What is Canada Revenue Agency - Agence du revenu du Canada's cybersecurity risk score?

Canada Revenue Agency - Agence du revenu du Canada has an AI-generated cybersecurity risk score of 788 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Canada Revenue Agency - Agence du revenu du Canada experienced?

According to Rankiteo, Canada Revenue Agency - Agence du revenu du Canada currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Canada Revenue Agency - Agence du revenu du Canada been affected by any supply chain cyber incidents ?

According to Rankiteo, Canada Revenue Agency - Agence du revenu du Canada has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Canada Revenue Agency - Agence du revenu du Canada have SOC 2 Type 1 certification ?

According to Rankiteo, Canada Revenue Agency - Agence du revenu du Canada is not certified under SOC 2 Type 1.

Does Canada Revenue Agency - Agence du revenu du Canada have SOC 2 Type 2 certification ?

According to Rankiteo, Canada Revenue Agency - Agence du revenu du Canada does not hold a SOC 2 Type 2 certification.

Does Canada Revenue Agency - Agence du revenu du Canada comply with GDPR ?

According to Rankiteo, Canada Revenue Agency - Agence du revenu du Canada is not listed as GDPR compliant.

Does Canada Revenue Agency - Agence du revenu du Canada have PCI DSS certification ?

According to Rankiteo, Canada Revenue Agency - Agence du revenu du Canada does not currently maintain PCI DSS compliance.

Does Canada Revenue Agency - Agence du revenu du Canada comply with HIPAA ?

According to Rankiteo, Canada Revenue Agency - Agence du revenu du Canada is not compliant with HIPAA regulations.

Does Canada Revenue Agency - Agence du revenu du Canada have ISO 27001 certification ?

According to Rankiteo,Canada Revenue Agency - Agence du revenu du Canada is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Canada Revenue Agency - Agence du revenu du Canada operate in ?

Canada Revenue Agency - Agence du revenu du Canada operates primarily in the Government Administration industry.

How many employees does Canada Revenue Agency - Agence du revenu du Canada have ?

Canada Revenue Agency - Agence du revenu du Canada employs approximately 16,976 people worldwide.

Does Canada Revenue Agency - Agence du revenu du Canada own any subsidiaries ?

Canada Revenue Agency - Agence du revenu du Canada presently has no subsidiaries across any sectors.

How many LinkedIn followers does Canada Revenue Agency - Agence du revenu du Canada have ?

Canada Revenue Agency - Agence du revenu du Canada's official LinkedIn profile has approximately 655,065 followers.

What is the NAICS classification code for Canada Revenue Agency - Agence du revenu du Canada ?

Canada Revenue Agency - Agence du revenu du Canada is classified under the NAICS code 92, which corresponds to Public Administration.

Does Canada Revenue Agency - Agence du revenu du Canada have a Crunchbase profile ?

No, Canada Revenue Agency - Agence du revenu du Canada does not have a profile on Crunchbase.

Does Canada Revenue Agency - Agence du revenu du Canada have a LinkedIn profile ?

Yes, Canada Revenue Agency - Agence du revenu du Canada maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/cra-arc.

How many peer or competitor companies does Canada Revenue Agency - Agence du revenu du Canada have ?

Canada Revenue Agency - Agence du revenu du Canada has an estimated 13,188 peer or competitor companies worldwide.

What types of cybersecurity incidents has Canada Revenue Agency - Agence du revenu du Canada faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Cyber Attack and Data Leak.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CRAADRDC

Boost Score +25 with badge (5 left)

788

/1000

Fair

813

/1000

Good

Canada Revenue Agency - Agence du revenu du Canada Vendor Cyber Rating & Cyber Score

canada.ca

Add Your Compliance Badge

Welcome to the Canada Revenue Agency’s (CRA) official LinkedIn page! 🇨🇦 We take pride in our diverse workforce, which brings a wide range of skills and perspectives to the Canada Revenue Agency, and remain committed to fostering an inclusive workplace where everyone can thrive. We’re on a mission to better serve Canadians, with the goal to be trusted, fair, and helpful by putting people first. Our dedication has earned us recognition as one of Canada's Top Employers for Young People, Canada’s Best Diversity Employers and National Capital Region’s Top Employer. Follow us for more on job opportunities, important information about benefits, credits, and all things taxes. Terms and Conditions: http://ow.ly/XpI030iPAP9 Bienvenue sur la

CRAADRDC A.I CyberSecurity Scoring

Scoring History

CRAADRDC

Canada Revenue Agency - Agence du revenu du Canada CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Canada Revenue Agen...

Breach

10/2025

TRA270222710182...

Canada Revenue Agen...

Breach

5/2025

OFF100251009182...

Canada Revenue Agen...

Breach

10/2022

CAN206221122

Government of Canad...

Cyber Attack

3/2020

GOV1766174849

Treasury Board of C...

Breach

100

3/2020

TBS1786048347

Canada Revenue Agen...

Data Leak

08/2018

GOV12181122

Canada Revenue Agen...

Breach

06/2018

CAN17246822

Canada Revenue Agen...

Cyber Attack

100

06/2015

GOV192330422

Loading…

A.I.

CRAADRDC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CRAADRDC

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for Canada Revenue Agency - Agence du revenu du Canada in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Canada Revenue Agency - Agence du revenu du Canada in 2026.

Incident Types CRAADRDC vs Government Administration Industry Avg (This Year)

No incidents recorded for Canada Revenue Agency - Agence du revenu du Canada in 2026.

Incident History - CRAADRDC (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Canada Revenue Agency - Agence du revenu du Canada Subsidiaries

CRAADRDC

Government Administration

Website: http://canada.ca/taxes

Company Size: 10,000+ employees

Government of CanadaGovernment Administration

Health Canada | Santé CanadaGovernment Administration

Service CanadaGovernment Administration

Statistics Canada | Statistique CanadaGovernment Administration

Canada Border Services Agency | Agence des services frontaliers du CanadaGovernment Administration

Public Health Agency of Canada | Agence de la santé publique du CanadaGovernment Administration

Public Services and Procurement Canada | Services publics et Approvisionnement CanadaGovernment Administration

PSPC Jobs | Emplois SPACGovernment Administration

Real Property Services / Services immobiliersGovernment Administration

Marine Procurement | Approvisionnement MaritimeShipbuilding

Translation Bureau | Bureau de la traductionGovernment Administration

Environment and Climate Change CanadaGovernment Administration

National Research Council Canada / Conseil national de recherches CanadaResearch Services

Finance Canada / Finances CanadaGovernment Administration

Innovation, Science and Economic Development Canada | Innovation, Sciences et Développement économique CanadaGovernment Administration

Innovative Solutions CanadaGovernment Relations Services

Canada Digital Adoption Program | Programme canadien d'adoption du numériqueGovernment Relations Services

Canadian Armed Forces | Forces armées canadiennesArmed Forces

Transport Canada - Transports CanadaGovernment Administration

Department of Justice Canada | Ministère de la Justice du CanadaGovernment Administration

Canadian Food Inspection AgencyGovernment Administration

Immigration and Refugee Board of Canada | Commission de l'immigration et du statut de réfugiéGovernment Administration

Canada Mortgage and Housing Corporation (CMHC) Société canadienne d'hypothèques et de logement(SCHL)Government Administration

Treasury Board of Canada Secretariat | Secrétariat du Conseil du Trésor du CanadaGovernment Administration

Public Safety Canada | Sécurité publique CanadaPublic Safety

Canadian Institutes of Health Research | Instituts de recherche en santé du CanadaGovernment Administration

Trade Commissioner Service | Service des délégués commerciauxInternational Trade and Development

Emploi et Développement social Canada (EDSC) / Employment and Social Development Canada (ESDC)Government Administration

Labour ProgramGovernment Administration

Programme du travailGovernment Administration

Canada 2030 AgendaGovernment Administration

Programme 2030 CanadaGovernment Administration

Natural Sciences and Engineering Research Council of Canada (NSERC)Government Administration

Federal Economic Development Agency for Southern Ontario | Agence fédérale de ...Government Administration

Office of the Privacy Commissioner of Canada/Commissariat à la protection de la vie privée du CanadaGovernment Administration

Canadian Centre for Occupational Health and SafetyGovernment Administration

Shared Services Canada | Services partagés CanadaGovernment Administration

WAGE / FEGCGovernment Administration

Veterans Affairs Canada / Anciens Combattants CanadaGovernment Administration

Canada School of Public Service | École de la fonction publique du CanadaGovernment Administration

Doing Business with the Government of Canada | Faire affaire avec le gouvernement du CanadaGovernment Administration

Canadian Armed Forces | Forces armées canadiennesArmed Forces

SSHRC-CRSHGovernment Administration

Prairies Economic Development Canada I Développement économique Canada pour les PrairiesGovernment Administration

Communications Security Establishment Canada | Centre de la sécurité des télécommunications CanadaGovernment Administration

ACOA - APECAGovernment Administration

CRTCTelecommunications

Commission de la fonction publique du Canada | Public Service Commission of CanadaGovernment Administration

Canadian Intellectual Property Office / Office de la propriété intellectuelle du CanadaGovernment Administration

Competition Bureau CanadaLaw Enforcement

Public Prosecution Service of Canada | Service des poursuites pénales du CanadaGovernment Administration

Policy Horizons Canada - Horizons de politiques CanadaGovernment Administration

Canada Economic Development for Quebec RegionsGovernment Administration

Get Cyber SafeGovernment Administration

My Source | Ma sourceGovernment Administration

Bureau de la concurrence CanadaLaw Enforcement

Inside ECCC | Ici à ECCCGovernment Administration

Régie de l’énergie du CanadaGovernment Administration

Pensez cybersécuritéGovernment Administration

Centre canadien d'hygiène et de sécurité au travail (CCHST)Government Administration

Loading…

Canada Revenue Agency - Agence du revenu du Canada Similar Companies

Department of Health (Philippines)

doh.gov.ph

The Philippine Department of Health (abbreviated as DOH; Filipino: Kagawaran ng Kalusugan) is the executive department of the Philippine government responsible for ensuring access to basic public health services by all Filipinos through the provision of quality health care and the regulation of all health services and products. It is the government's over-all technical authority on health. It has its headquarters at the San Lazaro Compound, along Rizal Avenue in Manila. The department is led by the Secretary of Health, nominated by the President of the Philippines and confirmed by the Commission on Appointments. The Secretary is a member of the Cabinet. The current Secretary of Health is Francisco Duque.

South African Revenue Service (SARS)

sars.gov.za

Its main functions are to: collect and administer all national taxes, duties and levies; collect revenue that may be imposed under any other legislation, as agreed on between SARS and an organ of state or institution entitled to the revenue; provide protection against the illegal importation and exportation of goods; facilitate trade; and advise the Minister of Finance on all revenue matters

Correios

correios.com.br

Empresa Brasileira de Correios e Telégrafos foi criada como empresa em 1969 por decreto lei. Hoje conta com mais de 100.000 empregados, tem presença em todos os municípios do Brasil. NEGÓCIO: Soluções que aproximam. MISSÃO: Fornecer soluções acessíveis e confiáveis para conectar pessoas, instituições e negócios, no Brasil e no mundo. VISÃO: Ser uma empresa de classe mundial. VALORES: A. Ética B. Meritocracia C. Respeito às Pessoas D. Compromisso com o Cliente E. Sustentabilidade

City of Los Angeles

linkpages.pro

The City of Los Angeles employs more than 45,000 people in a wide range of careers. Visit our website for information on current openings, including regular civil service positions, exempt and emergency appointment opportunities, in addition to internships! The City of Los Angeles is a Mayor-Council-Commission form of government, as originally adopted by voters of the City of Los Angeles, effective July 1, 1925, and reaffirmed by a new Charter effective July 1, 2000. A Mayor, City Controller, and City Attorney are elected by City residents every four years. Fifteen City Council members representing fifteen districts are elected by the people for four-year terms, for a maximum of two terms. Members of Commissions are generally appointed by the Mayor, subject to the approval of the City Council. General Managers of the various City departments are also appointed by the Mayor, subject to confirmation by the City Council. Most employees of the City are subject to the civil service provisions of the City Charter.

State of Minnesota

mn.gov

Minnesota State Government is the third largest employer in the state of Minnesota, employing over 50,000 diverse and talented employees in more than 100 state agencies, boards, commissions, colleges, and universities. Our workplaces can be found across the state in 86 out of 87 Minnesota counties and a small share of employees work in out-of-state locations. When you bring your career to the State of Minnesota, the work you do affects the quality of life of millions of Minnesotans. From those who shape policy, to those who keep us safe, preserve our environment, or take care of our most vulnerable populations, we take our responsibilities to the public seriously. Join us as we continue to serve our great state and build a better Minnesota. To learn more about our career opportunities and comprehensive benefits, visit www.mn.gov/careers. To learn more about our state agencies, boards, commissions, colleges, and universities, visit http://mn.gov/portal/government/state/agencies-boards-commissions.

I WORK FOR SA

sa.gov.au

The OFFICIAL careers page for the South Australian Government. The South Australian Public Sector is the State's largest workforce. We are an employer of choice that reflects the diverse community we serve. Our people are from a range of backgrounds and vocations, from entry level, mid-career and leadership professionals as well as graduates, apprentices and trainees. As a public sector employee, you can be proud that the work you do supports our community and our State's prosperity. For a career with more opportunity, flexibility and purpose, visit IWORKFOR.SA.gov.au

State of Tennessee

tn.gov

State government is the largest employer in Tennessee, with approximately 43,500 employees in the three branches of government. The State of Tennessee has approximately 1,300 different job classifications in areas such as administrative, health services, historic preservation, legal, agriculture, counseling, and medical. If you are interested in becoming a data scientist, attorney, nurse, wildlife officer, physician, education consultant, trooper, computer programmer or an epidemiologist, explore all of the job opportunities the State of Tennessee has to offer. The State is looking to recruit, retain, and reward a talented workforce through the implementation of a merit-based pay system. Stop back often for news, updates and opportunities -- thanks for visiting!

Centers for Disease Control and Prevention

cdc.gov

CDC works 24/7 keeping America safe from health, safety and security threats, both foreign and domestic. Whether diseases start at home or abroad, are chronic or acute, curable or preventable, human error or deliberate attack, CDC fights it and supports communities and citizens to prevent it. CDC is the nation’s health protection agency - saving lives, protecting people from health threats, and saving money through prevention. For more information, please go to: http://www.cdc.gov/ Comment Policy: Please visit http://www.cdc.gov/SocialMedia/Tools/CommentPolicy.html to view CDC’s social media comment policy. Privacy Notice Regarding Third Party Websites: Privacy Notice: The Centers for Disease Control and Prevention uses third-party Web sites to share information and to encourage collaboration with the public. Third-party Web sites are not Government-owned or Government-operated. They are controlled and operated by a third party not affiliated with CDC. The CDC Privacy Policy does not apply to third-party Web sites or applications. To learn more about CDC’s privacy practices, please visit our Privacy Policy at https://www.cdc.gov/other/privacy.html.

City of Cape Town

capetown.gov.za

Cape Town, or the Mother City, is South Africa’s oldest city, its second-most populous and the legislative capital. It is made up of a diverse population, a rich history, world-famous tourist attractions and an exciting calendar of international and local events. More than 231 councillors and 26 225 staff serve 4 million residents across a sprawling and cosmopolitan metro of 2 500 square kilometres. The City provides all the services normally associated with a full-service municipality, such as water, electricity, waste removal, sanitation, new infrastructure, roads, public spaces, facilities, housing developments, the upgrade of informal settlements and existing infrastructure, clinics and more. To meet the current and future needs of its residents, the City of Cape Town has formulated strategies and policies to guide development and growth. Central to these is the Integrated Development Plan (IDP), which is a five-year plan that informs the City’s policy and budget decisions. The City’s strong sense of community makes it one of the best places to live, work and raise a family. We offer rewarding career opportunities, great benefits and competitive salaries. New opportunities are posted at www.capetown.gov.za/careers.

Loading…

NEWS

Canada Revenue Agency - Agence du revenu du Canada CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

July 03, 2025 07:00 AM

T5018 slip – Statement of contract payments

A T5018 slip identifies the total contract payments made to a recipient by a contractor in a calendar year or fiscal period.

Read Article

June 05, 2025 07:00 AM

Prioritizing privacy in a data-driven world

2024-2025 Annual Report to Parliament on the Privacy Act and the Personal Information Protection and Electronic Documents Act...

Read Article

May 23, 2025 07:00 AM

Canada Revenue Agency cutting up to 280 jobs, mainly in national capital region

The Canada Revenue Agency (CRA) is cutting up to 280 more employees this spring, the latest announcement of job cuts at the federal department over the past...

Read Article

October 28, 2024 07:00 AM

Tens of thousands of taxpayer accounts hacked as CRA repeatedly paid out millions in bogus refunds

At the height of this year's tax season, the Canada Revenue Agency discovered that hackers had obtained confidential data used by one of the...

Read Article

February 27, 2024 08:00 AM

Canada says cannabis wholesalers must garnish payments over unpaid taxes

Canada's tax collection agency is garnishing cash from licensed cannabis producers that are delinquent on their excise duty payments.

Read Article

March 01, 2023 08:00 AM

CRA Scams Looking More and More Like The Real Thing: Expert

Cybersecurity experts are warning the public about the latest iteration of Canada Revenue Agency-style scams w...

Read Article

February 16, 2023 08:00 AM

Sweet v Canada: Federal Court Of Canada certified privacy breach class action against CRA

In Sweet v Canada, the Federal Court of Canada certified a class action lawsuit over a CRA personal and financial data breach at the Canada...

Read Article

September 16, 2022 07:00 AM

The making of music: is a master recording tangible or intangible property?

This article is part one of a four-part series that explores the Unidisc decisions and goes into detail on the issues of music masters,...

Read Article

February 17, 2021 08:00 AM

CRA locks online accounts amid investigation, leaving users worried

The Canada Revenue Agency has locked more than 100000 taxpayers out of its online platform, telling users their email addresses have been...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19961

SUMMARY

A vulnerability was detected in Edimax EW-7478APC 1.04. Affected is the function formWlSiteSurvey of the file /goform/formWlSiteSurvey. Performing a manipulation of the argument selSSID results in buffer overflow. The attack is possible to be carried out remotely. The exploit is now public and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-08-16

Updated

Date2026-08-16

RISK INFORMATION (Score: 9.9)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 9.9

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

3.1

REFERENCES

CVE-2026-19960

SUMMARY

A security vulnerability has been detected in Edimax EW-7478APC 1.04. This impacts the function formWlbasic of the file /goform/formWlbasic. Such manipulation of the argument rootAPmac leads to command injection. The attack can be executed remotely. The exploit has been disclosed publicly and may be used. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-08-16

Updated

Date2026-08-16

RISK INFORMATION (Score: 7.4)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 7.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

3.1

REFERENCES

CVE-2026-19959

SUMMARY

A weakness has been identified in Edimax EW-7478APC 1.04. This affects the function formWanTcpipSetup of the file /goform/formWanTcpipSetup. This manipulation of the argument pppUserName causes stack-based buffer overflow. Remote exploitation of the attack is possible. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure but did not respond in any way.

Published

Date2026-08-16

Updated

Date2026-08-16

RISK INFORMATION (Score: 9.9)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 9.9

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

3.1

REFERENCES

CVE-2026-19958

SUMMARY

A security flaw has been discovered in iatsiuk pptr-mcp up to 0.2.7. The impacted element is the function executeCode of the file src/vm-executor.ts of the component execute Tool. The manipulation results in code injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-16

Updated

Date2026-08-16

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-19957

SUMMARY

A vulnerability was identified in graphlit graphlit-mcp-server 1.0.1. This affects the function fetch of the file src/tools.ts of the component ssrf-test Endpoint. Such manipulation of the argument url leads to server-side request forgery. The attack may be launched remotely. The exploit is publicly available and might be used. The project was informed of the problem early through an issue report but has not responded yet.

Published

Date2026-08-16

Updated

Date2026-08-16

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…