What is the official website of Délégation générale du Québec à Paris (DGQP) ?

The official website of Délégation générale du Québec à Paris (DGQP) is https://linktr.ee/quebecfr.

What is Délégation générale du Québec à Paris (DGQP)'s cybersecurity risk score?

Délégation générale du Québec à Paris (DGQP) has an AI-generated cybersecurity risk score of 758 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Délégation générale du Québec à Paris (DGQP) experienced?

According to Rankiteo, Délégation générale du Québec à Paris (DGQP) currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Délégation générale du Québec à Paris (DGQP) been affected by any supply chain cyber incidents ?

According to Rankiteo, Délégation générale du Québec à Paris (DGQP) has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Délégation générale du Québec à Paris (DGQP) have SOC 2 Type 1 certification ?

According to Rankiteo, Délégation générale du Québec à Paris (DGQP) is not certified under SOC 2 Type 1.

Does Délégation générale du Québec à Paris (DGQP) have SOC 2 Type 2 certification ?

According to Rankiteo, Délégation générale du Québec à Paris (DGQP) does not hold a SOC 2 Type 2 certification.

Does Délégation générale du Québec à Paris (DGQP) comply with GDPR ?

According to Rankiteo, Délégation générale du Québec à Paris (DGQP) is not listed as GDPR compliant.

Does Délégation générale du Québec à Paris (DGQP) have PCI DSS certification ?

According to Rankiteo, Délégation générale du Québec à Paris (DGQP) does not currently maintain PCI DSS compliance.

Does Délégation générale du Québec à Paris (DGQP) comply with HIPAA ?

According to Rankiteo, Délégation générale du Québec à Paris (DGQP) is not compliant with HIPAA regulations.

Does Délégation générale du Québec à Paris (DGQP) have ISO 27001 certification ?

According to Rankiteo,Délégation générale du Québec à Paris (DGQP) is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Délégation générale du Québec à Paris (DGQP) operate in ?

Délégation générale du Québec à Paris (DGQP) operates primarily in the Government Administration industry.

How many employees does Délégation générale du Québec à Paris (DGQP) have ?

Délégation générale du Québec à Paris (DGQP) employs approximately 41 people worldwide.

Does Délégation générale du Québec à Paris (DGQP) own any subsidiaries ?

Délégation générale du Québec à Paris (DGQP) presently has no subsidiaries across any sectors.

How many LinkedIn followers does Délégation générale du Québec à Paris (DGQP) have ?

Délégation générale du Québec à Paris (DGQP)'s official LinkedIn profile has approximately 17,551 followers.

Does Délégation générale du Québec à Paris (DGQP) have a Crunchbase profile ?

No, Délégation générale du Québec à Paris (DGQP) does not have a profile on Crunchbase.

Does Délégation générale du Québec à Paris (DGQP) have a LinkedIn profile ?

Yes, Délégation générale du Québec à Paris (DGQP) maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/delegation-generale-du-quebec-a-paris.

How many cybersecurity incidents has Délégation générale du Québec à Paris (DGQP) experienced ?

As of August 5, 2026, Rankiteo reports that Délégation générale du Québec à Paris (DGQP) has not experienced any cybersecurity incidents.

How many peer or competitor companies does Délégation générale du Québec à Paris (DGQP) have ?

Délégation générale du Québec à Paris (DGQP) has an estimated 13,126 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

DGDQP

Boost Score +25 with badge (5 left)

758

/1000

Fair

783

/1000

Fair

Délégation générale du Québec à Paris (DGQP) Vendor Cyber Rating & Cyber Score

linktr.ee

Add Your Compliance Badge

La Délégation générale du Québec à Paris est la représentation diplomatique du Québec en France et auprès de la Principauté de Monaco. Elle veille à la promotion et à la défense des intérêts du Québec et au renforcement de ses relations dans les domaines institutionnel, politique, culturel, économique et scientifique. Nétiquette : https://bit.ly/NetiquetteMRIF

DGDQP A.I CyberSecurity Scoring

Scoring History

DGDQP

Délégation générale du Québec à Paris (DGQP) CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

DGDQP Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for DGDQP

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for Délégation générale du Québec à Paris (DGQP) in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Délégation générale du Québec à Paris (DGQP) in 2026.

Incident Types DGDQP vs Government Administration Industry Avg (This Year)

No incidents recorded for Délégation générale du Québec à Paris (DGQP) in 2026.

Incident History - DGDQP (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Délégation générale du Québec à Paris (DGQP) Subsidiaries

DGDQP

Government Administration

Website: https://linktr.ee/quebecfr

Company Size: 41

Ministère des Relations internationales et de la Francophonie du QuébecGovernment Administration

Gouvernement du Québec – CarrièresGovernment Administration

Ministère de l'Immigration, de la Francisation et de l'IntégrationGovernment Administration

Choisir le QuébecGovernment Administration

Ministère de l’Économie, de l’Innovation et de l’Énergie du Québec (MEIE)Government Administration

Ministère de la santé et des services sociauxGovernment Administration

Ministère de l'Emploi et de la Solidarité sociale du QuébecGovernment Administration

Ministère de l'Environnement et de la Lutte contre les changements climatiquesEnvironmental Services

Ministère des Transports et de la Mobilité durable du Québec (MTMD)Government Administration

Ministère de la Justice du Québec (MJQ)Government Administration

Ministère de la sécurité publiqueGovernment Administration

Ministère de l'Éducation du Québec (MEQ)Government Administration

Ministère de la Culture et des CommunicationsGovernment Administration

Centre de conservation du Québec (CCQ)Museums, Historical Sites, and Zoos

Ministère des Ressources naturelles et des Forêts (MRNF)Government Administration

Ministère de l'Agriculture, des Pêcheries et de l'Alimentation du Québec (MAPAQ)Government Administration

Ministère du Tourisme du Québec (MTO)Government Administration

Ministère du Conseil exécutif du Québec (MCE)Government Administration

Secrétariat à la réforme des institutions démocratiques, à l’accès à l’information et à la laïcitéGovernment Administration

Ordre national du QuébecGovernment Administration

Ministère des Finances du Québec (MFQ)Government Administration

Ministère de l'Enseignement supérieur du Québec (MES)Government Administration

Ministère des Affaires municipales et de l'Habitation du Québec (MAMH)Government Administration

Ministère de la Famille du Québec (MFA)Government Administration

Ministère de la Langue française du Québec (MLF)Government Administration

Secrétariat du Conseil du trésor (SCT)Government Administration

Délégation générale du Québec à Dakar (DGQD)Government Administration

Bureau du Québec à Rabat (BQR)Government Administration

Délégation générale du Québec à Bruxelles (DGQB)Government Administration

Délégation générale du Québec à Mexico (DGQM)Government Administration

Québec Government Office in New YorkGovernment Administration

Bureau du Québec à São Paulo (BQSP)Government Administration

Québec Government Office in Los AngelesGovernment Administration

Délégation générale du Québec à Munich (DGQMü)Government Administration

Québec Government Office in LondonGovernment Administration

Bureau du Québec à Barcelone (BQB)Government Administration

Québec Government Office in MumbaiGovernment Administration

Délégation du Québec en ItalieGovernment Administration

Délégation générale du Québec à Tokyo (DGQT)Government Administration

Québec Government Office in ChicagoGovernment Administration

Délégation du Québec à Séoul (DQS)Government Administration

Délégation du Québec à WashingtonGovernment Administration

Québec Government Office in HoustonGovernment Administration

Québec Government Office in AtlantaGovernment Administration

Représentations du Québec en ChineGovernment Administration

Loading…

Délégation générale du Québec à Paris (DGQP) Similar Companies

INSS

inss.gov.br

O Instituto Nacional do Seguro Social (INSS) é uma autarquia do Governo Federal do Brasil que recebe as contribuições para a manutenção do Regime Geral da Previdência Social, sendo responsável pelo pagamento da aposentadoria, pensão por morte, auxílio-doença, auxílio-acidente, entre outros benefícios previstos em lei. O INSS trabalha junto com a Dataprev, empresa de tecnologia que faz o processamento de todos os dados da Previdência. Está vinculado ao Ministério da Previdência Social.

The Singapore Public Service

careers.gov.sg

The Singapore Public Service works with the elected Government and Singaporeans to forge a common vision of Singapore’s future and bring it into reality. We take pride in living out our values of integrity, service and excellence. Follow us for stories on how our public officers are contributing to Public Sector Transformation by: · Innovating to deliver even better policies and services for Singaporeans and Singapore · Planning ahead for future challenges · Building a flourishing public service workforce and resilient, future-ready organisations. Gain insights on how our officers are: · Making an impact and realising their aspirations through access to a diverse range of exciting roles · Growing and learning in their jobs every day through the purposeful work they do and the diverse development opportunities across the public service · Balancing their work-life priorities through flexible work arrangements and employee wellness programmes. Shape Singapore’s future and yours with us. Join us to make a difference today for tomorrow.

Assurance Maladie

ameli.fr

Travailler à l’Assurance Maladie, c’est donner une nouvelle dimension à votre métier et agir au quotidien pour la protection de notre système de santé. Participez à une grande diversité de projets dans un cadre bienveillant et soyez fier de contribuer à une mission essentielle : agir ensemble, protéger chacun. Depuis près de 80 ans, l'Assurance Maladie joue un rôle majeur au service de la solidarité nationale. Nous sommes convaincus que la clé de la pérennité du système de santé relève d'une responsabilité collective et réside dans l'implication forte de chacun de ses acteurs. Au sein de ce système, l'Assurance Maladie assume une triple mission : ⏺️ garantir un accès universel aux droits et permettre l'accès aux soins ⏺️ accompagner chacun dans la préservation de sa santé ⏺️ améliorer l'efficacité du système Toutes ses missions, l’Assurance Maladie les mène avec le souci d’assurer la meilleure qualité de service. Elle s’appuie pour cela sur un réseau de proximité qui couvre l’ensemble du territoire et l’engagement de plus de 80 000 collaborateurs qui agissent jour après jour à l’échelle départementale, régionale et nationale. Ensemble, au quotidien, ils font vivre ses valeurs d’universalité, de solidarité, de responsabilité et d’innovation.

South African Revenue Service (SARS)

sars.gov.za

Its main functions are to: collect and administer all national taxes, duties and levies; collect revenue that may be imposed under any other legislation, as agreed on between SARS and an organ of state or institution entitled to the revenue; provide protection against the illegal importation and exportation of goods; facilitate trade; and advise the Minister of Finance on all revenue matters

City of Houston

cb houstontx.gov

Home to a respected and energetic cultural arts scene, celebrated restaurants featuring flavors from 35 countries, world-renowned theater groups and the brains behind U.S. space exploration, Houston is a diverse metropolis brimming with personality. With nearly 21,000 concerts, plays, exhibitions and other arts programs presented in Houston annually, residents and visitors have access to a wide variety of cultural programs. On any given night, it's a safe bet that there's a show somewhere in Houston's Theater District. More than 2 million people visit the Downtown area each year to attend one of the city's world-class performances. Within the Museum District you will find eighteen world-class institutions, including the Menil Collection, Museum of Fine Arts, Houston and the Houston Museum of Natural Science are clustered in this area, drawing a reported seven million visitors to the district each year. Houston’s restaurant scene is as ethnically diverse as its 4 million residents. ForbesTraveler.com ranked Houston as one of the best restaurant cities in America. The city is jam-packed with more than 8,000 tempting eateries that feature culinary flavors from more than 35 countries. With 56,405 acres of total park space, Houston rates first among the nation's 10 most populous cities in total acreage of park land. The 165 public and private golf courses around the city and teams in nearly every major professional sport keep sports fever high year-round. The city also employs over 22,000 full-time staff to keep the city running. We are always looking for everyone from Engineers to IT Professionals, from entry level to executive level. Check back here for current postings, follow us on Facebook at www.facebook.com/cohcareers or on Twitter @COHCareers for all the up to date recruitment happenings!

UK Home Office

www.gov.uk

At the Home Office, we help to ensure that the country is safe and secure. We’ve been looking after UK citizens since 1782. We are responsible for: - working on the problems caused by illegal drug use - shaping the alcohol strategy, policy and licensing conditions - keeping the United Kingdom safe from the threat of terrorism - reducing and preventing crime, and ensuring people feel safe in their homes and communities - securing the UK border and controlling immigration - considering applications to enter and stay in the UK - issuing passports and visas - supporting visible, responsible and accountable policing by empowering the public and freeing up the police to fight crime - fire prevention and rescue These organisations are all part of the Home Office: - Border Force - HM Passport Office (HMPO) - Immigration Enforcement - UK Visas and Immigration (UKVI)

US Government Accountability Office

gao.gov

For more information about GAO, please visit www.gao.gov. General Information The U.S. Government Accountability Office (GAO) is an independent, nonpartisan agency that works for Congress. Often called the "congressional watchdog," GAO investigates how the federal government spends taxpayer dollars. Mission Our Mission is to support the Congress in meeting its constitutional responsibilities and to help improve the performance and ensure the accountability of the federal government for the benefit of the American people. We provide Congress with timely information that is objective, fact-based, nonpartisan, non-ideological, fair, and balanced. GAO Social Media Terms of Use: https://www.facebook.com/usgao/app/250336418365488/

UWV

uwv.nl

Bij UWV werken we aan een samenleving waarin iedereen mee kan doen. We helpen mensen op weg bij het vinden of behouden van werk. In geval van ziekte kijken we wat iemand nog wél kan. En als werken niet mogelijk is, zorgt UWV snel voor inkomen. We geven op deskundige en efficiënte wijze uitvoering aan werknemersverzekeringen, zoals de WW, WIA, WAO, WAZ, Wajong, Wazo en Ziektewet. Bij UWV werken ruim 22.000 mensen, die allen bijdragen aan een samenleving waarin iedereen mee kan doen. Onze medewerkers zijn er voor werkzoekenden, werkenden, mensen met een afstand tot de arbeidsmarkt, stakeholders én werkgevers. Als je bij UWV werkt, weet je waar je het voor doet: mensen verder helpen met werk en inkomen. Werken bij UWV is tastbaar, je werkt aan echte vraagstukken van mensen, ieder met eigen uitdagingen, ambities en drijfveren. Zo leveren medewerkers van UWV allemaal een bijdrage aan een samenleving waarin iedereen mee kan doen. Want bij UWV werk je niet alleen voor jezelf. Je werkt voor ons allemaal.

ISSSTE

www.com

INSTITUTO DE SEGURIDAD Y SERVICIOS SOCIALES DE LOS TRABAJADORES DEL ESTADO. ES UN ORGANISMOS PÚBLICO QUE OTORGA SERVICIOS DE SALUD, PENSIONES, VIVIENDA, PRÉSTAMOS, ESTANCIAS INFANTILES, TURISMO, CULTURA, RECREACION, DEPORTE; CUYOS AFILIADOS SON TRABAJADORES DE DEPENDENCIAS GUBERNAMENTALES, CON DERECHO A LA SEGURIDAD SOCIAL. Y CUYOS OBJETIVOS INSTITUCIONALES ADEMÁS DE CONTRIBUIR A LOGRAR LOS OBJETIVOS PROPUESTOS POR EL PLAN NACIONAL DE DESARROLLO 2007 – 2012, COADYUVARÁN A LOGRAR LA VISIÓN DE LA INSTITUCIÓN ESTABLECIDA PARA EL AÑO 2030 Y CONCRETAR LA MISIÓN QUE TIENE ESTABLECIDA. MISIÓN DEL ISSSTE CONTRIBUIR A SATISFACER NIVELES DE BIENESTAR INTEGRAL DE LOS TRABAJADORES AL SERVICIO DEL ESTADO, PENSIONADOS, JUBILADOS Y FAMILIARES DERECHOHABIENTES, CON EL OTORGAMIENTO EFICAZ Y EFICIENTE DE LOS SEGUROS, PRESTACIONES Y SERVICIOS, CON ATENCIÓN ESMERADA, RESPETO, CALIDAD Y CUMPLIENDO SIEMPRE CON LOS VALORES INSTITUCIONALES DE HONESTIDAD, LEGALIDAD Y TRANSPARENCIA. VISIÓN DEL ISSSTE POSICIONAR AL ISSSTE COMO LA INSTITUCIÓN QUE GARANTICE LA PROTECCIÓN INTEGRAL DE LOS TRABAJADORES DE LA ADMINISTRACIÓN PÚBLICA FEDERAL, PENSIONADOS, JUBILADOS Y SUS FAMILIAS DE ACUERDO AL NUEVO PERFIL DEMOGRÁFICO DE LA DERECHOHABIENCIA, CON EL OTORGAMIENTO DE SEGUROS, PRESTACIONES Y SERVICIOS DE CONFORMIDAD CON LA NORMATIVIDAD VIGENTE, BAJO CÓDIGOS NORMADOS DE CALIDAD Y CALIDEZ, CON SOLVENCIA FINANCIERA, QUE PERMITAN GENERAR VALORES Y PRÁCTICAS QUE FOMENTEN LA MEJORA SOSTENIDA DE BIENESTAR, CALIDAD DE VIDA Y EL DESARROLLO DEL CAPITAL HUMANO. PARA CONOCER MAS DE NUESTRO INSTITUTO FAVOR DE CONSULTAR LA PAGINA INSTITUCIONAL WWW2.ISSSTE.GOB.MX EN DONDE SEGURAMENTE ENCONTRARAN MATERIAL DE ORIENTACION AMENO Y EXPLICATIVO ADEMAS DE LA HISTORIA DE INSTITUTO, SUS ALCANCES Y LOGROS ASI COMO LOS PROGRAMAS CON QUE CUENTA ACTUALMENTE EL INSTITUTO.

Loading…

NEWS

Délégation générale du Québec à Paris (DGQP) CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-45537

SUMMARY

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the construct_uri() function concatenates multiple URI components (protocol, username, domain, port, params) into a fixed 1024-byte global BSS buffer without any bounds checking. When a routing script calls construct_uri() with an attacker-controlled username, a combined component length exceeding 1024 bytes overflows the buffer, corrupting adjacent global data with attacker-controlled content. The overflow reaches disable_503_translation, a global flag controlling SIP 503 response handling, allowing an attacker to deterministically set the flag via the URI username and alter the server's routing behavior for subsequent messages. Because the same buffer is shared with contact_builder(), the overflow also corrupts that function's data, and without a memory sanitizer the adjacent globals are silently overwritten on every request containing a long username. This issue has been fixed in versions 3.6.6 and 4.0.0-rc1.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-18819

SUMMARY

A security vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8aab339798ed47e8c6d7d977ed97a82bd. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project maintainer confirms: "[I]t seems plausible, in that RackTables does not at this time have any CSRF prevention. You may assign a CVE ID to this, but there is no guarantee it will be handled in urgent, or even timely, manner, or at all."

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 4.3)

cvss2

Base Score: 5.0

Complexity: LOW

AV:N/AC:L/Au:N/C:N/I:P/A:N

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-18818

SUMMARY

A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-70620

SUMMARY

Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileged attackers to direct the server to probe internal network resources by supplying arbitrary URLs to the embedding endpoint configuration without scheme, host, IP range, or DNS rebind validation. Attackers can submit loopback addresses, RFC 1918 ranges, or link-local addresses through the embedding endpoint API to partially read responses from cloud instance metadata services, internal APIs, and other hosts reachable from the server.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

cvss4

Base Score: 6.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

2.3

REFERENCES

CVE-2026-70619

SUMMARY

Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-admin users to manage server-wide embedding backend configuration by invoking endpoint management routes that verify session authentication but omit the admin authorization guard. Attackers can supply an attacker-controlled URL to overwrite the embedding backend persisted in the endpoint configuration file and process environment, causing all subsequent embedding operations including chat messages, RAG queries, memory entries, and vault text to be transmitted in plaintext to the attacker-controlled destination, or delete the endpoint configuration to deny embedding service to all users.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…