What is the official website of CHINA STATE CONSTRUCTION (CSCEC) ?

The official website of CHINA STATE CONSTRUCTION (CSCEC) is http://www.cscec.com.cn/.

What is CHINA STATE CONSTRUCTION (CSCEC)'s cybersecurity risk score?

CHINA STATE CONSTRUCTION (CSCEC) has an AI-generated cybersecurity risk score of 801 out of 1000, indicating a Good security posture according to Rankiteo's assessment.

How many security incidents has CHINA STATE CONSTRUCTION (CSCEC) experienced?

According to Rankiteo, CHINA STATE CONSTRUCTION (CSCEC) currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has CHINA STATE CONSTRUCTION (CSCEC) been affected by any supply chain cyber incidents ?

According to Rankiteo, CHINA STATE CONSTRUCTION (CSCEC) has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does CHINA STATE CONSTRUCTION (CSCEC) have SOC 2 Type 1 certification ?

According to Rankiteo, CHINA STATE CONSTRUCTION (CSCEC) is not certified under SOC 2 Type 1.

Does CHINA STATE CONSTRUCTION (CSCEC) have SOC 2 Type 2 certification ?

According to Rankiteo, CHINA STATE CONSTRUCTION (CSCEC) does not hold a SOC 2 Type 2 certification.

Does CHINA STATE CONSTRUCTION (CSCEC) comply with GDPR ?

According to Rankiteo, CHINA STATE CONSTRUCTION (CSCEC) is not listed as GDPR compliant.

Does CHINA STATE CONSTRUCTION (CSCEC) have PCI DSS certification ?

According to Rankiteo, CHINA STATE CONSTRUCTION (CSCEC) does not currently maintain PCI DSS compliance.

Does CHINA STATE CONSTRUCTION (CSCEC) comply with HIPAA ?

According to Rankiteo, CHINA STATE CONSTRUCTION (CSCEC) is not compliant with HIPAA regulations.

Does CHINA STATE CONSTRUCTION (CSCEC) have ISO 27001 certification ?

According to Rankiteo,CHINA STATE CONSTRUCTION (CSCEC) is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does CHINA STATE CONSTRUCTION (CSCEC) operate in ?

CHINA STATE CONSTRUCTION (CSCEC) operates primarily in the Architecture and Planning industry.

How many employees does CHINA STATE CONSTRUCTION (CSCEC) have ?

CHINA STATE CONSTRUCTION (CSCEC) employs approximately 37,099 people worldwide.

Does CHINA STATE CONSTRUCTION (CSCEC) own any subsidiaries ?

CHINA STATE CONSTRUCTION (CSCEC) presently has no subsidiaries across any sectors.

How many LinkedIn followers does CHINA STATE CONSTRUCTION (CSCEC) have ?

CHINA STATE CONSTRUCTION (CSCEC)'s official LinkedIn profile has approximately 116,444 followers.

What is the NAICS classification code for CHINA STATE CONSTRUCTION (CSCEC) ?

CHINA STATE CONSTRUCTION (CSCEC) is classified under the NAICS code 54131, which corresponds to Architectural Services.

Does CHINA STATE CONSTRUCTION (CSCEC) have a Crunchbase profile ?

No, CHINA STATE CONSTRUCTION (CSCEC) does not have a profile on Crunchbase.

Does CHINA STATE CONSTRUCTION (CSCEC) have a LinkedIn profile ?

Yes, CHINA STATE CONSTRUCTION (CSCEC) maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/china-state-construction-engrg.-corp.-ltd-cscec-.

How many cybersecurity incidents has CHINA STATE CONSTRUCTION (CSCEC) experienced ?

As of June 9, 2026, Rankiteo reports that CHINA STATE CONSTRUCTION (CSCEC) has not experienced any cybersecurity incidents.

How many peer or competitor companies does CHINA STATE CONSTRUCTION (CSCEC) have ?

CHINA STATE CONSTRUCTION (CSCEC) has an estimated 10,029 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CSC

Boost Score +25 with badge (5 left)

801

/1000

Good

826

/1000

Good

CHINA STATE CONSTRUCTION (CSCEC) Vendor Cyber Rating & Cyber Score

cscec.com.cn

Add Your Compliance Badge

China State Construction Engineering Corporation Ltd (in short: China Construction; Stock code: 601668), formally established on December 10, 2007, was co-initiated by four Fortune Global 500 enterprises: China State Construction Engineering Corp. (CSCEC), China National Petroleum Corporation (CNPC), Baosteel Group Corporation Ltd and Sinochem Corporation. China Construction was successfully listed in Shanghai Stock Exchange on July 29, 2009. China Construction has inherited all superior assets and corporate culture of CSCEC, with its business covering housing construction, international contracting, real estate development and investment, infrastructure construction and investment, prospecting and design. China Construction is China’s

CSC A.I CyberSecurity Scoring

Scoring History

CSC

CHINA STATE CONSTRUCTION (CSCEC) CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

CSC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CSC

Incidents vs Architecture and Planning Industry Avg (This Year)

No incidents recorded for CHINA STATE CONSTRUCTION (CSCEC) in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for CHINA STATE CONSTRUCTION (CSCEC) in 2026.

Incident Types CSC vs Architecture and Planning Industry Avg (This Year)

No incidents recorded for CHINA STATE CONSTRUCTION (CSCEC) in 2026.

Incident History - CSC (X = Date, Y = Severity)

Loading…

SUBSIDIARY

CHINA STATE CONSTRUCTION (CSCEC) Subsidiaries

CSC

Architecture and Planning

Website: http://www.cscec.com.cn/

Company Size: 10,001+ employees

CSCEC Middle EastConstruction

CHINA CONSTRUCTION AMERICAConstruction

Plaza ConstructionConstruction

Strategic CapitalReal Estate

China Overseas Property GroupReal Estate

中建西部建设Construction

CSCEC MalaysiaConstruction

Loading…

CHINA STATE CONSTRUCTION (CSCEC) Similar Companies

Loading…

NEWS

CHINA STATE CONSTRUCTION (CSCEC) CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 26, 2026 08:00 AM

Kuwait awards $3.2 bn Kabd North WWTP contract to China’s CSCEC

Kuwait has approved a major contract for the Kabd North Waste Water Treatment Plant (WWTP), awarding the project to China State Construction...

Read Article

November 25, 2025 08:00 AM

TP-Link's Vietnam build stirs Washington after Chinese military-linked contractor surfaces

TP-Link has spent years trying to downplay its Chinese roots, but Washington remains sceptical. reports that the company's new Vietnam...

Read Article

November 22, 2025 08:00 AM

Wi-Fi Giant’s Vietnam Factory Raises Questions Over China Split

China-founded Wi-Fi behemoth TP-Link Systems Inc. is trying to convince US national security officials it's independent from Beijing.

Read Article

January 15, 2025 08:00 AM

CCA condemns Izmirlian’s winding-up petition as “meritless,” vows to protect Bahamian jobs

CCA Bahamas has condemned Baha Mar's original developer, Sarkis Izmirlian, for filing a winding-up petition, calling it “meritless.”

Read Article

March 28, 2024 07:00 AM

UAE and PH government officials and leading experts gather for the largest gathering of Filipino professionals in MENA

The Filipino Times Watchlist: Top Engineers and Architects in the Middle East Summit,' organized by New Perspective Media (NPM) Group,...

Read Article

December 08, 2023 08:00 AM

NWTN partners with CSCEC (Middle East)

NWTN Inc. announces a landmark Memorandum of Understanding (MOU) with China State Construction Engineering Corporation (Middle East) LLC (CSCEC).

Read Article

November 29, 2023 08:00 AM

China state group awarded $1.2 bln contract for the future Dubai leisure island with MGM IR

Dubai developer Wasl has awarded an estimated $1.2 billion contract to Beijing-based China State Construction Engineering Corporation (CSCEC) to develop a...

Read Article

April 27, 2022 07:00 AM

CSCEC begins construction of office tower in Phnom Penh, Cambodia

China State Construction Engineering (CSCEC) has started construction work of a $112m office tower in Phnom Penh, Cambodia.

Read Article

February 27, 2017 08:00 AM

Tidhar teams with huge Chinese building co

Tidhar will build thousands of homes in Israel worth NIS 1.5 billion together with CSCEC, one of the world's largest construction companies.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-44541

SUMMARY

Fides is an open-source privacy engineering platform. From version 2.33.0 to before version 2.84.5, there is a DOM-based XSS vulnerability in fides.js via the fides_description override. This issue has been patched in version 2.84.5.

Published

Date2026-06-08

Updated

Date2026-06-08

RISK INFORMATION (Score: )

cvss4

Base Score: 7.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-49141

SUMMARY

WACRM prior to commit 73041bf contain an authorization bypass vulnerability in the automation engine that allows authenticated attackers to access and modify contacts belonging to other tenants by supplying an arbitrary caller-controlled contact_id in the POST request body without tenant ownership verification. Attackers can exploit the service-role client that bypasses row-level security to modify victim contact fields including name, email, and company across tenant boundaries using only a known contact UUID.

Published

Date2026-06-08

Updated

Date2026-06-08

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:L/I:H/A:N

cvss4

Base Score: 5.1

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

4.7

Exploitability

1.8

REFERENCES

CVE-2026-47345

SUMMARY

Namespace attributes are not encoded correctly during HTML serialization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.

Published

Date2026-06-08

Updated

Date2026-06-08

RISK INFORMATION (Score: )

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-47344

SUMMARY

When ALLOW_INSECURE_RAW_TEXT is enabled, whitespace-variant closing tags (e.g., </style\t>) are not recognized by the sanitizer but accepted by browsers as valid end tags, allowing subsequent content to escape sanitization. This allows bypassing the cross-site scripting prevention mechanism of typo3/html-sanitizer before version 2.3.2.

Published

Date2026-06-08

Updated

Date2026-06-08

RISK INFORMATION (Score: )

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:P/VC:N/VI:N/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-46484

SUMMARY

Headplane is a feature-complete Web UI for Headscale. Prior to versions 0.6.3 and 0.7.0-beta.3, Headplane was vulnerable to a path traversal / authorization bypass in the Headscale API client used by node and user rename operations. This issue has been patched in versions 0.6.3 and 0.7.0-beta.3.

Published

Date2026-06-08

Updated

Date2026-06-08

RISK INFORMATION (Score: 8.1)

cvss3

Base Score: 8.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…