What is the official website of Cisco Enterprise Networking ?

The official website of Cisco Enterprise Networking is http://www.cisco.com/go/enterprise.

What is Cisco Enterprise Networking's cybersecurity risk score?

Cisco Enterprise Networking has an AI-generated cybersecurity risk score of 791 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Cisco Enterprise Networking experienced?

According to Rankiteo, Cisco Enterprise Networking currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Cisco Enterprise Networking been affected by any supply chain cyber incidents ?

According to Rankiteo, Cisco Enterprise Networking has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: OpenAI (Incident ID: BROOPECHECISOPEVULCTI1785407853) AsyncAPI Initiative (Incident ID: CISSONMICORAASYKNX1784341544) Cisco (Incident ID: CIS1784025731) Cholayil Private Limited (Incident ID: CIS1780568638) Splunk (Incident ID: SPLCIS1781519269) Oracle (Incident ID: ORA1780418023) Microsoft Security (Incident ID: PUTWEBANYMIC1779215753) GitHub (Incident ID: GIT1779251025) Prime Communications MX (Incident ID: PRICIS1776775110) Aqua Security (Incident ID: AQUUSEAMASALCIS1775046662) Legit Security (Incident ID: AQU1774441468) Tecplix Technologies Private Limited (Incident ID: BAD1772389516) Cisco (Incident ID: CISSAI1773859283) ConnectWise (Incident ID: ARCCONO&OLOGKASORAWEBGOO1784262481) Cisco (Incident ID: CIS1766051696) SmarterTools (Incident ID: SHI1766477260) SolarWinds (Incident ID: SOLSONCIS1776457498) OpenClaw (Incident ID: TP-HIKFOXGOOREVARITHEOPECIS1770645410) Cisco (Incident ID: KET5232452102025) Cisco (Incident ID: CIS5802058092725) Cisco (Incident ID: SAL5732257091825) Cisco (Incident ID: US-1776976007) Salesforce (Incident ID: TRA1021410090425) Fortinet (Incident ID: FORCISAMAJPM1767748297) Veeam Software (Incident ID: SON0492204092925) SolarWinds (Incident ID: ZCAMIRGOOSOLCISTHE1780914449) Veeam Software (Incident ID: VEESONCIS1775140482)

Does Cisco Enterprise Networking have SOC 2 Type 1 certification ?

According to Rankiteo, Cisco Enterprise Networking is not certified under SOC 2 Type 1.

Does Cisco Enterprise Networking have SOC 2 Type 2 certification ?

According to Rankiteo, Cisco Enterprise Networking does not hold a SOC 2 Type 2 certification.

Does Cisco Enterprise Networking comply with GDPR ?

According to Rankiteo, Cisco Enterprise Networking is not listed as GDPR compliant.

Does Cisco Enterprise Networking have PCI DSS certification ?

According to Rankiteo, Cisco Enterprise Networking does not currently maintain PCI DSS compliance.

Does Cisco Enterprise Networking comply with HIPAA ?

According to Rankiteo, Cisco Enterprise Networking is not compliant with HIPAA regulations.

Does Cisco Enterprise Networking have ISO 27001 certification ?

According to Rankiteo,Cisco Enterprise Networking is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Cisco Enterprise Networking operate in ?

Cisco Enterprise Networking operates primarily in the IT Services and IT Consulting industry.

How many employees does Cisco Enterprise Networking have ?

Cisco Enterprise Networking employs approximately None employees people worldwide.

Does Cisco Enterprise Networking own any subsidiaries ?

Cisco Enterprise Networking presently has no subsidiaries across any sectors.

How many LinkedIn followers does Cisco Enterprise Networking have ?

Cisco Enterprise Networking's official LinkedIn profile has approximately 590,476 followers.

What is the NAICS classification code for Cisco Enterprise Networking ?

Cisco Enterprise Networking is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Cisco Enterprise Networking have a Crunchbase profile ?

No, Cisco Enterprise Networking does not have a profile on Crunchbase.

Does Cisco Enterprise Networking have a LinkedIn profile ?

Yes, Cisco Enterprise Networking maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/cisco-enterprise-networking.

How many cybersecurity incidents has Cisco Enterprise Networking experienced ?

As of July 31, 2026, Rankiteo reports that Cisco Enterprise Networking has experienced 77 cybersecurity incidents.

How many peer or competitor companies does Cisco Enterprise Networking have ?

Cisco Enterprise Networking has an estimated 41,218 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CEN

Boost Score +25 with badge (5 left)

791

/1000

Fair

816

/1000

Good

Cisco Enterprise Networking Vendor Cyber Rating & Cyber Score

cisco.com

Add Your Compliance Badge

The leader in Enterprise Networks for 30 years. Connect anyone, anywhere, on any device—more securely, reliably, and seamlessly.

CEN A.I CyberSecurity Scoring

Scoring History

CEN

Cisco Enterprise Networking CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Cisco

Vulnerability

100

7/2026

OpenAI

BROOPECHECISOPE...

Cisco

Vulnerability

7/2026

AsyncAPI Initia...

CISSONMICORAASY...

Cisco

Vulnerability

7/2026

Cisco

CIS1784025731

Cisco

Vulnerability

7/2026

CIS1783002468

Cisco

Vulnerability

100

6/2026

CIS1781792750

Splunk

Vulnerability

100

6/2026

SPL1781778669

Cisco

Breach

6/2026

CISTHE178059144...

Cisco

Vulnerability

100

6/2026

Cholayil Privat...

CIS1780568638

Cisco

Vulnerability

6/2026

CIS1781591050

Splunk

Vulnerability

100

6/2026

Splunk

SPLCIS178151926...

Splunk

Vulnerability

6/2026

SPL1782735858

Splunk

Vulnerability

100

6/2026

Oracle

ORA1780418023

Cisco

Vulnerability

100

5/2026

CIS1779359208

Webex

Cyber Attack

5/2026

Microsoft Secur...

PUTWEBANYMIC177...

Cisco

Breach

5/2026

GitHub

GIT1779251025

Cisco Meraki

Vulnerability

4/2026

Prime Communica...

PRICIS177677511...

Cisco

Vulnerability

4/2026

CIS1776327928

Splunk

Vulnerability

4/2026

SPL1776320620

Cisco

Vulnerability

100

4/2026

CIS1775493782

Cisco

Vulnerability

100

4/2026

CIS1775111249

Cisco

Ransomware

100

4/2026

MEDCISOPE178120...

Cisco

Vulnerability

100

4/2026

Aqua Security

AQUUSEAMASALCIS...

Splunk

Vulnerability

100

3/2026

DELMICAMAFORSPL...

Cisco Security

Vulnerability

100

3/2026

CIS1774506416

Cisco

Cyber Attack

100

3/2026

Legit Security

AQU1774441468

Cisco

Vulnerability

3/2026

CIS1773304317

Outshift by Cisco

Cyber Attack

3/2026

NYLJPMOUTOUT177...

Splunk

Vulnerability

3/2026

SPL1773304071

Cisco

Cyber Attack

100

3/2026

Tecplix Technol...

BAD1772389516

Cisco

Vulnerability

100

3/2026

CIS1772699055

Cisco

Vulnerability

100

2/2026

CIS1772080050

Cisco

Vulnerability

2/2026

CIS1770280632

Cisco

Vulnerability

100

1/2026

Cisco

CISSAI177385928...

Cisco

Vulnerability

1/2026

CISSYN177430507...

Cisco

Vulnerability

100

1/2026

CIS1769059373

Cisco

Vulnerability

1/2026

CIS1767871927

Cisco

Vulnerability

1/2026

CIS1778171136

Cisco

Vulnerability

100

1/2026

CIS1775125662

Webex

Cyber Attack

1/2026

ConnectWise

ARCCONO&OLOGKAS...

Cisco

Vulnerability

100

12/2025

Cisco

CIS1766051696

Cisco

Vulnerability

100

12/2025

CIS1783975142

Cisco

Breach

11/2025

SmarterTools

SHI1766477260

Cisco Enterprise Ne...

Ransomware

100

11/2025

CIS070210711112...

Cisco

Vulnerability

100

11/2025

SolarWinds

SOLSONCIS177645...

Cisco Security

Cyber Attack

11/2025

OpenClaw

TP-HIKFOXGOOREV...

Cisco

Ransomware

100

10/2025

Cisco

KET523245210202...

Cisco

Cyber Attack

100

9/2025

Cisco

CIS580205809272...

Cisco

Cyber Attack

100

9/2025

Cisco

SAL573225709182...

Cisco

Cyber Attack

100

9/2025

Cisco

US-1776976007

Cisco Enterprise Ne...

Vulnerability

100

8/2025

CIS069210609302...

Cisco

Breach

7/2025

Salesforce

TRA102141009042...

Cisco Enterprise Ne...

Vulnerability

100

7/2025

CIS905072925

Splunk

Vulnerability

6/2025

SPOMITSPL176777...

Cisco Enterprise Ne...

Cyber Attack

100

6/2025

CIS526205209262...

Cisco Enterprise Ne...

Vulnerability

100

5/2025

CIS751081525

Cisco Enterprise Ne...

Vulnerability

100

3/2025

SPL355032725

Cisco

Breach

1/2025

CISVMWJUNCAN177...

Cisco

Vulnerability

100

12/2024

Fortinet

FORCISAMAJPM176...

Cisco Enterprise Ne...

Cyber Attack

100

6/2024

CIS203202009282...

Cisco

Ransomware

100

6/2024

Veeam Software

SON049220409292...

Cisco Enterprise Ne...

Vulnerability

100

4/2024

CIS000082424

Cisco

Ransomware

100

1/2024

CIS1774355311

Cisco

Cyber Attack

100

1/2024

DOMCISLINDRAFOR...

Cisco

Vulnerability

1/2024

SolarWinds

ZCAMIRGOOSOLCIS...

Cisco Enterprise Ne...

Data Leak

11/2023

CIS1221121123

Cisco

Ransomware

100

3/2023

Veeam Software

VEESONCIS177514...

Cisco

Vulnerability

100

1/2023

CIS1772072640

Cisco Enterprise Ne...

Breach

100

9/2022

CIS193291022

Cisco Enterprise Ne...

Ransomware

08/2022

CIS0217922

Cisco Enterprise Ne...

Ransomware

100

5/2022

CIS280222811112...

Cisco Enterprise Ne...

Vulnerability

02/2022

CIS13829322

Cisco

Ransomware

100

7/2021

CIS1774362550

Cisco

Breach

1/2020

TICHARATTPRIMCD...

Cisco

Vulnerability

100

1/2020

BROMIC7-ENGICIS...

Cisco Enterprise Ne...

Breach

9/2018

CIS205918123

Cisco Enterprise Ne...

Vulnerability

100

6/2018

CIS929041225

Cisco Enterprise Ne...

Breach

8/2016

CIS747072825

Loading…

A.I.

CEN Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CEN

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Cisco Enterprise Networking in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Cisco Enterprise Networking in 2026.

Incident Types CEN vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Cisco Enterprise Networking in 2026.

Incident History - CEN (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Cisco Enterprise Networking Subsidiaries

CEN

IT Services and IT Consulting

Website: http://www.cisco.com/go/enterprise

Company Size: 10,001+ employees

CiscoSoftware Development

Cisco MerakiSoftware Development

Cisco SecurityIT Services and IT Consulting

Cisco Data Center and CloudIT Services and IT Consulting

Cisco Networking AcademyComputer Networking Products

Loading…

Cisco Enterprise Networking Similar Companies

Virtusa

cb virtusa.com

Virtusa is a global product and platform engineering services company that makes experiences better with technology. We help organizations grow faster, more profitably, and more sustainably by reimagining enterprises through domain-driven solutions. We combine strategy, design, and engineering, backed by unmatched expertise at the intersection of industry, business, and technology to generate real-world business impact for clients. Headquartered in Massachusetts with global delivery centers, Virtusa provides a broad range of services, solutions, and assets, including strategy and design, AI advisory and services, digital engineering, data and analytics, digital assurance, cloud and security, cx transformation and managed services across industries such as financial services, healthcare, communications, media, entertainment, travel, manufacturing, and technology.

Amazon Web Services (AWS)

cb amazon.com

Launched in 2006, Amazon Web Services (AWS) began exposing key infrastructure services to businesses in the form of web services -- now widely known as cloud computing. The ultimate benefit of cloud computing, and AWS, is the ability to leverage a new business model and turn capital infrastructure expenses into variable costs. Businesses no longer need to plan and procure servers and other IT resources weeks or months in advance. Using AWS, businesses can take advantage of Amazon's expertise and economies of scale to access resources when their business needs them, delivering results faster and at a lower cost. Today, Amazon Web Services provides a highly reliable, scalable, low-cost infrastructure platform in the cloud that powers hundreds of thousands of businesses in 190 countries around the world. With data center locations in the U.S., Europe, Singapore, and Japan, customers across all industries are taking advantage of our low cost, elastic, open and flexible, secure platform.

CACI International Inc

cb caci.com

At CACI International Inc (NYSE: CACI), our 25,000 talented and dynamic employees are ever vigilant in delivering distinctive expertise and technology to meet our customers’ greatest challenges in national security. We are a company of good character, relentless innovation, and long-standing excellence. Our culture drives our success and earns us recognition as a Fortune World's Most Admired Company. CACI is a member of the Fortune 500™ Largest Companies, the Russell 1000 Index, and the S&P MidCap 400 Index. For more information, visit us at www.caci.com. CACI is an Equal Opportunity Employer - Females/Minorities/Protected Veterans/Individuals with Disabilities

NCS Group

ncs.co

NCS, a subsidiary of Singtel Group, is a leading technology services firm with presence in Asia Pacific and partners with governments and enterprises to advance communities through technology. Combining the experience and expertise of its 14,000-strong team across 56 specialisations, NCS provides differentiated and end-to-end technology services to clients with its NEXT capabilities in digital, data, cloud and platforms, as well as core offerings in application, infrastructure, engineering and cybersecurity. NCS also believes in building a strong partner ecosystem with leading technology players, research institutions and start-ups to support open innovation and co-creation. For more information, visit ncs.co.

Verizon

verizon.com

We get you. You want more out of a career. A place to share your ideas freely — even if they’re daring or different. Where the true you can learn, grow, and thrive. You’ll find all that here. Because we empower you. We power and empower how people live, work and play by connecting them to what brings them joy. The same is true inside our walls. We do what we love — driving innovation, creativity, and impact in the world. And wherever you go, we got your back. This is a team sport. Our V Team is a community of people who anticipate, lead, and believe that listening is where learning begins. In crisis and in celebration, we come together— lifting our communities and building trust in how we show up, everywhere & always. Want in? Join the V Team Life.

Tech Mahindra

techmahindra.com

Tech Mahindra offers technology consulting and digital solutions to global enterprises across industries, enabling transformative scale at unparalleled speed. With 149k+ professionals across 90+ countries helping 1100+ clients, TechM provides a full spectrum of services including consulting, information technology, enterprise applications, business process services, engineering services, network services, customer experience & design services, AI & analytics, and cloud & infrastructure services. It is the first Indian company in the world to have been awarded the Sustainable Markets Initiative’s Terra Carta Seal, in recognition of actively leading the charge to create a climate and nature-positive future. Tech Mahindra (NSE: TECHM) is part of the Mahindra Group, founded in 1945, one of the largest and most admired multinational federations of companies. Visit www.techmahindra.com to #ScaleAtSpeed

Capgemini

capgemini.com

Capgemini is an AI-powered global business and technology transformation partner, delivering tangible business value. We imagine the future of organizations and make it real with AI, technology and people. With our strong heritage of nearly 60 years, we are a responsible and diverse group of 420,000 team members in more than 50 countries. We deliver end-to-end services and solutions with our deep industry expertise and strong partner ecosystem, leveraging our capabilities across strategy, technology, design, engineering and business operations. The Group reported 2025 global revenues of €22.5 billion. Make it real | www.capgemini.com

Infinite Computer Solutions

infinite.com

Infinite is a global leader in technology modernization, next-gen IT services and solutions, and digital engineering, with over two decades of experience helping clients turn digital transformation into business value. Leveraging an AI-first approach, we combine leading technologies, innovative platforms and accelerators with practical know-how. With the scale of over 23,000 talented professionals across 20+ global locations, we proudly serve hundreds of clients, across all industries including healthcare, financial services, telecom, technology, media, and more. At Infinite, we go beyond technology. We collaborate deeply with our clients to deliver innovative, tailored and client-focused solutions. Infinite is proud to be recognized by ISG, Avasant, Everest Group, HFS, Fosway Group and others for the innovation and leadership we bring to our clients.

Orange Business

orange-business.com

At Orange Business, our ambition is to become the leading european Network and Digital Integrator by leveraging our proven expertise in next-generation connectivity solutions, the cloud and cybersecurity. Our 30,000 women and men are present in 65 countries, where every voice counts. Together, we are driven by the same determination and the same team spirit, to build the digital solutions of today and tomorrow and create a positive impact for our customers, for their employees and for the planet. We offer exciting opportunities through innovative projects in data and digital, cloud, AI, cybersecurity, IoT, or digital workspace and big data. Join us and be part of this adventure!

Loading…

NEWS

Cisco Enterprise Networking CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 16, 2026 12:07 PM

Cisco Systems stock near 80-dollar mark as analyst upgrades boost sentiment

Cisco Systems, Inc. stock (ISIN: US17275R1023) trades at $78.33 with fresh analyst upgrades and a mixed technical setup.

Read Article

March 12, 2026 09:46 PM

Chuck Robbins: Cybersecurity Statesman, Cisco Chairman and CEO, and Global Leader in Digital Trust and Secure Connectivity

Charles H. Robbins, commonly known as Chuck Robbins, is one of the most influential and longest-serving CEOs in the global technology...

Read Article

March 12, 2026 02:46 AM

Saitech Deploys Multimillion Cisco Network Infrastructure for Santa Clara Valley Health Center | PRUnderground

Saitech Inc., a Cisco Select Partner, successfully deployed a $2.9 million Cisco network infrastructure for Santa Clara Valley Health Center...

Read Article

March 06, 2026 08:00 AM

It’s Pi Day—Fall in Love (with Savings)!

This Pi Day, shop and save 25% on popular Cisco learning products. 24 hours only.

Read Article

March 04, 2026 02:15 PM

TD Africa, Cisco and Arravo Host C-Level Event on Secure and Intelligent Networking

TD Africa, in collaboration with Cisco and Arravo Technology, hosted an exclusive Clevel customer engagement focused on helping enterprises...

Read Article

March 02, 2026 08:00 AM

Cybersecurity Market Size, Share, Analysis | Global Report 2034

The global cybersecurity market size is projected to grow from $248.28 billion in 2026 to $699.39 billion by 2034, at a CAGR of 13.8% during...

Read Article

February 10, 2026 02:48 PM

Why Traditional Security Fails in the Age of Non-Deterministic AI

Anand Oswal is the Executive Vice President of Network Security at cybersecurity leader Palo Alto Networks. His team of product managers, engineers and...

Read Article

January 07, 2026 08:00 AM

10 Best Network Security Solutions For Enterprise - 2026

Best Network Security Solutions For Enterprise: 1. Fortinet 2. Cisco Secure Firewall 3. Palo Alto Networks.

Read Article

January 05, 2026 08:00 AM

10 Best Network Security Solutions For Chief Security Officer To Consider – 2026

Best Network Security Solutions for CSO :1. Cisco SecureX 2. Palo Alto Networks Prisma Access 3. Fortinet FortiGate NGFW.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66720

SUMMARY

The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE (EtherType 0x88B8) Layer-2 multicast messages. A specially crafted GOOSE frame containing an undersized timestamp field can trigger a heap out-of-bounds read during message processing, causing the process to crash and resulting in a denial-of-service condition.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-66421

SUMMARY

OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript in the administrator's browser session by injecting HTML markup into agent transcript messages processed through the sessions API. Attackers can craft a message containing inline event handler payloads such as an img tag with an onerror attribute within the 60-character rendering budget, which is stored in the session transcript and interpolated unsanitized into innerHTML on the default landing page, allowing theft of session tokens and unauthorized calls to authenticated administrative endpoints including agent instruction file modification.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 9.3)

cvss3

Base Score: 9.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

cvss4

Base Score: 8.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.8

Exploitability

2.8

REFERENCES

CVE-2026-66420

SUMMARY

MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the CheckWebServerOriginName() function within webserver.js when self-signed certificates are in use. Attackers can open cross-origin WebSocket connections to any of the twelve WebSocket endpoints, send crafted action commands to exfiltrate the server sessionKey used to sign session cookies, forge session tokens as arbitrary users, and gain full remote control of all managed devices governed by the MeshCentral instance.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-66369

SUMMARY

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap out-of-bounds read. On affected platforms, this condition reliably terminates the subscriber process and causes a denial-of-service.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-66364

SUMMARY

The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process bus. When processing specific payload fields, an attacker controlled inner element length may exceed its enclosing length, causing the parser to over read by one byte. This out-of-bounds read reliably terminates the subscriber process, resulting in a denial-of-service condition.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…