Article

September 18, 2025 07:00 AM

Up to $30K in Incentives as CBP Ramps Up Hiring for Key Positions

U.S. Customs and Border Protection has announced it is actively seeking dedicated individuals to join its ranks and contribute to...

Read Article

July 08, 2025 07:00 AM

Three Law Enforcement Personnel Injured After Horrific Shooting in McAllen Texas

On July 7th, a gunman, preliminarily identified as Ryan Louis Mosqueda, opened fire at the entrance of the United States Border Patrol...

Read Article

June 30, 2025 07:00 AM

Cybersecurity

The Department of Homeland Security and its components play a lead role in strengthening cybersecurity resilience across the nation and sectors.

Read Article

June 10, 2025 07:00 AM

CBP Officers Detain Man for Verbal Threats, Impeding Inspection At Del Rio International Bridge

The Del Rio International Bridge detained a male US citizen for allegedly resisting or impeding certain officers or employees.

Read Article

May 06, 2025 07:00 AM

New St. John’s Partnership to Create Institute for Border Security and Intelligence Studies

St. John's University has partnered with the US Customs and Border Protection New York Field Office to create the Institute for Border Security and...

Read Article

May 01, 2025 07:00 AM

Cybersecurity in the UK

This briefing provides an overview of cybersecurity in the UK. It explains the nature of the cyber threat, including how cyber attacks work.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-16197

SUMMARY

A security vulnerability has been detected in Sipeed PicoClaw up to 0.2.9. The affected element is the function handleMessageReceive of the file pkg/channels/feishu/feishu_64.go of the component Group Message Handler. Such manipulation leads to missing authorization. The attack can be launched remotely. The exploit has been disclosed publicly and may be used. The reported GitHub issue was closed automatically due to inactivity.

Published

Date2026-07-18

Updated

Date2026-07-18

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-16196

SUMMARY

A weakness has been identified in Sipeed PicoClaw up to 0.2.9. Impacted is the function isPrivateOrRestrictedIP of the file pkg/tools/integration/web.go of the component web_fetch. This manipulation causes server-side request forgery. The attack can be initiated remotely. The exploit has been made available to the public and could be used for attacks. Patch name: 2efbe5d560e7ed9bc5209c203dc4aa6ecdbc7405. To fix this issue, it is recommended to deploy a patch.

Published

Date2026-07-18

Updated

Date2026-07-18

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-16195

SUMMARY

A security flaw has been discovered in Sipeed PicoClaw up to 0.2.9. This issue affects the function dispatchIncoming of the file pkg/channels/wecom/wecom.go of the component Group Message Handler. The manipulation results in incorrect authorization. It is possible to launch the attack remotely. The exploit has been released to the public and may be used for attacks. The reported GitHub issue was closed automatically due to inactivity.

Published

Date2026-07-18

Updated

Date2026-07-18

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-10130

SUMMARY

QueryWeaver contains an authentication bypass vulnerability that allows unauthenticated attackers to obtain valid session tokens for existing accounts by submitting a signup request with a known victim email address. The signup route unconditionally creates and links a new token to the matching Identity via a Cypher MERGE operation before checking whether the email belongs to an existing account, causing the server to return a valid authenticated session token for the victim's identity without requiring any prior credentials or user interaction.

Published

Date2026-07-18

Updated

Date2026-07-18

RISK INFORMATION (Score: 8.2)

cvss3

Base Score: 8.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

cvss4

Base Score: 8.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

4.2

Exploitability

3.9

REFERENCES

CVE-2026-16194

SUMMARY

A vulnerability was determined in zhayujie CowAgent up to 2.1.1. This affects the function WebFetch.execute of the file agent/tools/web_fetch/web_fetch.py. Executing a manipulation of the argument url can lead to server-side request forgery. The attack may be performed from remote. The exploit has been publicly disclosed and may be utilized. Upgrading to version 2.1.2 is able to mitigate this issue. This patch is called ea47f3097eed4f8295c4cb3d76ecb97e0f43d632. It is recommended to upgrade the affected component. The vendor was contacted early, responded in a very professional manner and quickly released a fixed version of the affected product.

Published

Date2026-07-18

Updated

Date2026-07-18

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…