What is the official website of ITT Enidine ?

The official website of ITT Enidine is http://www.enidine.com.

What is ITT Enidine's cybersecurity risk score?

ITT Enidine has an AI-generated cybersecurity risk score of 755 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has ITT Enidine experienced?

According to Rankiteo, ITT Enidine currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has ITT Enidine been affected by any supply chain cyber incidents ?

According to Rankiteo, ITT Enidine has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does ITT Enidine have SOC 2 Type 1 certification ?

According to Rankiteo, ITT Enidine is not certified under SOC 2 Type 1.

Does ITT Enidine have SOC 2 Type 2 certification ?

According to Rankiteo, ITT Enidine does not hold a SOC 2 Type 2 certification.

Does ITT Enidine comply with GDPR ?

According to Rankiteo, ITT Enidine is not listed as GDPR compliant.

Does ITT Enidine have PCI DSS certification ?

According to Rankiteo, ITT Enidine does not currently maintain PCI DSS compliance.

Does ITT Enidine comply with HIPAA ?

According to Rankiteo, ITT Enidine is not compliant with HIPAA regulations.

Does ITT Enidine have ISO 27001 certification ?

According to Rankiteo,ITT Enidine is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does ITT Enidine operate in ?

ITT Enidine operates primarily in the Aviation & Aerospace industry.

How many employees does ITT Enidine have ?

ITT Enidine employs approximately 163 people worldwide.

Does ITT Enidine own any subsidiaries ?

ITT Enidine presently has no subsidiaries across any sectors.

How many LinkedIn followers does ITT Enidine have ?

ITT Enidine's official LinkedIn profile has approximately 2,990 followers.

Does ITT Enidine have a Crunchbase profile ?

No, ITT Enidine does not have a profile on Crunchbase.

Does ITT Enidine have a LinkedIn profile ?

Yes, ITT Enidine maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/enidine.

How many cybersecurity incidents has ITT Enidine experienced ?

As of August 16, 2026, Rankiteo reports that ITT Enidine has not experienced any cybersecurity incidents.

How many peer or competitor companies does ITT Enidine have ?

ITT Enidine has an estimated 780 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

ITT Enidine

Boost Score +25 with badge (5 left)

755

/1000

Fair

780

/1000

Fair

ITT Enidine Vendor Cyber Rating & Cyber Score

enidine.com

Add Your Compliance Badge

ITT Enidine Inc., headquartered in Orchard Park, NY, is a premier supplier of engineered Mechanical Shock Absorbers, Vibration Isolation Products, Noise Attenuation Products as well as Deceleration Devices and products for Hydraulic/Pneumatic Actuation and Motion Control applications. Our products can be found in use throughout the global Industrial, Rotorcraft, Aviation, Defense, Rail, Automation and Infrastructure markets.

ITT Enidine A.I CyberSecurity Scoring

Scoring History

ITT Enidine

ITT Enidine CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

ITT Enidine Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for ITT Enidine

Incidents vs Aviation & Aerospace Industry Avg (This Year)

No incidents recorded for ITT Enidine in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for ITT Enidine in 2026.

Incident Types ITT Enidine vs Aviation & Aerospace Industry Avg (This Year)

No incidents recorded for ITT Enidine in 2026.

Incident History - ITT Enidine (X = Date, Y = Severity)

Loading…

SUBSIDIARY

ITT Enidine Subsidiaries

ITT Enidine

Aviation & Aerospace

Website: http://www.enidine.com

Company Size: 163

ITT Inc.Industrial Machinery Manufacturing

ITT Goulds PumpsIndustrial Machinery Manufacturing

ITT Motion TechnologiesTruck Transportation

ITT CannonAppliances, Electrical, and Electronics Manufacturing

KONIMotor Vehicle Manufacturing

Habonim Industrial Valves & Actuators LTDMechanical Or Industrial Engineering

SvanehøjMaritime Transportation

Micro-Mode Products Inc.Manufacturing

ITT BornemannMachinery Manufacturing

ITT Engineered ValvesIndustrial Machinery Manufacturing

Axtone - an ITT companyRailroad Equipment Manufacturing

Compact Automation ProductsAutomation Machinery Manufacturing

ITT Aerospace ControlsAirlines and Aviation

ITT BIW Connector SystemsOil and Gas

ITT C'treatMachinery Manufacturing

ITT PRO ServicesIndustrial Machinery Manufacturing

RHEINHÜTTE PumpenMachinery Manufacturing

Conoflow, an ITT CompanyOil and Gas

Neo-Dyn, an ITT CompanyIndustrial Automation

Loading…

ITT Enidine Similar Companies

Gulfstream Aerospace

gulfstream.com

Inspired by the belief that aviation could fuel business growth, Gulfstream Aerospace Corp. invented the first purpose-built business aircraft, the Gulfstream I, which first flew in 1958. Today, more than 3,400 aircraft are in service around the world. Together with parent company General Dynamics, Gulfstream consistently invests in the future, dedicating resources to researching and developing innovative new aircraft, technologies and services. Gulfstream’s next-generation family of aircraft, including the super-midsize Gulfstream G300, the category-leading Gulfstream G400, the award-winning Gulfstream G500 and Gulfstream G600, the ultralarge-cabin Gulfstream G700 and the ultralong-range Gulfstream G800, offers an aircraft for every mission. All are backed by the worldwide Gulfstream Customer Support network.

Boeing

cb boeing.com

Boeing is a leading global aerospace company that designs, builds and supports commercial airplanes, defense products and space systems for customers in more than 150 countries. Guided by our commitment to safety and quality, we innovate to deliver solutions that bring real value to our customers and the industry. As a top U.S. exporter, we work with a strong global supply base to drive economic opportunity and community impact worldwide. Our team leads with integrity and passion as it shapes the future of aerospace. Explore careers with us: boeing.com/careers Boeing is an Equal Opportunity Employer. Employment decisions are made without regard to race, color, religion, national origin, gender, sexual orientation, gender identity, age, physical or mental disability, genetic factors, military/veteran status or other characteristics protected by law.

Loading…

NEWS

ITT Enidine CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19917

SUMMARY

A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file delete_food_items1.php. Executing a manipulation of the argument checkbox can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-74767

SUMMARY

Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress() without enforcing a limit on the resulting uncompressed data. An attacker able to submit a crafted DAA file containing highly compressed data could cause Pandora to decompress a relatively small input into a very large amount of data in memory. Because the decompressed chunks are accumulated to construct the internal ISO image, this could result in excessive memory consumption and potentially CPU exhaustion, causing the extraction worker to become unresponsive, terminate, or affect the availability of the Pandora service. The patch introduces bounded decompression using decompressobj().decompress() with max_extracted_filesize, verifies the cumulative size of decompressed chunks, and raises a dedicated ZipBomb exception when the configured limit is exceeded. Pandora then aborts extraction and reports the file as too large.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/f4294a873f86fbf2569c289e329fff2f52ca50c9

CVE-2026-74764

SUMMARY

Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract() without applying an extraction filter. An attacker able to submit a specially crafted TAR archive containing malicious member paths, such as paths using ../ sequences or absolute paths, could cause extracted files to be written outside the intended extraction directory. This may allow the attacker to overwrite files accessible to the Pandora worker process and could potentially result in application compromise, arbitrary code execution, or denial of service depending on the files targeted and the privileges of the Pandora process. The vulnerability is corrected by using Python's filter='data' extraction filter, which rejects or sanitizes dangerous TAR members, including paths that escape the destination directory and unsafe link targets. The weakness corresponds to MITRE's general path traversal category, which includes archive extraction cases where attacker-controlled filenames cause files to be written outside the intended directory.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 10.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/186b58d41e04248a154d274fffb5813e7fa2012e

CVE-2026-73055

SUMMARY

Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed to a command, an attacker can inject a tilde payload to disclose the user's home directory location and, depending on usage, alter the location on which a command operates.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 4.8)

cvss3

Base Score: 4.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.2

REFERENCES

CVE-2026-73054

SUMMARY

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocket URI with duplicated query parameters to bypass access auth code validation and receive the live kernel event stream including document identifiers, titles, and operation logs.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…