What is the official website of Christian Dior Couture ?

The official website of Christian Dior Couture is https://www.dior.com/carrieres/index.html.

What is Christian Dior Couture's cybersecurity risk score?

Christian Dior Couture has an AI-generated cybersecurity risk score of 492 out of 1000, indicating a Critical security posture according to Rankiteo's assessment.

How many security incidents has Christian Dior Couture experienced?

According to Rankiteo, Christian Dior Couture currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Christian Dior Couture been affected by any supply chain cyber incidents ?

According to Rankiteo, Christian Dior Couture has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Salesforce (Incident ID: TIFLVMCHR1770865579) Gainsight (Incident ID: GAI0292402112125) Salesforce (Incident ID: LOUPARVOLTIFJAP1770908674)

Does Christian Dior Couture have SOC 2 Type 1 certification ?

According to Rankiteo, Christian Dior Couture is not certified under SOC 2 Type 1.

Does Christian Dior Couture have SOC 2 Type 2 certification ?

According to Rankiteo, Christian Dior Couture does not hold a SOC 2 Type 2 certification.

Does Christian Dior Couture comply with GDPR ?

According to Rankiteo, Christian Dior Couture is not listed as GDPR compliant.

Does Christian Dior Couture have PCI DSS certification ?

According to Rankiteo, Christian Dior Couture does not currently maintain PCI DSS compliance.

Does Christian Dior Couture comply with HIPAA ?

According to Rankiteo, Christian Dior Couture is not compliant with HIPAA regulations.

Does Christian Dior Couture have ISO 27001 certification ?

According to Rankiteo,Christian Dior Couture is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Christian Dior Couture operate in ?

Christian Dior Couture operates primarily in the Retail Luxury Goods and Jewelry industry.

How many employees does Christian Dior Couture have ?

Christian Dior Couture employs approximately 15,708 people worldwide.

Does Christian Dior Couture own any subsidiaries ?

Christian Dior Couture presently has no subsidiaries across any sectors.

How many LinkedIn followers does Christian Dior Couture have ?

Christian Dior Couture's official LinkedIn profile has approximately 1,935,179 followers.

What is the NAICS classification code for Christian Dior Couture ?

Christian Dior Couture is classified under the NAICS code 4483, which corresponds to Jewelry, Luggage, and Leather Goods Stores.

Does Christian Dior Couture have a Crunchbase profile ?

No, Christian Dior Couture does not have a profile on Crunchbase.

Does Christian Dior Couture have a LinkedIn profile ?

Yes, Christian Dior Couture maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/christian-dior-couture.

How many cybersecurity incidents has Christian Dior Couture experienced ?

As of August 5, 2026, Rankiteo reports that Christian Dior Couture has experienced 14 cybersecurity incidents.

How many peer or competitor companies does Christian Dior Couture have ?

Christian Dior Couture has an estimated 1,461 peer or competitor companies worldwide.

What types of cybersecurity incidents has Christian Dior Couture faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Ransomware and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CDC

Boost Score +25 with badge (5 left)

492

/1000

Critical

517

/1000

Critical

Christian Dior Couture Vendor Cyber Rating & Cyber Score

dior.com

Add Your Compliance Badge

Welcome to Christian Dior Couture, House of Dreams, House of Talents. Christian Dior was the designer of dreams. In founding his House in 1947, marked by the revolution of the New Look, he metamorphosed his reveries into wonderful creations. His visionary spirit never ceased to make Clients all over the world feel more beautiful, an inspiration for his successors to this day. Christian Dior Couture, the House of Dreams, is recognized for its French heritage & vibrant culture sublimating its unique Savoir-faire and Creativity through empowering "metiers d’art”. Our Maison is a destination for sustainable growth & success where we shape the future of our Talents in a positive, authentic & generous environment. We bloom & deliver

CDC A.I CyberSecurity Scoring

Scoring History

CDC

Christian Dior Couture CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

SEPHORA

Cyber Attack

6/2026

SEPTHE178049083...

SEPHORA

Breach

4/2026

SEP1780946094

Christian Dior Cout...

Breach

3/2026

CHR1773773151

Christian Dior Cout...

Breach

2/2026

Salesforce

TIFLVMCHR177086...

Christian Dior Cout...

Breach

9/2025

CHR159271509302...

LVMH

Breach

8/2025

Gainsight

GAI029240211212...

Christian Dior Cout...

Breach

7/2025

LVM852071225

Christian Dior Cout...

Breach

7/2025

LOU026510209062...

Christian Dior Cout...

Ransomware

100

5/2025

CHRMAR176950442...

Christian Dior Cout...

Cyber Attack

5/2025

CHR316343111172...

Christian Dior Cout...

Breach

1/2025

CHR706072225

Christian Dior Cout...

Breach

1/2025

Salesforce

LOUPARVOLTIFJAP...

Christian Dior Cout...

Breach

100

11/2024

CHR243322409162...

Christian Dior Cout...

Breach

07/2019

SEP2372423

Loading…

A.I.

CDC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CDC

Incidents vs Retail Luxury Goods and Jewelry Industry Avg (This Year)

Christian Dior Couture has 25.0% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Christian Dior Couture has 94.17% more incidents than the average of all companies with at least one recorded incident.

Incident Types CDC vs Retail Luxury Goods and Jewelry Industry Avg (This Year)

Christian Dior Couture reported 2 incidents this year: 0 cyber attacks, 0 ransomware, 0 vulnerabilities, 2 data breaches, compared to industry peers with at least 1 incident.

Incident History - CDC (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Christian Dior Couture Subsidiaries

CDC

Retail Luxury Goods and Jewelry

Website: https://www.dior.com/carrieres/index.html

Company Size: 10,001+ employees

LVMHRetail Luxury Goods and Jewelry

Louis VuittonRetail Luxury Goods and Jewelry

SEPHORARetail

BvlgariRetail Luxury Goods and Jewelry

Benefit CosmeticsPersonal Care Product Manufacturing

CELINERetail Luxury Goods and Jewelry

LoeweRetail Luxury Goods and Jewelry

MAKE UP FOR EVERPersonal Care Product Manufacturing

GIVENCHYRetail Luxury Goods and Jewelry

TAG HeuerRetail Luxury Goods and Jewelry

KENZO ModeRetail Apparel and Fashion

BelmondHospitality

Copacabana Palace, A Belmond HotelHospitality

Le Manoir aux Quat'Saisons, A Belmond HotelHospitality

Maroma, A Belmond HotelHospitality

Hotel Cipriani, A Belmond HotelHospitality

Mount Nelson, A Belmond HotelHospitality

Venice Simplon-Orient-ExpressHospitality

Grand Hotel EuropeHospitality

Villa San Michele, A Belmond HotelHospitality

The Cadogan, A Belmond HotelHospitality

Castello di Casole, A Belmond HotelHospitality

Caruso, A Belmond HotelHospitality

La Samanna, A Belmond HotelHospitality

Les Bateaux BelmondHospitality

Palacio Nazarenas, A Belmond HotelHospitality

Villa Sant'Andrea, A Belmond HotelHospitality

Sanctuary Lodge, A Belmond HotelHospitality

Jimbaran Puri, A Belmond HotelHospitality

Eastern & Oriental Express, A Belmond TrainHospitality

Las Casitas, A Belmond HotelHospitality

21 ClubRestaurants

British Pullman, A Belmond TrainTravel Arrangements

Grand Hotel Timeo, A Belmond HotelHospitality

Belmond SafarisTravel Arrangements

Monasterio, A Belmond HotelHospitality

Reid's Palace, A Belmond HotelHospitality

Cap Juluca, A Belmond HotelHospitality

Hotel das Cataratas, A Belmond HotelHospitality

La Residencia, A Belmond HotelHospitality

Rio Sagrado, A Belmond HotelHospitality

Casa de Sierra Nevada, A Belmond HotelHospitality

Royal Scotsman, A Belmond TrainTravel Arrangements

Splendido, A Belmond HotelHospitality

Miraflores Park, A Belmond HotelHospitality

LVMH Fragrance BrandsPersonal Care Product Manufacturing

Parfums GivenchyPersonal Care Product Manufacturing

KENZO ParfumsPersonal Care Product Manufacturing

REPOSSIRetail Luxury Goods and Jewelry

LVMH Fashion Group North America Retail Luxury Goods and Jewelry

Nona SourceRetail Apparel and Fashion

NUDE SkincarePersonal Care Product Manufacturing

HeristoriaRetail Luxury Goods and Jewelry

Acqua di ParmaRetail Luxury Goods and Jewelry

ZENITH WatchesRetail Luxury Goods and Jewelry

FendiRetail Luxury Goods and Jewelry

Les EchosNewspaper Publishing

Les Echos STARTNewspaper Publishing

Les Echos Leadership & ManagementInformation Services

Les Echos Entrepreneurs Médias en ligne

The InnovatorNewspaper Publishing

24SRetail Apparel and Fashion

BerlutiRetail Luxury Goods and Jewelry

NOWNESSMedia Production

Maison Francis KurkdjianPersonal Care Product Manufacturing

FRED JewelryRetail Luxury Goods and Jewelry

GuerlainPersonal Care Product Manufacturing

RIMOWARetail Luxury Goods and Jewelry

CHAUMETRetail Luxury Goods and Jewelry

DFS Group LimitedRetail

Samaritaine Paris Pont-NeufRetail

Loro PianaRetail Luxury Goods and Jewelry

HublotRetail Luxury Goods and Jewelry

Marc JacobsRetail Apparel and Fashion

ThéliosRetail Luxury Goods and Jewelry

Loading…

Christian Dior Couture Similar Companies

Prada Group

pradagroup.com

Pioneer of a dialogue with contemporary society across diverse cultural spheres and an influential leader in luxury fashion, Prada Group founds its identity on essential values such as creative independence, transformation, and sustainable development, offering its brands a shared vision to interpret and express their spirit. The Group owns some of the world’s most prestigious luxury brands, Prada, Miu Miu, Church's, Car Shoe, Versace, the historic Pasticceria Marchesi and Luna Rossa, and works constantly to enhance their value by increasing their visibility and appeal. The Group designs, manufactures and distributes ready-to-wear collections, leather goods and footwear in more than 70 countries through a network of 620 stores as well as e-commerce channels, selected e-tailers and department stores around the world. The Group, which also operates in the eyewear and beauty sector through licensing agreements, has 25 owned factories and 15,529 employees (at June 30, 2025, excluding Versace). Prada S.p.A. is listed on the Hong Kong Stock Exchange as 1913.

Gucci

gucci.com

Founded in Florence, Italy in 1921, Gucci is one of the world’s leading luxury brands. Following the House’s centenary, Gucci forges ahead continuing to redefine fashion and luxury while celebrating creativity, Italian craftsmanship, and innovation. Gucci is part of the global luxury group Kering, which manages renowned Houses in fashion, leather goods, jewelry, and eyewear. Discover more about Gucci at www.gucci.com.

Pandora

cb pandoragroup.com

Pandora is the world’s largest jewellery brand. The company designs, manufactures and markets hand-finished jewellery made from high-quality materials at affordable prices Pandora jewellery is sold in more than 100 countries through more than 6,500 points of sale, including more than 2,500 concept stores. Headquartered in Copenhagen, Denmark, Pandora employs 32,000 people worldwide and crafts its jewellery at two LEED-certified facilities in Thailand using mainly recycled silver and gold. Pandora is committed to leadership in sustainability and has set science-based targets to reduce greenhouse gas emissions by 50% across its own operations and value chain by 2030. The company is listed on the Nasdaq Copenhagen stock exchange and generated revenue of DKK 26.5 billion (EUR 3.6 billion) in 2022. See all our products and collections on pandora.net Visit our guidelines for this channel, and what types of post we accept here: https://pandoragroup.com/media/Corporate-social-media-principles

Swatch Group

swatchgroup.com

Swatch Group is the world's number one manufacturer of finished watches. With its 16 watch brands, the Group is present in all price segments, and is also active in the manufacture and sale of jewelry, watch movements and components. Swatch Group unites, among other companies, the following watch brands under its roof: Breguet, Harry Winston, Blancpain, Glashütte Original, Jaquet Droz, Omega, Longines, Rado, Union Glashütte, Tissot, Balmain, Certina, Mido, Hamilton, Swatch and Flik Flak. The Group has a strong distribution and multi-brand retail net with two sophisticated boutiques under the name of Tourbillon and Hour Passion. Swatch Group is also an important player in advanced nanomechanical, nanoelectronic and Bluetooth technologies essential to watchmaking and other industries. The Group employs 31'800 persons in over 50 countries.

CHANEL

cb chanel.com

Chanel is a private company and world leader in creating, manufacturing and distributing luxury products, including Ready-to-Wear, Accessories, Fragrances, Makeup, Skincare, Jewellery and Watches. Founded by Gabrielle Chanel in 1910, the House remains dedicated to exceptional craftsmanship and offering high-end creations. Chanel employs more than 32,000 people worldwide. As part of this, the House promotes arts, culture and creativity, while investing significantly in key areas including research & development, sustainability, and innovation. Chanel is dedicated to creating the conditions for people to perform at their best, building on their strengths and enabling them to benefit from new opportunities. It offers a unique working environment where people are given time to understand the brand, the business, and develop their personal motivations. This means everyone can grow, continue to be inspired and feel included, now and in the future. The company fosters true collaboration and respect for all, grounded in the belief that diversity is essential to the success of the organisation and its people. Chanel is committed to rewarding people competitively, as well as offering initiatives such as wellbeing programmes, learning and development opportunities, and parental leave for all parents globally.

LVMH

cb lvmh.com

LVMH is the world leader in luxury. A family group founded in 1987 and headed by Chairman and CEO Bernard Arnault, LVMH is now home to 75 iconic Maisons, which embody a distinctive art de vivre blending heritage and modernity. With reported sales of 86.2 billion euros in 2023 and 6000 stores around the world, we are the only group present in all major sectors of the luxury industry: Wines & Spirits, Fashion & Leather Goods, Perfumes & Cosmetics, Watches & Jewelry, Selective Distribution. Our long-term vision, entrepreneurial spirit and constant search for new solutions set us apart. The success of our Group is only possible thanks to our employees: 213,000 passionate and committed women and men, representing 190 nationalities, work in our studios, workshops, wineries, factories, offices and boutiques all around the world. Their talent and their diversity are our strength. Being part of LVMH means being continuously inspired by our heritage, creativity and sense of the collective. We have exceptional stories to share and an unrivalled legacy to pass on to future generations. Being part of LVMH means being challenged. We set ambitious paths to excellence by continuously pushing the boundaries, raising our standards and renewing ourselves to ensure the long-term development of our Maisons. Being part of LVMH means belonging to one of the world’s most creative and innovative communities. We foster collaborations that enable our people to enrich their knowledge, grow their network and share their passions. Being part of LVMH means being supported in an inclusive and diverse workplace, where all voices are heard and each talent is given the means to thrive. In 6 different industries, across 81 countries, LVMH and its Maisons are committed to exemplary ethics, social and environmental responsibility. We strive to ensure that our products and the way they are made have positive impact on our entire ecosystem and on our host communities. At LVMH, we craft the future.

Louis Vuitton

louisvuitton.com

For more than 150 years, men and women at Louis Vuitton have shared the same spirit of excellence and passion, reaffirming their expertise every day, the world over. With us, every career is a journey, filled with excitement and challenge, desire and daring. There is no better way to reveal your potential. Explore, develop, innovate, create... Every journey is unique. Today, Louis Vuitton invites you to discover your own.

Hermès

hermes.com

A creator, artisan and seller of high-quality objects since 1837, Hermès is an independent, family-owned French house that employs more than 16,600 people worldwide. Driven by its permanent entrepreneurial spirit and consistently high standards, Hermès cultivates the freedom and autonomy of each individual through responsible management. The company perpetuates the transmission of exceptional know-how through strong territorial presence that respects people and nature, a source of exceptional materials. Sixteen artisanal métiers nurture the creativity of the house, whose collections are presented in over 300 stores around the world.

Richemont

richemont.com

At Richemont, we craft the future. Our unique portfolio includes prestigious Maisons distinguished by their craftsmanship and creativity. Richemont’s ambition is to nurture its Maisons and businesses and enable them to grow and prosper in a responsible, sustainable manner over the long term. Richemont operates in three business areas: Jewellery Maisons with Buccellati, Cartier, Van Cleef & Arpels and Vhernier; Specialist Watchmakers with A. Lange & Söhne, Baume & Mercier, IWC Schaffhausen, Jaeger-LeCoultre, Panerai, Piaget, Roger Dubuis and Vacheron Constantin; and Other, primarily Fashion & Accessories Maisons with Alaïa, Chloé, Delvaux, dunhill, G/FORE, Gianvito Rossi, Montblanc, Peter Millar, Purdey, Serapian as well as Watchfinder & Co. To deliver on its mission of crafting the future, the Group nurtures the distinctive craftsmanship and creativity of its teams, employing a workforce of nearly 40 000 people spanning 136 nationalities across 40 countries in five regions.

Loading…

NEWS

Christian Dior Couture CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

July 04, 2026 01:17 AM

UAE foils sophisticated cyberattacks targeting financial sector

The UAE Cybersecurity Council announced that the country's national cybersecurity system successfully thwarted a series of sophisticated...

Read Article

February 17, 2026 08:00 AM

Louis Vuitton, Dior, and Tiffany Fined $25 Million in South Korea Over SaaS Customer Management System Data Breaches

South Korea's Personal Information Protection Commission (PIPC) has imposed a combined fine of approximately KRW 36 billion (US$25 million)...

Read Article

July 24, 2025 07:00 AM

Christian Dior Hit With Class Privacy Suit Following Data Breach

Christian Dior Inc. is facing a class suit alleging it failed to properly secure and safeguard personally identifiable information that was...

Read Article

July 22, 2025 07:00 AM

Dior Legacy IT System Breach: In-Depth Analysis of Customer Database Cyberattack

The incident involving Dior represents a significant cyberattack where unauthorized external threat actors exploited legacy IT system...

Read Article

July 18, 2025 07:00 AM

Christian Dior Data Breach Exposes Sensitive Client Info

Christian Dior Couture SAS experienced a data breach affecting a database containing personal information of Dior clients.

Read Article

July 14, 2025 07:00 AM

Luxury retailer LVMH says UK customer data was stolen in cyber attack

French luxury goods retailer LVMH has disclosed multiple cyber attacks in 2025 so far, and their impact is now spreading to the UK as a new...

Read Article

July 14, 2025 07:00 AM

Louis Vuitton confirms cyber attack resulting in customer data theft

Luxury retailer and designer brand Louis Vuitton has revealed that a cyber attack on its network led to unauthorised system access and the...

Read Article

June 20, 2025 07:00 AM

Cyber threats disrupt global firms in US, UK and EU

Global companies are grappling with a surge in cyber and ransomware attacks, with increasingly sophisticated threat actors disrupting...

Read Article

May 16, 2025 07:00 AM

Christian Dior Couture Client Data Breached in Cyber Attack

Christian Dior Couture has been hit by a cyber attack, with hackers obtaining some of its customers' data.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-45537

SUMMARY

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the construct_uri() function concatenates multiple URI components (protocol, username, domain, port, params) into a fixed 1024-byte global BSS buffer without any bounds checking. When a routing script calls construct_uri() with an attacker-controlled username, a combined component length exceeding 1024 bytes overflows the buffer, corrupting adjacent global data with attacker-controlled content. The overflow reaches disable_503_translation, a global flag controlling SIP 503 response handling, allowing an attacker to deterministically set the flag via the URI username and alter the server's routing behavior for subsequent messages. Because the same buffer is shared with contact_builder(), the overflow also corrupts that function's data, and without a memory sanitizer the adjacent globals are silently overwritten on every request containing a long username. This issue has been fixed in versions 3.6.6 and 4.0.0-rc1.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-18819

SUMMARY

A security vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8aab339798ed47e8c6d7d977ed97a82bd. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project maintainer confirms: "[I]t seems plausible, in that RackTables does not at this time have any CSRF prevention. You may assign a CVE ID to this, but there is no guarantee it will be handled in urgent, or even timely, manner, or at all."

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 4.3)

cvss2

Base Score: 5.0

Complexity: LOW

AV:N/AC:L/Au:N/C:N/I:P/A:N

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-18818

SUMMARY

A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-70620

SUMMARY

Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileged attackers to direct the server to probe internal network resources by supplying arbitrary URLs to the embedding endpoint configuration without scheme, host, IP range, or DNS rebind validation. Attackers can submit loopback addresses, RFC 1918 ranges, or link-local addresses through the embedding endpoint API to partially read responses from cloud instance metadata services, internal APIs, and other hosts reachable from the server.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

cvss4

Base Score: 6.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

2.3

REFERENCES

CVE-2026-70619

SUMMARY

Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-admin users to manage server-wide embedding backend configuration by invoking endpoint management routes that verify session authentication but omit the admin authorization guard. Attackers can supply an attacker-controlled URL to overwrite the embedding backend persisted in the endpoint configuration file and process environment, causing all subsequent embedding operations including chat messages, RAG queries, memory entries, and vault text to be transmitted in plaintext to the attacker-controlled destination, or delete the endpoint configuration to deny embedding service to all users.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…