What is the official website of Comcast ?

The official website of Comcast is https://comca.st/3MRGoQ3.

What is Comcast's cybersecurity risk score?

Comcast has an AI-generated cybersecurity risk score of 113 out of 1000, indicating a Critical security posture according to Rankiteo's assessment.

How many security incidents has Comcast experienced?

According to Rankiteo, Comcast currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Comcast been affected by any supply chain cyber incidents ?

According to Rankiteo, Comcast has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Fortinet (Incident ID: MERCHESAMCOMFOXATTFORTOY1781713752) Citrix (Incident ID: COM152251223) Citrix (Incident ID: COM020090625) Citrix (Incident ID: COM1769288328)

Does Comcast have SOC 2 Type 1 certification ?

According to Rankiteo, Comcast is not certified under SOC 2 Type 1.

Does Comcast have SOC 2 Type 2 certification ?

According to Rankiteo, Comcast does not hold a SOC 2 Type 2 certification.

Does Comcast comply with GDPR ?

According to Rankiteo, Comcast is not listed as GDPR compliant.

Does Comcast have PCI DSS certification ?

According to Rankiteo, Comcast does not currently maintain PCI DSS compliance.

Does Comcast comply with HIPAA ?

According to Rankiteo, Comcast is not compliant with HIPAA regulations.

Does Comcast have ISO 27001 certification ?

According to Rankiteo,Comcast is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Comcast operate in ?

Comcast operates primarily in the Telecommunications industry.

How many employees does Comcast have ?

Comcast employs approximately 61,635 people worldwide.

Does Comcast own any subsidiaries ?

Comcast presently has no subsidiaries across any sectors.

How many LinkedIn followers does Comcast have ?

Comcast's official LinkedIn profile has approximately 798,248 followers.

What is the NAICS classification code for Comcast ?

Comcast is classified under the NAICS code 517, which corresponds to Telecommunications.

Does Comcast have a Crunchbase profile ?

No, Comcast does not have a profile on Crunchbase.

Does Comcast have a LinkedIn profile ?

Yes, Comcast maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/comcast.

How many cybersecurity incidents has Comcast experienced ?

As of August 11, 2026, Rankiteo reports that Comcast has experienced 22 cybersecurity incidents.

How many peer or competitor companies does Comcast have ?

Comcast has an estimated 10,280 peer or competitor companies worldwide.

What types of cybersecurity incidents has Comcast faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Data Leak, Cyber Attack, Ransomware and Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Comcast

Boost Score +25 with badge (5 left)

113

/1000

Critical

138

/1000

Critical

Comcast Vendor Cyber Rating & Cyber Score

comca.st

Add Your Compliance Badge

Welcome to Comcast. From the connectivity and platforms we provide to the content and experiences we create, we bring people together, globally. Our people think the world of our work, and that’s why our work is the best in the world.

Comcast A.I CyberSecurity Scoring

Scoring History

Comcast

Comcast CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Comcast

Vulnerability

100

5/2026

Fortinet

MERCHESAMCOMFOX...

Comcast

Breach

3/2026

COM1774477423

Comcast

Ransomware

100

2/2026

NASCOM177197972...

Comcast

Breach

11/2025

COM192081911252...

Comcast

Cyber Attack

100

6/2025

COM1772598459

Comcast

Breach

8/2024

COM483534811252...

Comcast

Ransomware

100

7/2024

COM1764611939

Comcast

Breach

6/2024

COM451025451126...

Comcast

Breach

2/2024

COM483204811272...

Comcast

Breach

1/2024

COM1764424503

Comcast

Breach

12/2023

Citrix

COM152251223

Comcast

Breach

10/2023

COM1785580087

Comcast

Vulnerability

10/2023

Citrix

COM020090625

Comcast

Ransomware

100

6/2023

COM593555910232...

Comcast

Breach

1/2023

Citrix

COM1769288328

Comcast

Breach

6/2022

COM083550811252...

Comcast

Ransomware

100

6/2020

COM000101324

Comcast

Data Leak

08/2018

COM22281122

Comcast

Data Leak

05/2018

COM12229722

Comcast

Breach

100

11/2015

COM1740261023

Comcast

Breach

9/2015

COM13519422

Comcast

Ransomware

100

6/2015

COM180201809292...

Loading…

A.I.

Comcast Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Comcast

Incidents vs Telecommunications Industry Avg (This Year)

Comcast has 61.29% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Comcast has 191.26% more incidents than the average of all companies with at least one recorded incident.

Incident Types Comcast vs Telecommunications Industry Avg (This Year)

Comcast reported 3 incidents this year: 0 cyber attacks, 1 ransomware, 1 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.

Incident History - Comcast (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Comcast Subsidiaries

Comcast

Telecommunications

Website: https://comca.st/3MRGoQ3

Company Size: 10,001+ employees

FreeWheelAdvertising Services

AudienceXpressAdvertising Services

EffectvAdvertising Services

Comcast SpectacorSpectator Sports

Comcast NBCUniversal LIFT LabsTelecommunications

Comcast SportsTechSpectator Sports

Comcast PolicyTechnology, Information and Media

MachineQ, a Comcast CompanyIT Services and IT Consulting

Loading…

Comcast Similar Companies

ZTE Corporation

zte.com.cn

ZTE connects the world with continuous innovation for a better future. The company provides innovative technologies and integrated solutions, and its portfolio spans communication networks, computing infrastructure, industry digital solutions, and personal and home smart terminals. Serving one third of the world's population, ZTE is dedicated to leading globally in connectivity and intelligent computing, enabling communication and trust everywhere. ZTE is listed on both the Hong Kong and Shenzhen Stock Exchanges. For enquiry about our mobile devices, please contact us via [email protected] For network services, please contact our 24/7 support hotline: 0086-755-26771900 or email: [email protected] https://twitter.com/ZTEPress https://www.facebook.com/ZTECorp https://youtube.com/@ZTECorporation

Telmex

telmex.com

TELMEX, la empresa líder de telecomunicaciones y servicios TI en México, ha realizado importantes inversiones para desarrollar la plataforma tecnológica más robusta y vanguardista del país, que le permite ofrecer la más amplia gama de soluciones, con los mayores estándares de calidad, seguridad, confiabilidad y competitividad; por ello, es el mejor socio estratégico en servicios avanzados de telecomunicaciones y TI. Las Soluciones TI de TELMEX van desde la Conectividad hasta Servicios de Nube, Centros de Datos, Ciberseguridad, Colaboración y Soluciones de Negocio. Un portafolio enfocado a cubrir las necesidades y proporcionar atención en infraestructura y procesos, lo que permite a los clientes aprovechar al máximo su inversión en tecnología, mientras evolucionan hacia nuevos sistemas y plataformas como servicio. TELMEX permite desarrollar e implementar proyectos en empresas de cualquier tamaño y en cualquier vertical de industria, ofreciendo soluciones integrales, innovadoras y de clase mundial, a través de tecnología de punta; brindando conectividad soportada por la mayor cobertura nacional e internacional y anchos de banda que garantizan la continuidad de las operaciones de sus clientes.

Vivo (Telefônica Brasil)

vivo.com.br

Vivo (Telefônica Brasil) is part of the Telefónica Group and with more than 94 million customers, of which 75 million mobile and 19 million fixed, we are the largest telecommunications company in Brazil, with nationwide presence and a complete, convergent portfolio of products, combining fixed, mobile and digital services. Our purpose is “Digitalize to Bring Closer”, helping to build a digital nation and transforming the life of our customers. More and more, we connect people and things with Fiber, 4G and 4.5G and cover more cities with the network quality that only Vivo has. Today, we cover around 90% of the population with 4G and are accelerating the launch of cities with 4.5G, using carrier aggregation technology. In the fixed operation, we ended 2019 with 21 million homes-passed (HPs) with fiber optic technology, of which 11 million HPs with FTTH (fiber to the home). In addition, all cities with FTTH technology also offer TV over fiber (IPTV), aiming to offer the best speed and experience to our consumers. At Vivo, we also do more than just telecommunications. Within the Group, we have the Telefônica Vivo Foundation, that is committed to making education a priority, developing projects that are based on human potential and use technology as an instrument in favor of inclusion and digital culture.

Ericsson

ericsson.com

The future of mobile isn’t on the horizon, it’s happening now. At Ericsson, we’re building the foundation for an open network ecosystem where industries, developers, and enterprises thrive. The convergence of 5G, AI, cloud, and network APIs isn’t just a technological shift; it’s a transformation that is redefining industries and enhancing everyday life. Open, programmable networks are enabling real-time innovation and unlocking new business models across the globe. Imagine a world where developers can dynamically access network capabilities on demand, where enterprises don’t just use connectivity but shape it. This isn’t a distant vision, it’s the ecosystem we’re creating today. Collaboration fuels everything we do. By working across industries, we’re designing a future where connectivity isn’t just seamless. It’s intelligent, programmable, and transformative. The shift is happening. Are you part of it?

Jazz

jazz.com.pk

Pakistan’s number one digital operator and the largest internet and broadband service provider with over 70 million subscribers nationwide. With a legacy of more than 27 years, Jazz maintains market leadership through cutting-edge, integrated technology, the strongest brands and the largest portfolio of value added services in the industry. Housing a nation-wide network of contact centers and an unparalleled fibre optic backbone of more than 25,000 kilometers, Jazz has already invested billions of dollars in the country to date. It also provides uninterrupted countrywide connectivity, unmatched customer services and international roaming in over 150 countries. As a responsible entity, the company passionately supports education, health and environmental initiatives and promotes sustainable business practices. Jazz offers exclusive & personalized tariff plans that empower customers and cater to the communication needs of a diverse group of people, from individuals to businessmen to corporate and multinationals. Through its innovative services and products, Jazz is set to bring about a digital revolution that will enable and transform societies towards a more progressive Pakistan.

e& Egypt

eand.com.eg

Building on 17 years of technology excellence in the Egyptian market, and in our relentless quest to bring you more and better services, etisalat by e& in Egypt has now evolved into the digital telco of the future. Covering and serving 99% of the inhabited areas in Egypt, our mission as etisalat by e& in Egypt is to continuously grow and transform to empower our customers by enhancing their digital experience and ensuring operation agility. etisalat by e& in Egypt offers digital experiences that cater to your ever-changing lifestyle and ever-expanding demands – covering not only telecom, but a wide collection of services that suit your various needs. We will continue to be your trusted companion and consultant, enabling connectivity and everything beyond, accelerating the digital world and pioneering future-forward spaces. Together, as we embark on this new era of etisalat by e& in Egypt, we make possible countless connections across continents and create the limitless possibilities of tomorrow, today. etisalat by e& in Egypt #MakePossible بعد ١٥ سنة من تفوقنا التكنولوجي في مصر، ولإننا حابين نقدم خدمات كتيرة عالية الجودة لكل عملائنا، جه الوقت إللي نطور في “اتصالات من &e في مصر” وندخل المستقبل الرقمي من أوسع الأبواب! شبكتنا النهاردة بتغطي ۹۹% من مناطق مصر، وبنطور يوم ورا يوم عشان نوصل رسالتنا بالنمو والتحول والتفوق، كل دا عشان نوفر لعملائنا أفضل تجربة رقمية، ونسرع العملية التشغيلية. النهاردة في “اتصالات من &e في مصر” إحنا جاهزين نقدملكم خدمات رقمية جديدة تسهلكو حياتكم اليومية، ومع خدمة المكالمات التقليدية، حنوفرلكم خدمات تانية كتير! لإننا بجد شريكم الموثوق، إللي بيخليكم على تواصل، وبياخدكم للمستقبل عبر تسريع الاقتصاد الرقمي والريادة. مع “اتصالات من &e في مصر” حنبدأ مع بعض عصر جديد، ونقربكم من بعض عبر القارات، ومع بعض حنكتشف إمكانيات بكرة اللامحدودة من النهاردة. “اتصالات من &e في مصر” ... معانا #makepossible

OPPO

oppo.com

Founded in 2004, OPPO is one of the world's leading innovators of smart devices. With operations in over 70 countries and regions, OPPO's more than 290,000 points of sales and 1,900 official service centers share the beauty of technology with users all over the world. To forward our vision of a better future, OPPO has established ten smart manufacturing facilities around the world, as well as a global design center in London. Every day, our 40,000 employees put their heart and soul into exploring the possibilities of humanistic technology. OPPO is not just a device maker. We are a technology company that combines hardware with software and services. Our software range, built around the ColorOS operating system, makes devices more user-friendly and intelligent for our 740 million users worldwide. The OPPO App Market, OPPO Cloud also deliver smarter, more convenient, and better-connected services. Moving forward, OPPO will remain committed to our mission of "Technology for Mankind, Kindness for the World." We will continue to pursue innovation in the smart themes of learning, productivity, entertainment, and healthcare to meet the needs of people around the world. Constantly seeking technological breakthroughs. Make your moment with OPPO.

Vodafone

vodafone.com

At Vodafone, we believe that connectivity is a force for good. If we use it for the things that really matter, it can improve people's lives and the world around us. Through our technology we empower people, connecting everyone regardless of who they are or where they live, we protect the planet and help our customers do the same. But we’re not just shaping the future of technology for our customers – we’re shaping the future for everyone who joins our team too. When you work with us, you’re part of a global mission to connect people, solve complex challenges, and create a sustainable, more inclusive world. If you want to grow your career whilst finding the perfect balance between work and life, Vodafone offers the opportunities and support to help you belong and make a real impact. #TogetherWeCan

EchoStar Corporation

cb echostar.com

EchoStar Corporation (Nasdaq: SATS) is a premier provider of technology, networking services, television entertainment and connectivity, offering consumer, enterprise, operator and government solutions worldwide under its EchoStar®, Boost Mobile®, Sling TV, DISH TV, Hughes®, HughesNet®, HughesON™ and JUPITER™ brands. Tune into the innovation, collaboration and culture that our team members bring to the office every day. We want you to be a part of our journey to build the next generation of technology that transforms the way the world communicates. Our team members are the key to our history of groundbreaking innovation and our continued progress. If you bring an inquisitive curiosity, a sense of pride in your work, an openness to adventure and a drive to win, we’ll provide the structure to take the next step in your career. This is more than just another job, this is your launchpad to achieve your potential and a community dedicated to your growth.

Loading…

NEWS

Comcast CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

July 16, 2026 06:56 PM

Cybersecurity settlement resolves legal overhang. Will Comcast stock sustain growth?

Comcast stock gains 3.09% today to $24.22 after settling a $117.5M cybersecurity lawsuit, reducing legal risk and boosting sentiment.

Read Article

July 16, 2026 07:00 AM

Comcast Business Makes Cybersecurity Simple for Small Businesses

Enterprise-grade, AI-powered threat detection, embedded directly in the Comcast Business network, now available to small businesses...

Read Article

July 15, 2026 05:37 PM

Comcast Xfinity Settlement: How to File Claim in $117M Lawsuit

Millions of current and former Xfinity customers could be eligible for cash payments and other benefits under a $117.5 million class-action...

Read Article

July 14, 2026 10:29 PM

Comcast Threat Research Lab Featured in The Wall Street Journal for Residential Proxy Research

Comcast is committed to helping make the internet safer by identifying emerging cyber threats before they can cause broader harm.

Read Article

July 14, 2026 05:30 PM

Comcast Xfinity Settlement: Claim Up to $10,000 by Sept. 14

The Comcast Xfinity data breach settlement is real money on the table for a huge share of Lower Bucks households, and the window to claim it...

Read Article

June 19, 2026 07:00 AM

Comcast (CMCSA) Launches SecurityEdge Preferred AI Cybersecurity for Small Businesses

By embedding AI-powered threat detection directly into the network infrastructure, the service blocks malware, phishing, and ransomware at the...

Read Article

June 17, 2026 07:00 AM

Exclusive | How Hackers Found a Back Door Into the American Living Room

Nation-state cyberattackers are increasingly using residential proxy networks to mask their traffic, turning everyday electronics into a...

Read Article

June 15, 2026 07:00 AM

Internet Delivered To Your Doorstep Within Hours: Xfinity Launches Same-Day WiFi In Washington, D.C.

Comcast's Xfinity announced the rollout of same-day WiFi equipment (Gateway) delivery for new Xfinity Internet customers in Washington,...

Read Article

June 14, 2026 07:00 AM

Comcast offering payouts in $117.5M settlement. Are you eligible?

Comcast has agreed to pay $117.5 million to settle a class-action lawsuit stemming from a cybersecurity breach that exposed the personal...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-8718

SUMMARY

tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval directly to mbedtls_ssl_get_peer_cid() without verifying the buffer was at least MBEDTLS_SSL_CID_OUT_LEN_MAX (default 32) bytes. mbedtls_ssl_get_peer_cid() copies the peer-negotiated DTLS Connection ID (length 1..MBEDTLS_SSL_CID_OUT_LEN_MAX) into that buffer without a destination-size parameter, so a caller-supplied optlen smaller than the CID causes a write of up to 31 bytes past the buffer end. In CONFIG_USERSPACE builds the getsockopt syscall verifier (z_vrfy_zsock_getsockopt) bounce-buffers the user's optval into a kernel allocation of exactly optlen bytes (k_usermode_alloc_from_copy -> z_thread_malloc), so an unprivileged user thread that passes a small optlen on a connected DTLS socket with Connection ID enabled induces a kernel-heap buffer overflow, with the overflowing content being the remote peer's CID. The defect requires CONFIG_MBEDTLS_SSL_DTLS_CONNECTION_ID, an established DTLS session with a negotiated peer CID, and (for the kernel-crossing case) CONFIG_USERSPACE. Introduced when the TLS_DTLS_CID option was added (v3.5.0). The fix rejects callers whose optlen is below MBEDTLS_SSL_CID_OUT_LEN_MAX with -EINVAL.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 8.4)

cvss3

Base Score: 8.4

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Impact Score

5.8

Exploitability

REFERENCES

CVE-2026-48161

SUMMARY

react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits 7b79148d1495a2505f9277da295a98cf176f4496 through 7b79148d1495a2505f9277da295a98cf176f4496 that executed remote attacker-controlled code on developer machines during `npm install`. The commits were removed by force-push, but local clones, forks, and direct-SHA URLs may still contain them, and `npm install` against an affected checkout will still execute the code today. The package was not published to npm. `src/install.js` was added and wired into the `postinstall` script. It fetched a JavaScript payload from an attacker-controlled HTTPS endpoint (configurable via an environment variable), disabled TLS verification, and evaluated the response as code with `require` available. Execution was deliberately skipped on CI and cloud/serverless environments, targeting developer workstations. The second-stage payload was attacker-hosted and cannot be reconstructed. Assume full compromise of anything reachable from a Node process with the user's permissions. Those who ran `npm install` against an affected checkout on a developer machine on or after 2026-05-19 01:07:01 should treat the machine as compromised, rotate every credential the machine could reach, audit account activity since 2026-05-19 01:07:01, and clean local clones.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: )

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/dai-shi/react18-use/security/advisories/GHSA-32xh-vg5f-64fm

CVE-2026-11812

SUMMARY

The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds[1]. Access to ctx was not serialized, and prepare_fds() wrote ctx.fds[ctx.nfds] and incremented ctx.nfds with no bounds check. Two independent paths mutate ctx concurrently: the background autohandler running on the system workqueue, and user-triggered operations reached through the updatehub run shell command, direct API calls, or — since the operations are exposed as syscalls — userspace threads. When a second flow enters prepare_fds() while ctx.nfds is already 1, the write lands one element past the array; by struct layout it overlaps the adjacent ctx.sock/ctx.nfds members. More broadly, the unsynchronized sharing lets two flows interleave connection setup and teardown, double-closing a socket descriptor or scribbling the shared buffers. The result is corruption of the update subsystem's internal state and denial of service of the firmware-update path; the out-of-bounds write is contained within the ctx structure and there is no demonstrated path to memory outside it or to code execution. Triggering requires a local actor able to invoke update operations (or, with CONFIG_USERSPACE, an unprivileged userspace thread) and to win a timing race against the background handler; remote peers cannot control the race timing. The fix serializes the entry points with a mutex and adds a bounds check to prepare_fds().

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 2.5)

cvss3

Base Score: 2.5

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

REFERENCES

CVE-2026-11811

SUMMARY

The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The shared error: cleanup gated socket closing on a ret > 0 flag, but ret was set to -1 immediately after the socket was created, so when zsock_setsockopt() (DTLS) or zsock_connect() subsequently failed the gate was false and cleanup_connection() was never called. The open descriptor in the global ctx.sock was then overwritten by the next attempt, permanently leaking it from the socket / net_context pool until reboot. The failing setup path is reached every time the OTA client tries to contact the UpdateHub server and the connection cannot be established — driven automatically by the periodic autohandler() poll (and on demand via the updatehub_probe()/updatehub_update() API or the updatehub run shell command). The DTLS handshake/connect outcome is influenceable by a network or on-path attacker who drops, resets, or otherwise disrupts traffic to the server, and also fails naturally whenever the server is unreachable. Each failed attempt permanently leaks one descriptor; once the shared socket pool is exhausted, networking degrades device-wide until the device is rebooted, a denial-of-service condition. Severity is low because the leak rate is bounded by the configured OTA poll interval (default once per 24 hours), the effect is gradual and recovered by reboot, and only builds with the UpdateHub client enabled are affected. There is no memory-corruption, information-disclosure, or authentication impact.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2025-30241

SUMMARY

Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: )

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://www.tp-link.com/us/support/faq/5239/

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…