What is the official website of Canada Economic Development for Quebec Regions ?

The official website of Canada Economic Development for Quebec Regions is https://dec.canada.ca.

What is Canada Economic Development for Quebec Regions's cybersecurity risk score?

Canada Economic Development for Quebec Regions has an AI-generated cybersecurity risk score of 764 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Canada Economic Development for Quebec Regions experienced?

According to Rankiteo, Canada Economic Development for Quebec Regions currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Canada Economic Development for Quebec Regions been affected by any supply chain cyber incidents ?

According to Rankiteo, Canada Economic Development for Quebec Regions has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Canada Economic Development for Quebec Regions have SOC 2 Type 1 certification ?

According to Rankiteo, Canada Economic Development for Quebec Regions is not certified under SOC 2 Type 1.

Does Canada Economic Development for Quebec Regions have SOC 2 Type 2 certification ?

According to Rankiteo, Canada Economic Development for Quebec Regions does not hold a SOC 2 Type 2 certification.

Does Canada Economic Development for Quebec Regions comply with GDPR ?

According to Rankiteo, Canada Economic Development for Quebec Regions is not listed as GDPR compliant.

Does Canada Economic Development for Quebec Regions have PCI DSS certification ?

According to Rankiteo, Canada Economic Development for Quebec Regions does not currently maintain PCI DSS compliance.

Does Canada Economic Development for Quebec Regions comply with HIPAA ?

According to Rankiteo, Canada Economic Development for Quebec Regions is not compliant with HIPAA regulations.

Does Canada Economic Development for Quebec Regions have ISO 27001 certification ?

According to Rankiteo,Canada Economic Development for Quebec Regions is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Canada Economic Development for Quebec Regions operate in ?

Canada Economic Development for Quebec Regions operates primarily in the Government Administration industry.

How many employees does Canada Economic Development for Quebec Regions have ?

Canada Economic Development for Quebec Regions employs approximately 1,052 people worldwide.

Does Canada Economic Development for Quebec Regions own any subsidiaries ?

Canada Economic Development for Quebec Regions presently has no subsidiaries across any sectors.

How many LinkedIn followers does Canada Economic Development for Quebec Regions have ?

Canada Economic Development for Quebec Regions's official LinkedIn profile has approximately 12,977 followers.

What is the NAICS classification code for Canada Economic Development for Quebec Regions ?

Canada Economic Development for Quebec Regions is classified under the NAICS code 92, which corresponds to Public Administration.

Does Canada Economic Development for Quebec Regions have a Crunchbase profile ?

No, Canada Economic Development for Quebec Regions does not have a profile on Crunchbase.

Does Canada Economic Development for Quebec Regions have a LinkedIn profile ?

Yes, Canada Economic Development for Quebec Regions maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/dec-ced.

How many peer or competitor companies does Canada Economic Development for Quebec Regions have ?

Canada Economic Development for Quebec Regions has an estimated 13,188 peer or competitor companies worldwide.

What types of cybersecurity incidents has Canada Economic Development for Quebec Regions faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Cyber Attack and Data Leak.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

CEDQR

Boost Score +25 with badge (5 left)

764

/1000

Fair

789

/1000

Fair

Canada Economic Development for Quebec Regions Vendor Cyber Rating & Cyber Score

canada.ca

Add Your Compliance Badge

At the centre of the economic development of the regions of Quebec, Canada Economic Development for Quebec Regions provides assistance to enterprises, communities and the organizations that support them through its network of business offices located throughout the province. Follow us also on Twitter: www.twitter.com/CanEconDev Terms of use: www.dec-ced.gc.ca/eng/media-room/social-media/use-twitter.html

CEDQR A.I CyberSecurity Scoring

Scoring History

CEDQR

Canada Economic Development for Quebec Regions CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Canada Economic Dev...

Breach

10/2025

TRA270222710182...

Canada Economic Dev...

Breach

5/2025

OFF100251009182...

Canada Economic Dev...

Breach

10/2022

CAN206221122

Government of Canad...

Cyber Attack

3/2020

GOV1766174849

Treasury Board of C...

Breach

100

3/2020

TBS1786048347

Canada Economic Dev...

Data Leak

08/2018

GOV12181122

Canada Economic Dev...

Breach

06/2018

CAN17246822

Canada Economic Dev...

Cyber Attack

100

06/2015

GOV192330422

Loading…

A.I.

CEDQR Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for CEDQR

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for Canada Economic Development for Quebec Regions in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Canada Economic Development for Quebec Regions in 2026.

Incident Types CEDQR vs Government Administration Industry Avg (This Year)

No incidents recorded for Canada Economic Development for Quebec Regions in 2026.

Incident History - CEDQR (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Canada Economic Development for Quebec Regions Subsidiaries

CEDQR

Government Administration

Website: https://dec.canada.ca

Company Size: 1,052

Government of CanadaGovernment Administration

Canada Revenue Agency - Agence du revenu du CanadaGovernment Administration

Health Canada | Santé CanadaGovernment Administration

Service CanadaGovernment Administration

Canada Border Services Agency | Agence des services frontaliers du CanadaGovernment Administration

Statistics Canada | Statistique CanadaGovernment Administration

National Research Council Canada / Conseil national de recherches CanadaResearch Services

Public Services and Procurement Canada | Services publics et Approvisionnement CanadaGovernment Administration

PSPC Jobs | Emplois SPACGovernment Administration

Real Property Services / Services immobiliersGovernment Administration

Marine Procurement | Approvisionnement MaritimeShipbuilding

Translation Bureau | Bureau de la traductionGovernment Administration

Public Health Agency of Canada | Agence de la santé publique du CanadaGovernment Administration

Environment and Climate Change CanadaGovernment Administration

Finance Canada / Finances CanadaGovernment Administration

Canadian Armed Forces | Forces armées canadiennesArmed Forces

Innovation, Science and Economic Development Canada | Innovation, Sciences et Développement économique CanadaGovernment Administration

Innovative Solutions CanadaGovernment Relations Services

Canada Digital Adoption Program | Programme canadien d'adoption du numériqueGovernment Relations Services

Immigration and Refugee Board of Canada | Commission de l'immigration et du statut de réfugiéGovernment Administration

Transport Canada - Transports CanadaGovernment Administration

Canada Mortgage and Housing Corporation (CMHC) Société canadienne d'hypothèques et de logement(SCHL)Government Administration

Canadian Food Inspection AgencyGovernment Administration

Department of Justice Canada | Ministère de la Justice du CanadaGovernment Administration

Canadian Institutes of Health Research | Instituts de recherche en santé du CanadaGovernment Administration

Emploi et Développement social Canada (EDSC) / Employment and Social Development Canada (ESDC)Government Administration

Labour ProgramGovernment Administration

Programme du travailGovernment Administration

Canada 2030 AgendaGovernment Administration

Programme 2030 CanadaGovernment Administration

Treasury Board of Canada Secretariat | Secrétariat du Conseil du Trésor du CanadaGovernment Administration

Public Safety Canada | Sécurité publique CanadaPublic Safety

Natural Sciences and Engineering Research Council of Canada (NSERC)Government Administration

Federal Economic Development Agency for Southern Ontario | Agence fédérale de ...Government Administration

Trade Commissioner Service | Service des délégués commerciauxInternational Trade and Development

Office of the Privacy Commissioner of Canada/Commissariat à la protection de la vie privée du CanadaGovernment Administration

Canadian Centre for Occupational Health and SafetyGovernment Administration

Communications Security Establishment Canada | Centre de la sécurité des télécommunications CanadaGovernment Administration

Veterans Affairs Canada / Anciens Combattants CanadaGovernment Administration

Canada School of Public Service | École de la fonction publique du CanadaGovernment Administration

Shared Services Canada | Services partagés CanadaGovernment Administration

WAGE / FEGCGovernment Administration

Commission de la fonction publique du Canada | Public Service Commission of CanadaGovernment Administration

Prairies Economic Development Canada I Développement économique Canada pour les PrairiesGovernment Administration

Doing Business with the Government of Canada | Faire affaire avec le gouvernement du CanadaGovernment Administration

Canadian Armed Forces | Forces armées canadiennesArmed Forces

SSHRC-CRSHGovernment Administration

Canadian Intellectual Property Office / Office de la propriété intellectuelle du CanadaGovernment Administration

ACOA - APECAGovernment Administration

CRTCTelecommunications

Policy Horizons Canada - Horizons de politiques CanadaGovernment Administration

Competition Bureau CanadaLaw Enforcement

Public Prosecution Service of Canada | Service des poursuites pénales du CanadaGovernment Administration

My Source | Ma sourceGovernment Administration

Bureau de la concurrence CanadaLaw Enforcement

Pensez cybersécuritéGovernment Administration

Inside ECCC | Ici à ECCCGovernment Administration

Get Cyber SafeGovernment Administration

Régie de l’énergie du CanadaGovernment Administration

Centre canadien d'hygiène et de sécurité au travail (CCHST)Government Administration

Loading…

Canada Economic Development for Quebec Regions Similar Companies

National Institute of Statistics and Geography of Mexico (INEGI)

inegi.org.mx

The National Institute of Statistics and Geography of Mexico (INEGI) is an autonomous institution of the Federal Public Sector. INEGI is the coordinator of the National System of Statistical and Geographical Information of Mexico. The main objective of INEGI is to provide statistical and geographical information to the state and to the society of Mexico, in order to contribute to national development under the principles of accessibility, transparency, objectivity and independence.

State of Oregon

cb oregon.gov

Official LinkedIn page for the state of Oregon. Oregon is a state in the Pacific Northwest region of the United States. It is located on the Pacific coast, with Washington to the north, California to the south, Nevada on the southeast and Idaho to the east. The Columbia and Snake rivers delineate much of Oregon's northern and eastern boundaries, respectively. The area was inhabited by many indigenous tribes before the arrival of traders, explorers, and settlers who formed an autonomous government in Oregon Country in 1843. The Oregon Territory was created in 1848, and Oregon became the 33rd state on February 14, 1859.

City of Houston

cb houstontx.gov

Home to a respected and energetic cultural arts scene, celebrated restaurants featuring flavors from 35 countries, world-renowned theater groups and the brains behind U.S. space exploration, Houston is a diverse metropolis brimming with personality. With nearly 21,000 concerts, plays, exhibitions and other arts programs presented in Houston annually, residents and visitors have access to a wide variety of cultural programs. On any given night, it's a safe bet that there's a show somewhere in Houston's Theater District. More than 2 million people visit the Downtown area each year to attend one of the city's world-class performances. Within the Museum District you will find eighteen world-class institutions, including the Menil Collection, Museum of Fine Arts, Houston and the Houston Museum of Natural Science are clustered in this area, drawing a reported seven million visitors to the district each year. Houston’s restaurant scene is as ethnically diverse as its 4 million residents. ForbesTraveler.com ranked Houston as one of the best restaurant cities in America. The city is jam-packed with more than 8,000 tempting eateries that feature culinary flavors from more than 35 countries. With 56,405 acres of total park space, Houston rates first among the nation's 10 most populous cities in total acreage of park land. The 165 public and private golf courses around the city and teams in nearly every major professional sport keep sports fever high year-round. The city also employs over 22,000 full-time staff to keep the city running. We are always looking for everyone from Engineers to IT Professionals, from entry level to executive level. Check back here for current postings, follow us on Facebook at www.facebook.com/cohcareers or on Twitter @COHCareers for all the up to date recruitment happenings!

Commonwealth of Massachusetts

mass.gov

Year after year, the Commonwealth of Massachusetts has continued to pioneer bold legislative actions and programs, some of which have been embraced on a national scale. We are always looking for talented individuals to help us maintain this momentum and improve the services that millions of people depend on every day. If you’re looking for an innovative work environment where you can really make a difference, check out the job opportunities with the Commonwealth of Massachusetts. This page is managed according to the Mass.gov social media policy: https://www.mass.gov/info-details/massgov-social-media-policy. Comments that do not follow our policy may be removed.

Ontario Government | Gouvernement de l’Ontario

ontario.ca

Ontario Government | Gouvernement de l’Ontario The Ontario Government works to serve the public interest and uphold the public trust by providing Ministers with objective advice and expert guidance. The Ontario Public Service carries out the decisions and policies of the elected government with integrity and accountability and administers public services to the highest professional standards. Le gouvernement de l’Ontario sert l’intérêt public et conserve la confiance du public en fournissant aux ministres des conseils objectifs et spécialisés. La fonction publique de l’Ontario applique les décisions et les politiques du gouvernement élu. En respectant le principe de reddition des comptes et avec intégrité, elle administre les services à la population selon les normes professionnelles les plus rigoureuses.

Comunidad de Madrid

comunidad.madrid

Si necesitas información general y especializada sobre los servicios públicos madrileños puedes llamar al teléfono de Atención al Ciudadano 012. En la Comunidad de Madrid estamos encantados de recibir comentarios y favorecer el diálogo, por eso te proponemos unas normas básicas de participación: - Respeta a los demás usuarios y haz un uso adecuado de la red al publicar un comentario. Se eliminará cualquier mensaje difamatorio, ofensivo, amenazador, grosero o que esté penado por las leyes españolas. - Haz comentarios relacionados con lo publicado, sé lo más breve posible y evita las mayúsculas. Se borrarán aquellos comentarios que se consideren fuera de tema. - No están permitidos los mensajes que contengan spam o publicidad intrusiva. - La Comunidad de Madrid no se hace responsable del contenido de las opiniones que los participantes dejan en los comentarios, ni se identifica con ellas. ¡Esperamos tu participación! Síguenos también en www.twitter.com/ComunidadMadrid y www.facebook.com/ComunidadeMadrid.

Government of Alberta

alberta.ca

Work with the Alberta government to build a stronger province for current and future generations. We offer diverse and rewarding employment opportunities in an environment that encourages continuous learning and career growth. We are one of the largest employers in Alberta with over 27,000 employees throughout the province. We are an award winning organization that values respect, accountability, integrity, and excellence. Our employees share a common vision of proudly working together to build a stronger province and make a positive and lasting difference in the lives of Albertans. The people of Alberta enjoy a very high quality of life, including the lowest overall taxes in Canada. www.jobs.alberta.ca Please see our comment policy: https://www.alberta.ca/social-media-comment-policy.aspx

ISSSTE

www.com

INSTITUTO DE SEGURIDAD Y SERVICIOS SOCIALES DE LOS TRABAJADORES DEL ESTADO. ES UN ORGANISMOS PÚBLICO QUE OTORGA SERVICIOS DE SALUD, PENSIONES, VIVIENDA, PRÉSTAMOS, ESTANCIAS INFANTILES, TURISMO, CULTURA, RECREACION, DEPORTE; CUYOS AFILIADOS SON TRABAJADORES DE DEPENDENCIAS GUBERNAMENTALES, CON DERECHO A LA SEGURIDAD SOCIAL. Y CUYOS OBJETIVOS INSTITUCIONALES ADEMÁS DE CONTRIBUIR A LOGRAR LOS OBJETIVOS PROPUESTOS POR EL PLAN NACIONAL DE DESARROLLO 2007 – 2012, COADYUVARÁN A LOGRAR LA VISIÓN DE LA INSTITUCIÓN ESTABLECIDA PARA EL AÑO 2030 Y CONCRETAR LA MISIÓN QUE TIENE ESTABLECIDA. MISIÓN DEL ISSSTE CONTRIBUIR A SATISFACER NIVELES DE BIENESTAR INTEGRAL DE LOS TRABAJADORES AL SERVICIO DEL ESTADO, PENSIONADOS, JUBILADOS Y FAMILIARES DERECHOHABIENTES, CON EL OTORGAMIENTO EFICAZ Y EFICIENTE DE LOS SEGUROS, PRESTACIONES Y SERVICIOS, CON ATENCIÓN ESMERADA, RESPETO, CALIDAD Y CUMPLIENDO SIEMPRE CON LOS VALORES INSTITUCIONALES DE HONESTIDAD, LEGALIDAD Y TRANSPARENCIA. VISIÓN DEL ISSSTE POSICIONAR AL ISSSTE COMO LA INSTITUCIÓN QUE GARANTICE LA PROTECCIÓN INTEGRAL DE LOS TRABAJADORES DE LA ADMINISTRACIÓN PÚBLICA FEDERAL, PENSIONADOS, JUBILADOS Y SUS FAMILIAS DE ACUERDO AL NUEVO PERFIL DEMOGRÁFICO DE LA DERECHOHABIENCIA, CON EL OTORGAMIENTO DE SEGUROS, PRESTACIONES Y SERVICIOS DE CONFORMIDAD CON LA NORMATIVIDAD VIGENTE, BAJO CÓDIGOS NORMADOS DE CALIDAD Y CALIDEZ, CON SOLVENCIA FINANCIERA, QUE PERMITAN GENERAR VALORES Y PRÁCTICAS QUE FOMENTEN LA MEJORA SOSTENIDA DE BIENESTAR, CALIDAD DE VIDA Y EL DESARROLLO DEL CAPITAL HUMANO. PARA CONOCER MAS DE NUESTRO INSTITUTO FAVOR DE CONSULTAR LA PAGINA INSTITUCIONAL WWW2.ISSSTE.GOB.MX EN DONDE SEGURAMENTE ENCONTRARAN MATERIAL DE ORIENTACION AMENO Y EXPLICATIVO ADEMAS DE LA HISTORIA DE INSTITUTO, SUS ALCANCES Y LOGROS ASI COMO LOS PROGRAMAS CON QUE CUENTA ACTUALMENTE EL INSTITUTO.

National Park Service

nps.gov

Most people know that the National Park Service cares for national parks, a network of over 420 natural, cultural and recreational sites across the nation. The treasures in this system – the first of its kind in the world – have been set aside by the American people to preserve, protect, and share the legacies of this land. People from all around the world visit national parks to experience America's story, marvel at the natural wonders, and have fun. Places like the Grand Canyon, the Statue of Liberty, and Gettysburg are popular destinations, but so too are the hundreds of lesser known yet equally meaningful gems like Rosie the Riveter in California, Boston Harbor Islands in Massachusetts, and Russell Cave in Alabama. The American system of national parks was the first of its kind in the world, and provides a living model for other nations wishing to establish and manage their own protected areas. The park service actively consults with these Nations, sharing what we've learned, and gaining knowledge from the experience of others. Beyond national parks, the National Park Service helps communities across America preserve and enhance important local heritage and close-to-home recreational opportunities. Grants and assistance are offered to register, record and save historic places; create community parks and local recreation facilities; conserve rivers and streams, and develop trails and greenways.

Loading…

NEWS

Canada Economic Development for Quebec Regions CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 18, 2026 08:00 AM

Government of Canada invests over $33M to strengthen Quebec's defence sector

Canada Economic Development for Quebec Regions (CED)

Read Article

February 18, 2026 08:00 AM

Invitation to media - Anju Dhillon to highlight Government of Canada support for Montréal business to strengthen Quebec's defence industrial capacity

DORVAL, QC, Feb. 18, 2026 /CNW/ - Canada Economic Development for Quebec Regions (CED). The media are invited to a press activity on...

Read Article

February 17, 2026 08:00 AM

Invitation to media - Caroline Desrochers to highlight Government of Canada support for Trois‑Rivières organization to strengthen Quebec's defence industrial capacity

Canada Economic Development for Quebec Regions (CED)

Read Article

January 31, 2026 08:00 AM

Government of Canada announces funding to support regional sawmills and employment in Northeast Ontario

Today, the Honourable Mélanie Joly, Minister of Industry and Minister responsible for Canada Economic Development for Quebec Regions,...

Read Article

January 29, 2026 08:00 AM

Numana Expands Kirq Quantum-Safe Test Bed to Québec City

Numana has expanded its Kirq quantum-safe test bed to Québec City, enabling real-world testing of quantum-secure communications systems.

Read Article

January 29, 2026 08:00 AM

Numana Commissions Kirq Quantum Communication Testbed in Quebec City

Numana has officially commissioned the third site of its Kirq quantum communication testbed in Quebec City, completing a regional network...

Read Article

January 24, 2026 08:00 AM

Public sector layoffs ripple through Canada’s economy — and Canadians’ confidence

Thousands of federal public servants are facing job uncertainty as Ottawa moves ahead with deep, multi-year cuts to government spending and...

Read Article

January 20, 2026 02:57 PM

PSAC warns widespread public service cuts threaten critical services across Canada

PSAC is raising serious concerns over ongoing public service cuts, with 1775 workforce adjustment notices issued to PSAC members across the federal public...

Read Article

January 20, 2026 08:00 AM

‘Workforce adjustment notices’ reach Health Canada as thousands of federal workers’ jobs are at risk

Thousands of federal workers in Canada face potential job cuts. Many have received notices warning of layoffs. This comes as the government...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19917

SUMMARY

A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file delete_food_items1.php. Executing a manipulation of the argument checkbox can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-74767

SUMMARY

Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress() without enforcing a limit on the resulting uncompressed data. An attacker able to submit a crafted DAA file containing highly compressed data could cause Pandora to decompress a relatively small input into a very large amount of data in memory. Because the decompressed chunks are accumulated to construct the internal ISO image, this could result in excessive memory consumption and potentially CPU exhaustion, causing the extraction worker to become unresponsive, terminate, or affect the availability of the Pandora service. The patch introduces bounded decompression using decompressobj().decompress() with max_extracted_filesize, verifies the cumulative size of decompressed chunks, and raises a dedicated ZipBomb exception when the configured limit is exceeded. Pandora then aborts extraction and reports the file as too large.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/f4294a873f86fbf2569c289e329fff2f52ca50c9

CVE-2026-74764

SUMMARY

Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract() without applying an extraction filter. An attacker able to submit a specially crafted TAR archive containing malicious member paths, such as paths using ../ sequences or absolute paths, could cause extracted files to be written outside the intended extraction directory. This may allow the attacker to overwrite files accessible to the Pandora worker process and could potentially result in application compromise, arbitrary code execution, or denial of service depending on the files targeted and the privileges of the Pandora process. The vulnerability is corrected by using Python's filter='data' extraction filter, which rejects or sanitizes dangerous TAR members, including paths that escape the destination directory and unsafe link targets. The weakness corresponds to MITRE's general path traversal category, which includes archive extraction cases where attacker-controlled filenames cause files to be written outside the intended directory.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 10.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/186b58d41e04248a154d274fffb5813e7fa2012e

CVE-2026-73055

SUMMARY

Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed to a command, an attacker can inject a tilde payload to disclose the user's home directory location and, depending on usage, alter the location on which a command operates.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 4.8)

cvss3

Base Score: 4.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.2

REFERENCES

CVE-2026-73054

SUMMARY

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocket URI with duplicated query parameters to bypass access auth code validation and receive the live kernel event stream including document identifiers, titles, and operation logs.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…