What is the official website of Enel Green Power ?

The official website of Enel Green Power is http://www.enelgreenpower.com.

What is Enel Green Power's cybersecurity risk score?

Enel Green Power has an AI-generated cybersecurity risk score of 785 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Enel Green Power experienced?

According to Rankiteo, Enel Green Power currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Enel Green Power been affected by any supply chain cyber incidents ?

According to Rankiteo, Enel Green Power has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Enel Green Power have SOC 2 Type 1 certification ?

According to Rankiteo, Enel Green Power is not certified under SOC 2 Type 1.

Does Enel Green Power have SOC 2 Type 2 certification ?

According to Rankiteo, Enel Green Power does not hold a SOC 2 Type 2 certification.

Does Enel Green Power comply with GDPR ?

According to Rankiteo, Enel Green Power is not listed as GDPR compliant.

Does Enel Green Power have PCI DSS certification ?

According to Rankiteo, Enel Green Power does not currently maintain PCI DSS compliance.

Does Enel Green Power comply with HIPAA ?

According to Rankiteo, Enel Green Power is not compliant with HIPAA regulations.

Does Enel Green Power have ISO 27001 certification ?

According to Rankiteo,Enel Green Power is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Enel Green Power operate in ?

Enel Green Power operates primarily in the Renewable Energy Semiconductor Manufacturing industry.

How many employees does Enel Green Power have ?

Enel Green Power employs approximately 6,182 people worldwide.

Does Enel Green Power own any subsidiaries ?

Enel Green Power presently has no subsidiaries across any sectors.

How many LinkedIn followers does Enel Green Power have ?

Enel Green Power's official LinkedIn profile has approximately 717,509 followers.

What is the NAICS classification code for Enel Green Power ?

Enel Green Power is classified under the NAICS code 33441, which corresponds to Semiconductor and Other Electronic Component Manufacturing.

Does Enel Green Power have a Crunchbase profile ?

Yes, Enel Green Power has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/enel-green-power.

Does Enel Green Power have a LinkedIn profile ?

Yes, Enel Green Power maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/enel_green_power.

How many cybersecurity incidents has Enel Green Power experienced ?

As of August 9, 2026, Rankiteo reports that Enel Green Power has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Enel Green Power have ?

Enel Green Power has an estimated 2,773 peer or competitor companies worldwide.

What types of cybersecurity incidents has Enel Green Power faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

EGP

Boost Score +25 with badge (5 left)

785

/1000

Fair

810

/1000

Good

Enel Green Power Vendor Cyber Rating & Cyber Score

enelgreenpower.com

cb in

Add Your Compliance Badge

We are the Enel Group business dedicated to the development and management of energy production from renewable sources worldwide. We have an energy generation mix that includes the main renewable sources such as wind, solar, hydroelectric, geothermal and green hydrogen. Our 1.200 plants are present in five continents with an installed capacity of approximately 53 GW. We work worldwide with a sustainable business model that generates value not only for the company but also for the communities where we work. We are constantly engaged in new projects and new technological challenges in order to innovate in the fields of research and production of electrical energy from renewable sources. Our goal is ambitious: to work with a business model

EGP A.I CyberSecurity Scoring

Scoring History

EGP

Enel Green Power CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Endesa

Breach

1/2026

END1768237930

Endesa

Breach

100

1/2026

ENDNAT177773216...

Loading…

A.I.

EGP Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for EGP

Incidents vs Renewable Energy Semiconductor Manufacturing Industry Avg (This Year)

No incidents recorded for Enel Green Power in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Enel Green Power in 2026.

Incident Types EGP vs Renewable Energy Semiconductor Manufacturing Industry Avg (This Year)

No incidents recorded for Enel Green Power in 2026.

Incident History - EGP (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Enel Green Power Subsidiaries

EGP

Renewable Energy Semiconductor Manufacturing

Website: http://www.enelgreenpower.com

Company Size: 6,182

Enel GroupUtilities

Enel ColombiaUtilities

Enel ChileUtilities

EdesurUtilities

Enel EnergiaUtilities

Enel North AmericaRenewables & Environment

Enel XUtilities

EnerNOCIT Services and IT Consulting

EnTech USB LtdFinancial Services

Activation Energy is now EnerNOC!Oil and Gas

EndesaUtilities

Endesa PortugalUtilities

Enel BrasilUtilities

Enel Comercializadora e TradingServices for Renewable Energy

Enersis Chile hoy Enel ChileUtilities

CoelceAppliances, Electrical, and Electronics Manufacturing

Enel Open Innovability®Servizi pubblici

GridspertiseAppliances, Electrical, and Electronics Manufacturing

Enel ArgentinaUtilities

Chilectra hoy es Enel Distribución ChileOil and Gas

LeneUtilities

Enel X WayConsumer Services

Loading…

Enel Green Power Similar Companies

Siemens Gamesa

cb siemensgamesa.com

Siemens Gamesa is a global technology leader in the renewable energy industry - specifically in the development, manufacturing, installation and maintenance of wind turbines. Being a pioneer in renewables since the 1980s, we put our scale and entrepreneurial culture to work on driving the energy transition towards a sustainable world. We empower our customers, people, and partners to lead the future with green energy. Siemens Gamesa is a trademark licensed by Siemens AG.

Loading…

NEWS

Enel Green Power CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Industry 4.0 digital technologies for the advancement of renewable energy: Functions, applications, potential and challenges

Explores the contribution of the Industry 4.0 digital technologies in advancement of renewable energy. •. Discusses 13 key digital technologies in terms of ...

Read Article

Greif's Landmark Solar Deal to Slash European Carbon Footprint by 65% Through Spanish VPPA

The 12-year agreement, which commenced on July 1, 2025, involves the purchase of 100 GWh of renewable energy annually from solar farms in ...

Read Article

The Fragile Backbone: Why Energy Grid Resilience is the Hidden Risk in European Energy Investments

Europe's energy transition faces critical grid resilience risks as aging infrastructure struggles with renewable integration and cascading failures.

Read Article

Cyberattacks in energy sector doubled from 2020 to 2022

Cyberattacks are increasing the risk of blackouts, disruptions and significant societal issues, according to Eurelectric's latest report.

Read Article

Artificial intelligence and the benefits to energy

Artificial intelligence is a technology that's relatively recent but already in use in the energy sector, with benefits in all areas: plant ...

Read Article

Enel ransomware attack highlights the value of a top-down security culture

A June attack on multinational energy company Enel Group is evidence of the ransomware trend — as well as how companies can counter the threat ...

Read Article

Climate Resilience in European Infrastructure Sectors: Investing in Heatwave-Driven Growth

The European Union's escalating heatwave frequency, linked to climate change, has become a catalyst for rethinking infrastructure resilience.

Read Article

Enel to the discovery of the blockchain

Bloomberg has included the blockchain among the ten 'disruptive' technologies of 2017 capable of changing the face of industry, the economy and people's lives.

Read Article

The future of cybersecurity: How renewable power plant controls protect inverters from hacks and attacks

Cybersecurity threats to operational technology and inverters that are increasingly Internet-connected to help run the electric grid are escalating.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-71983

SUMMARY

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized parameters to execute arbitrary commands on the affected device and obtain root privileges.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71502

SUMMARY

CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient neutralization of Vue template expression delimiters in server-rendered user-controlled data. An unauthenticated attacker can create a public conversion whose name or description contains a malicious Vue expression using the application's configured [[ ... ]] delimiters. User profile names may provide an additional injection vector. Although Jinja HTML escaping is applied, the resulting value is subsequently included in a DOM region compiled by Vue. Vue interprets the attacker-controlled value as a template expression rather than ordinary text. By accessing the JavaScript Function constructor from within the expression, an attacker can execute arbitrary JavaScript in the security context of the CTI-Transmute origin. The application's nonce-based Content Security Policy does not prevent exploitation because the Vue runtime compiler requires the unsafe-eval policy exception. The malicious payload is stored by the application and executed whenever another user opens an affected page, such as the public conversion detail page. The victim may be a normal user or an administrator. Successful exploitation could allow the attacker to: * Access data available to the victim through the application. * Extract API keys, tokens, or other sensitive information exposed to the page. * Perform authenticated actions using the victim's session. * Modify conversions or other application data. * Escalate the impact by targeting an administrator. A demonstrated payload can use [].constructor.constructor(...) to obtain the JavaScript Function constructor and execute arbitrary code. The regression tests also show that a short first-stage payload could retrieve an uncapped conversion description and evaluate a larger second-stage payload. The patch addresses the vulnerability by registering a global Jinja finalize hook that inserts a zero-width Unicode word joiner inside every Vue delimiter found in server-rendered values. This prevents Vue from recognizing the values as template expressions while preserving their visible representation.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: )

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-71958

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username fields and execute arbitrary commands by crafting a specific payload, or cause the device to crash.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71957

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist[].name field and execute arbitrary commands by crafting a specific payload, or cause the device to crash.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71956

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious commands into the netDig.ping.dst field, resulting in command execution with root privileges.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…