What is the official website of FIEE ?

The official website of FIEE is http://www.fiee.com.br/.

What is FIEE's cybersecurity risk score?

FIEE has an AI-generated cybersecurity risk score of 749 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has FIEE experienced?

According to Rankiteo, FIEE currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has FIEE been affected by any supply chain cyber incidents ?

According to Rankiteo, FIEE has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Amazon Web Services (AWS) (Incident ID: RELLEX1772562253) LexisNexis (Incident ID: LEX1772555037)

Does FIEE have SOC 2 Type 1 certification ?

According to Rankiteo, FIEE is not certified under SOC 2 Type 1.

Does FIEE have SOC 2 Type 2 certification ?

According to Rankiteo, FIEE does not hold a SOC 2 Type 2 certification.

Does FIEE comply with GDPR ?

According to Rankiteo, FIEE is not listed as GDPR compliant.

Does FIEE have PCI DSS certification ?

According to Rankiteo, FIEE does not currently maintain PCI DSS compliance.

Does FIEE comply with HIPAA ?

According to Rankiteo, FIEE is not compliant with HIPAA regulations.

Does FIEE have ISO 27001 certification ?

According to Rankiteo,FIEE is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does FIEE operate in ?

FIEE operates primarily in the Appliances, Electrical, and Electronics Manufacturing industry.

How many employees does FIEE have ?

FIEE employs approximately None employees people worldwide.

Does FIEE own any subsidiaries ?

FIEE presently has no subsidiaries across any sectors.

How many LinkedIn followers does FIEE have ?

FIEE's official LinkedIn profile has approximately 3,728 followers.

What is the NAICS classification code for FIEE ?

FIEE is classified under the NAICS code 335, which corresponds to Electrical Equipment, Appliance, and Component Manufacturing.

Does FIEE have a Crunchbase profile ?

No, FIEE does not have a profile on Crunchbase.

Does FIEE have a LinkedIn profile ?

Yes, FIEE maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/fiee.

How many cybersecurity incidents has FIEE experienced ?

As of August 5, 2026, Rankiteo reports that FIEE has experienced 6 cybersecurity incidents.

How many peer or competitor companies does FIEE have ?

FIEE has an estimated 9,675 peer or competitor companies worldwide.

What types of cybersecurity incidents has FIEE faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

FIEE

Boost Score +25 with badge (5 left)

749

/1000

Moderate

774

/1000

Fair

FIEE Vendor Cyber Rating & Cyber Score

fiee.com.br

Add Your Compliance Badge

A FIEE é a única feira de negócios no Brasil que apresenta equipamentos, produtos, soluções e tendências em instalações elétricas e eletrônicas para todos os tipos de indústrias. Com mais de 60 anos no calendário do mercado, é realizada durante 4 dias para que as empresas destes segmentos negociem com seus principais compradores, entre eles, engenheiros, profissionais de TI e técnicos de todas as indústrias. As marcas presentes, de origens nacional e internacional, oferecem insumos que possibilitam ao mercado se transformar digitalmente, atingir a eficiência energética e aplicar conceitos de conectividade, automação e IoT. Além de negócios e networking, a FIEE também apresenta conteúdos reconhecidos pela sua qualidade no mercado,

FIEE A.I CyberSecurity Scoring

Scoring History

FIEE

FIEE CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

LexisNexis

Breach

100

3/2026

Amazon Web Serv...

RELLEX177256225...

LexisNexis

Breach

2/2026

LexisNexis

LEX1772555037

LexisNexis

Breach

1/2026

LEX1782211793

LexisNexis

Breach

1/2025

LEX1772815548

LexisNexis

Breach

12/2024

LEX1772584112

LexisNexis

Breach

1/2020

LEX1772641919

Loading…

A.I.

FIEE Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for FIEE

Incidents vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for FIEE in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for FIEE in 2026.

Incident Types FIEE vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for FIEE in 2026.

Incident History - FIEE (X = Date, Y = Severity)

Loading…

SUBSIDIARY

FIEE Subsidiaries

FIEE

Appliances, Electrical, and Electronics Manufacturing

Website: http://www.fiee.com.br/

Company Size: 51-200 employees

RX GlobalEvents Services

RX FranceEvents Services

BATIMAT Construction

Cannes Yachting FestivalÉvénementiel

Pollutec Paris 2024Services de conseil en environnement

IFTMÉvénementiel

Cannes Yachting FestivalÉvénementiel

EquipHotel ParisÉvénementiel

SITLÉvénementiel

IT PartnersServices et conseil en informatique

INTERCLIMA Construction

Observatoire de la FranchiseTechnologie, information et Internet

Expoprotection Événementiel

FIAC !Arts

ÉQUIPBAIE-MÉTALEXPOConstruction

IDÉOBAINConstruction

Snack Show - ParizzaRestaurants

Salon Body FitnessÉvénementiel

Comic Con ParisEntertainment

MIP LONDONEvents Services

Le Mondial du bâtimentConstruction

RééducaHospitals and Health Care

RELXTechnology, Information and Media

LexisNexisIT Services and IT Consulting

LexisNexis for Law Students and Recent GraduatesLegal Services

LexisNexis | Nexis SolutionsIT Services and IT Consulting

LexisNexis CounselLink®Legal Services

LexisNexis InterAction+™Information Services

LexisNexis Practical GuidanceLegal Services

Lexis Advance®Legal Services

LexisNexis Legal Software SolutionsSoftware Development

LexisNexis CareersTechnology, Information and Media

LexisNexis Small-Mid Sized Law FirmsSoftware Development

LexisNexis Inmate Law Library SolutionsLegal Services

Lexis 360 | LexisNexis Legal & ProfessionalAtividades jurídicas

LexisNexis Law BooksLegal Services

LexisNexis® for LitigatorsLegal Services

RELX SDGsTechnology, Information and Media

RELX in China信息技术和服务

Aircraft Interiors ExpoAviation and Aerospace Component Manufacturing

ILTMEvents Services

Oceanology InternationalInternational Trade and Development

IBTM EventsEvents Services

IBTM AmericasServicios de eventos

IBTM WorldEvents Services

Bar Convent LondonEvents Services

All-Energy Exhibition and ConferenceRenewables & Environment

RX USAEvents Services

Global Gaming ExpoGambling Facilities and Casinos

PGA Golf ShowsSpectator Sports

National Hardware ShowRetail

INTERPHEX GlobalPharmaceutical Manufacturing

BuildingsNYWholesale Building Materials

International Vision Expo and ConferenceApparel & Fashion

one2one SummitAdvertising Services

madconNYCAdvertising Services

FUNCTIONAL FABRIC FAIR (powered by PERFORMANCE DAYS)Apparel & Fashion

International Golf Travel Market (IGTM)Travel Arrangements

FIBO USAHealth, Wellness & Fitness

Bar Convent LondonEvents Services

JIS EventsRetail

Bar Convent LondonEvents Services

RX Greater ChinaEvents Services

SinoCorrugatedPackaging and Containers Manufacturing

DcarboniseEvents Services

International Sales Group UKEvents Services

Racquet & Paddle Sports ShowSporting Goods

Bar Convent LondonEvents Services

Tiny Living @ NHSEvents Services

Bar Convent LondonEvents Services

The Snack ShowFood & Beverages

Natural Disaster & Emergency Management Expo (NDEM)Transportation, Logistics, Supply Chain and Storage

Bar Convent LondonEvents Services

World Travel Catering & Onboard Services ExpoAirlines and Aviation

FeiconConstrução

RX BrasilEvents Services

ISC BrasilAtividades de vigilância, segurança e investigação

FenatranTransporte rodoviário de carga

Loading…

FIEE Similar Companies

Molex

molex.com

Molex makes a connected world possible by enabling technologies that transform the future and improve lives. With a presence in more than 40 countries, Molex offers a complete range of connectivity products, services and solutions for the data communications, medical, industrial, automotive and consumer electronics industries. We’re doing more than developing solutions for our customers, we’re Creating Connections for Life.

Keysight Technologies

keysight.com

Keysight empowers innovators to explore, design, and bring world-changing technologies to life. As the industry’s premier global innovation partner, Keysight’s software-centric solutions serve engineers across the design and development environment, enabling them to deliver tomorrow’s breakthroughs at speed and with reduced risk. Keysight leverages its strength as the world’s leading test and measurement provider and today enables innovators to push the boundaries of engineering by quickly solving design, emulation, and test challenges to help create the best product experiences. Whether you're looking to improve your design and development process, optimize and secure your network, or harness AI and digital twins to get a head start on technologies like 6G, AV and EV, IoT, or quantum computing — Keysight accelerates innovation across the workflow with intelligent insights built on the most accurate measurements. Our fusion of technology knowledge, measurement science expertise, and tailored solutions helps you forge ahead with confidence in our connected and dynamic world. Keysight Technologies (NYSE: KEYS) is an S&P 500 technology company, headquartered in Santa Rosa, California, with offices and manufacturing worldwide. Keysight owns 2,000+ patents and our ~15,000 employees work with nearly 32,000 customers worldwide to start technology revolutions. Keysight customers span the communications, industrial automation, aerospace and defense, automotive, energy, semiconductor, and general electronics markets. Join us! To accelerate innovation to connect and secure the world, innovators start here, with Keysight.

Sanmina

sanmina.com

Sanmina Corporation (Nasdaq: SANM) is a leading integrated manufacturing solutions provider serving the fastest-growing segments of the global Electronics Manufacturing Services (EMS) market. Recognized as a technology leader, Sanmina Corporationprovides end-to-end manufacturing solutions, delivering superior quality and support to Original Equipment Manufacturers (OEMs) primarily in the communications networks, defense and aerospace, industrial and semiconductor systems, medical, multimedia, computing and storage, automotive and clean technology sectors. Sanmina Corporation has facilities strategically located in key regions throughout the world.

Delta Electronics

deltaww.com

Delta is a global innovative provider of switching power supplies and DC brushless fans, as well as a major source for power management solutions, components, visual displays, industrial automation, networking products, and renewable energy solutions. Delta Group has sales offices worldwide and manufacturing plants in Taiwan, China, Thailand, Mexico, India and Europe. As a global innovator in power electronics, Delta's mission is, "To provide innovative, clean and efficient energy solutions for a better tomorrow." Delta is committed to environmental protection and has implemented green, lead-free production and waste management programs for many years.

WEG

weg.net

Founded in 1961, WEG is a global electro-electronic equipment company, operating in the capital goods sector a with focus on electric motors, gearboxes and drives and controls, energy generation and transformers, electrification products and systems, automation and digitalization. WEG stands out in innovation by constantly developing solutions to meet the major trends in energy efficiency, renewable energy and electric mobility. With manufacturing units in 15 countries and present in more than 135 countries, the company has more than 47,000 employees worldwide. WEG’s net revenue reached R$ 38.0 billion in 2024, 57.0% from external markets.

Foxconn

cb foxconn.com

Established in Taiwan in 1974, Hon Hai Technology Group (Foxconn) (2317: Taiwan) is the world’s largest electronics manufacturer. Foxconn is also the leading technological solution provider, and it continuously leverages its expertise in software and hardware to integrate its unique manufacturing systems with emerging technologies. By capitalizing on its expertise in Cloud Computing, Mobile Devices, IoT, Big Data, AI, Smart Networks, and Robotics / Automation, the Group has expanded not only its capabilities into the development of electric vehicles, digital health and robotics, but also three key technologies –AI, semiconductors and new-generation communications technology – which are key to driving its long-term growth strategy and the four core product pillars: Consumer Products, Enterprise Products, Computing Products and Components and Others. In 2021, Hon Hai's annual revenue reached NT$5.99 trillion. The company has established R&D and manufacturing centers in other markets around the world including China, India, Japan, Vietnam, Malaysia, Czech Republic, U.S. and more. With a focus on research and development, the company owns more than 54,253 patents. In addition to maximizing value-creation for customers who include many of the world’s leading technology companies, Foxconn is also dedicated to championing environmental sustainability in the manufacturing process and serving as a best-practices model for global enterprises. The company has received widespread international accolades and recognition since its establishment. The company ranked 22nd on the Fortune Global 500 rankings in 2021 and 25th in the Top 100 Digital Companies in the Forbes ranking of the World’s Best Employers in 2019. Moreover, on Forbes’ World’s Best Employers 2021 rankings, the company ranked 1st in Taiwan. Foxconn is also the only Taiwanese private company awarded for 5 consecutive years of Clarivate Top 100 Global Innovators (2018 - 2022).

Bharat Heavy Electricals Limited

bhel.com

Established in 1964, BHEL is one of India's largest engineering and manufacturing enterprises in the energy and infrastructure sectors, and a leading power equipment manufacturer globally. BHEL serves the core sectors of the economy and provides a comprehensive portfolio of products, systems and services to customers in power, transmission, transportation, renewables, water, defence & aerospace, oil & gas, and industry. BHEL has created value for its stakeholders due to the scale and depth of its operations, rich experience, competent manpower, innovative ecosystem, diverse product-mix and focus on sustainable business solutions. BHEL’s greatest asset- its highly skilled and committed workforce of more than 34,000 employees is the cornerstone of its success. BHEL’s commitment to nation building reflects in many ways- in its contribution to the country’s installed power generation capacity; bringing the latest state-of-the-art technology to the country; consistent highest expenditure of more than 2.5% of its turnover on R&D and innovation in the Indian engineering segment; pan-India presence; establishment of world-class assets with presence in over 84 country across the globe, and contribution to the society at large through initiatives in skilling youth, health & hygiene, education, cleanliness and environment protection, to name a few. With a widespread network of 16 manufacturing facilities, 2 repair units, 4 regional offices, 8 service centres, 1 subsidiary, 3 active joint ventures, 15 regional marketing centres, 3 overseas offices and current project execution at more than 150 project sites across India and abroad, BHEL manufactures a wide range of high quality & reliable products adhering to national & international standards. BHEL has installed over 1000 utility sets worldwide with its installed base of supplied power generating equipment exceeding 185 GW. BHEL has also commissioned 200+ electric substations & 5 major HVDC projects in the country.

TE Connectivity

te.com

TE Connectivity plc (NYSE: TEL) is a global industrial technology leader creating a safer, sustainable, productive and connected future. As a trusted innovation partner, our broad range of connectivity and sensor solutions enable the distribution of power, signal and data to advance next-generation transportation, energy networks, automated factories, data centers enabling artificial intelligence and more. Our more than 90,000 employees, including 10,000 engineers, work alongside customers in approximately 130 countries. In a world that is racing ahead, TE ensures that EVERY CONNECTION COUNTS.

Midea Group

midea-group.com

Midea Group aspires to the vision of “Bringing Great Innovations to Life”, upholding the Founders’ philosophy of creating a better life through technology. Midea Group has evolved into a global leading technology company specializing in six major businesses including Smart Home Business, Industrial Technologies, Building Technologies, Robotics &Automation, Midea Healthcare and Annto Logistics. Over the past ten years, we have invested nearly 100 billion yuan in R&D and developed a global network spanning 38 R&D centers and 44 major production sites across the world. At present, Midea Group’s products and services serve more than 500 million customers in over 200 countries and regions, our brand portfolio contains Little Swan, Toshiba, WAHIN, COLMO, Clivet, Eureka, KUKA, GMCC, Welling, LINVOL, and Wandong. With nearly 200,000 employees globally and more than 40,000 based internationally, Midea Group ranks 277th on the Global Fortune 500 in 2024, marking the 9th consecutive year on the list. The company holds A/A2/A credit ratings from S&P, Moody's, and Fitch respectively. Midea Group places a strong focus on technology leadership, driving innovation across global markets. Midea adheres to the new strategic axis of "Technology Leadership, User Direct Access, Digital Intelligence Driven, and Global Breakthroughs," we advance our leadership in Smart Home and Smart Manufacturing while fostering talent. By providing growth opportunities in a dynamic, global environment, we empower our teams to shape the future of innovation.

Loading…

NEWS

FIEE CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 02, 2025 01:00 PM

India’s free cybersecurity initiative fights malware

India is offering free support to safeguard its citizens' digital devices through an initiative called Cyber Swachhta Kendra. This program...

Read Article

December 01, 2025 08:09 PM

No Cost Cybersecurity Services & Tools

CISA has curated a database of no cost cybersecurity services and tools as part of our continuing mission to reduce cybersecurity risk across U.S. critical...

Read Article

December 01, 2025 02:35 PM

Free Webinar: Strengthening Maryland’s Water Cybersecurity

Cyber threats targeting critical infrastructure are growing more sophisticated, and local govs need more tools to strengthen defenses.

Read Article

November 20, 2025 08:00 AM

Free cybersecurity conference held in Springfield to help prevent cybercrime

Online safety is at the forefront this month, and The Richard E. Neal Cyber Security Center of Excellence hosted a free Cyber Security...

Read Article

November 13, 2025 08:00 AM

Free cybersecurity incident response plan webinar is today at noon

Free cybersecurity incident response plan webinar is today at noon · Detect and Identify – alert and quickly mobilize the team · Contain – halt...

Read Article

October 30, 2025 07:00 AM

Free EPA Webinars on Strengthening Cybersecurity in Water Systems

The EPA will be hosting a series of free cybersecurity technical assistance courses for water systems, starting on November 5, 2025.

Read Article

October 28, 2025 07:00 AM

LSU is hosting a free cybersecurity seminar on AI, automation and more

LSU is hosting a free cybersecurity seminar on AI, automation and more ... LSU's Small Business Development Center is partnering with the LSU...

Read Article

October 23, 2025 07:00 AM

ESET releases free resources for Cybersecurity Awareness Month

October is Cybersecurity Awareness Month designed to raise awareness of the ways people can protect themselves online. To mark this ESET has...

Read Article

October 22, 2025 07:00 AM

NITDA/CISCO free cybersecurity training program 2025 for young Nigerians.

Applications are now open for the 2025 NITDA/CISCO free cybersecurity training program. The National Information Technology Development Agency (...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-45537

SUMMARY

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the construct_uri() function concatenates multiple URI components (protocol, username, domain, port, params) into a fixed 1024-byte global BSS buffer without any bounds checking. When a routing script calls construct_uri() with an attacker-controlled username, a combined component length exceeding 1024 bytes overflows the buffer, corrupting adjacent global data with attacker-controlled content. The overflow reaches disable_503_translation, a global flag controlling SIP 503 response handling, allowing an attacker to deterministically set the flag via the URI username and alter the server's routing behavior for subsequent messages. Because the same buffer is shared with contact_builder(), the overflow also corrupts that function's data, and without a memory sanitizer the adjacent globals are silently overwritten on every request containing a long username. This issue has been fixed in versions 3.6.6 and 4.0.0-rc1.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-18819

SUMMARY

A security vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8aab339798ed47e8c6d7d977ed97a82bd. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project maintainer confirms: "[I]t seems plausible, in that RackTables does not at this time have any CSRF prevention. You may assign a CVE ID to this, but there is no guarantee it will be handled in urgent, or even timely, manner, or at all."

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 4.3)

cvss2

Base Score: 5.0

Complexity: LOW

AV:N/AC:L/Au:N/C:N/I:P/A:N

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-18818

SUMMARY

A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-70620

SUMMARY

Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileged attackers to direct the server to probe internal network resources by supplying arbitrary URLs to the embedding endpoint configuration without scheme, host, IP range, or DNS rebind validation. Attackers can submit loopback addresses, RFC 1918 ranges, or link-local addresses through the embedding endpoint API to partially read responses from cloud instance metadata services, internal APIs, and other hosts reachable from the server.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

cvss4

Base Score: 6.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

2.3

REFERENCES

CVE-2026-70619

SUMMARY

Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-admin users to manage server-wide embedding backend configuration by invoking endpoint management routes that verify session authentication but omit the admin authorization guard. Attackers can supply an attacker-controlled URL to overwrite the embedding backend persisted in the endpoint configuration file and process environment, causing all subsequent embedding operations including chat messages, RAG queries, memory entries, and vault text to be transmitted in plaintext to the attacker-controlled destination, or delete the endpoint configuration to deny embedding service to all users.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…