What is the official website of Flagstar Business Banking ?

The official website of Flagstar Business Banking is https://www.Flagstar.com.

What is Flagstar Business Banking's cybersecurity risk score?

Flagstar Business Banking has an AI-generated cybersecurity risk score of 754 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Flagstar Business Banking experienced?

According to Rankiteo, Flagstar Business Banking currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Flagstar Business Banking been affected by any supply chain cyber incidents ?

According to Rankiteo, Flagstar Business Banking has been affected by a supply chain cyber incident involving AccellionX, with the incident ID FLA245080525.

Does Flagstar Business Banking have SOC 2 Type 1 certification ?

According to Rankiteo, Flagstar Business Banking is not certified under SOC 2 Type 1.

Does Flagstar Business Banking have SOC 2 Type 2 certification ?

According to Rankiteo, Flagstar Business Banking does not hold a SOC 2 Type 2 certification.

Does Flagstar Business Banking comply with GDPR ?

According to Rankiteo, Flagstar Business Banking is not listed as GDPR compliant.

Does Flagstar Business Banking have PCI DSS certification ?

According to Rankiteo, Flagstar Business Banking does not currently maintain PCI DSS compliance.

Does Flagstar Business Banking comply with HIPAA ?

According to Rankiteo, Flagstar Business Banking is not compliant with HIPAA regulations.

Does Flagstar Business Banking have ISO 27001 certification ?

According to Rankiteo,Flagstar Business Banking is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Flagstar Business Banking operate in ?

Flagstar Business Banking operates primarily in the Banking industry.

How many employees does Flagstar Business Banking have ?

Flagstar Business Banking employs approximately None employees people worldwide.

Does Flagstar Business Banking own any subsidiaries ?

Flagstar Business Banking presently has no subsidiaries across any sectors.

How many LinkedIn followers does Flagstar Business Banking have ?

Flagstar Business Banking's official LinkedIn profile has approximately 162 followers.

What is the NAICS classification code for Flagstar Business Banking ?

Flagstar Business Banking is classified under the NAICS code 52211, which corresponds to Commercial Banking.

Does Flagstar Business Banking have a Crunchbase profile ?

No, Flagstar Business Banking does not have a profile on Crunchbase.

Does Flagstar Business Banking have a LinkedIn profile ?

Yes, Flagstar Business Banking maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/flagstar-business-banking.

How many cybersecurity incidents has Flagstar Business Banking experienced ?

As of August 5, 2026, Rankiteo reports that Flagstar Business Banking has experienced 5 cybersecurity incidents.

How many peer or competitor companies does Flagstar Business Banking have ?

Flagstar Business Banking has an estimated 7,453 peer or competitor companies worldwide.

What types of cybersecurity incidents has Flagstar Business Banking faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach and Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

FBB

Boost Score +25 with badge (5 left)

754

/1000

Fair

779

/1000

Fair

Flagstar Business Banking Vendor Cyber Rating & Cyber Score

Flagstar.com

Add Your Compliance Badge

Thank you for visiting Flagstar Bank on LinkedIn, and we look forward to being part of your financial journey. On December 1, 2022, New York Community Bank (NYCB) and Flagstar Bank joined together to become one company. Today, New York Community Bancorp, Inc. is the parent company of Flagstar Bank, N.A., one of the largest regional banks in the country. The company is headquartered in Hicksville, New York, with regional headquarters in Troy, Michigan. The combined company has assets of nearly $90 billion. Together, we operate almost 390 branches across 10 states, including strong footholds in the Northeast and Midwest with exposure to high growth markets in the Southeast and on the West Coast. Its Flagstar Mortgage Division operates a

FBB A.I CyberSecurity Scoring

Scoring History

FBB

Flagstar Business Banking CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Flagstar Business B...

Breach

10/2023

FLA2323151023

Flagstar Business B...

Vulnerability

5/2023

FLA825072625

Flagstar Business B...

Breach

12/2021

FLA240072525

Flagstar Business B...

Breach

6/2021

FLA319283111072...

Flagstar Bank

Vulnerability

1/2021

AccellionX

FLA245080525

Loading…

A.I.

FBB Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for FBB

Incidents vs Banking Industry Avg (This Year)

No incidents recorded for Flagstar Business Banking in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Flagstar Business Banking in 2026.

Incident Types FBB vs Banking Industry Avg (This Year)

No incidents recorded for Flagstar Business Banking in 2026.

Incident History - FBB (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Flagstar Business Banking Subsidiaries

FBB

Banking

Website: https://www.Flagstar.com

Company Size: 5,001-10,000 employees

Flagstar BankBanking

Flagstar Third Party OriginationBanking

Flagstar Commercial & Corporate BankingBanking

Loading…

Flagstar Business Banking Similar Companies

Halkbank

cb halkbank.com.tr

23 Mayıs 1938 tarihinde faaliyete geçen Halkbank, kuruluşundan bu yana reel sektöre kesintisiz finansal destek misyonuyla çalışarak, bireysel ve kurumsal müşterilerine bankacılık ürün ve hizmetlerini üstün bir kalitede sunmaktadır. Halkbank, halktan ve çalışanlarından aldığı güç, nitelikli insan kaynağı ve sahip olduğu yenilikçi teknolojiler ile başta esnaf, sanatkar ve KOBİ’ler olmak üzere tüm müşterilerine hızlı, güvenli, kaliteli ürün ve hizmetler sunmak, müşteri odaklı dijital çözümlerle müşteri memnuniyetini artırmak; sosyal sorumluluk bilinciyle ülkemizin gelişmesine ve kalkınmasına destek olarak tüm paydaşlar için yüksek katma değer oluşturmaktadır. Halkbank, esnafın KOBİ'ye, KOBİ'nin büyük sermaye erbabına dönüşümüne destek olmaktadır. KOBİ Bankacılığı alanında geliştirdiği yenilikçi ürün ve hizmetlerle ülkemizde lider bankalar arasında yer alan Halkbank, işletmelerin finansal ve finansman dışı ihtiyaçlarına yönelik özel çözümler üretmektedir. 2019 yılsonu itibarıyla yurt dışında 6 şubesi, 1 ülke müdürlüğü, 3 yurt dışı temsilciliği, 4.051 ATM’si, telefon ve internet bankacılığı, mobil bankacılık uygulamalarıyla, müşterilerine eşsiz bir bankacılık deneyimi sunan Halkbank, yenilikçi ürün ve hizmetleriyle, küresel bir vizyonla hizmet vermektedir.

Crédit Mutuel

creditmutuel.com

Un modèle mutualiste au service des clients et des salariés. Réseau bancaire mutualiste constitué de 2124 Caisses locales le Crédit Mutuel se compose de 18 fédérations régionales, couvrant tout le territoire français. Société de personnes et non de capitaux, le Crédit Mutuel n’est pas coté en Bourse. Sa stratégie est ainsi dégagée de la recherche de la seule rentabilité à court terme, au profit d’un développement pensé sur le long terme. Son objectif central : rendre un service de qualité au coût le plus juste à tous ses sociétaires. Son organisation décentralisée favorise ainsi la qualité de service aux clients et la réactivité, par des circuits de décision courts. Reconnu à la fois par ses clients et les professionnels de la finance, le Crédit Mutuel décroche régulièrement des titres qui confortent son modèle mutualiste et ses valeurs de solidarité, responsabilité, égalité, proximité et responsabilité sociale portées par les salariés et les clients- sociétaires. Au-delà de son réseau, le Crédit Mutuel constitue un Groupe qui comprend également plusieurs filiales dont certaines sont implantées à l’étranger. Les nouveaux collaborateurs du Crédit Mutuel apprécient tout particulièrement : - un circuit de recrutement court, axé sur des entretiens évaluant notamment la personnalité et la motivation ; - un parcours d’intégration précis, suivi par la fonction Ressources Humaines. Les salariés apprécient tout particulièrement : - le Système d’Information au service du développement commercial ; - un management au travers d’objectifs collectifs ; - des démarches et outils de gestion des carrières et des compétences facilitant la progression dans l’entreprise ; - la qualité des formations de préparation ou d’accompagnement des changements d’emploi ; - la diversité des opportunités d’évolution, principalement commerciale, sur tous les marchés, dans toutes les entités du Groupe.

Maybank

maybank.com

Maybank Group is the leading financial services provider in Malaysia catering to the needs of consumers, investors, entrepreneurs, non-profit organisations and corporations. The Group, which has expanded internationally, has the largest network among Malaysian banks of over 2,400 branches and offices in 20 countries, employing over 44,000 Maybankers and serving over 22 million customers. It is the only regional bank with a presence in all 10 ASEAN countries (as of November 2016). By strengthening our core business and franchise, we gain competitive advantage by achieving synergies across our diverse group. Domestically we aim to achieve leadership across key and profitable segments. Internationally we capture value from new investments and continue to pursue organic expansion by delivering innovation and superior customer value. We are a top recruiter of talent and view our leadership pool and talent pipeline as key to realising our aspirations. We constantly seek to enhance performance management and achieve cost optimisation by focusing on effective IT operations and enhancing employee productivity. Maybank & Maybank Islamic are members of PIDM in Malaysia.

Philippine National Bank

pnb.com.ph

Philippine National Bank is one of the country’s largest private universal banks in terms of assets and deposits. It provides a full range of banking and other financial services to its highly diverse clientele comprised of individual depositors, small and medium enterprises, domestic and international corporations, government institutions, and overseas Filipinos. Backed by over a century of stability and excellence, PNB looks forward to more years of serving its customers first. As of end-2017, PNB has a total of 692 branches and 1,243 ATMs strategically located nationwide. Plus, PNB maintained its position as the Philippine bank with the most extensive international footprint with 72 overseas branches, representative offices, remittance centers and subsidiaries across Asia, Europe, the Middle East, and North America. If you need assistance, please contact the Bank's Customer Care hotline at (+632) 8573-8888 or email at [email protected]. Visit pnbph.net/Consumer-Assistance-Process to know more. Deposits are insured by PDIC up to P1 Million per depositor. Philippine National Bank (PNB) is regulated by the Bangko Sentral ng Pilipinas. https://www.bsp.gov.ph

Security Bank Corporation

cb securitybank.com

Security Bank is one of the Philippines’ best-capitalized private domestic universal banks. Established in 1951 and publicly listed with the Philippine Stock Exchange (PSE: SECB) in 1995, our major businesses cover retail, corporate, commercial, and business (MSME) banking. We’re recognized as an Employer of Choice in Philippine banking by various award-giving bodies for our values-based culture, industry-leading engagement and benefits, and commitment to work-life balance. Most recently, we ranked #2 best employer in the Philippines and #54 globally on the prestigious Forbes’ World’s Best Employers 2023 list. At Security Bank, our approach to Human Capital Management (HCM) is embodied by our Employee Value Proposition (EVP): “YOU matter.” Start your BetterBankingcareer with us today. For the complete list of Security Bank's awards, you may visit: https://www.securitybank.com/about-us/awards/

First Citizens Bank

cb firstcitizens.com

First Citizens Bank helps personal, business, commercial and wealth clients build financial strength that lasts. Headquartered in Raleigh, N.C., First Citizens has built a unique legacy of strength, stability and long-term thinking that has spanned generations. First Citizens offers an array of general banking services including a network of more than 500 branches and offices in 30 states; commercial banking expertise delivering best-in-class lending, leasing and other financial services coast to coast; innovation banking serving businesses at every stage; and a nationwide direct bank. Parent company First Citizens BancShares, Inc. (NASDAQ: FCNCA) is a top 20 U.S. financial institution with more than $200 billion in assets. Visit firstcitizens.com or call toll-free 1.888.FC DIRECT (1.888.323.4732). First Citizens Bank. Forever First®. Member FDIC. Equal Housing Lender. Social Media Terms of Use: https://www.firstcitizens.com/socialterms

National Bank of Egypt (NBE)

cb nbe.com.eg

Since its inception in 1898 with a capital of GBP1 million, NBE has been regarded as one of the oldest and most respected commercial banks in Egypt.Never isolated from national issues or concerns, NBE has been the primary supporter of Egypt’s national economy by financing the major Egyptian national projects. NBE’s missions and operations have continuously evolved throughout history and the economic and political changes experienced by the country.NBE was entrusted with issuing banknotes and handling government accounts, then in the 1950’s its activities evolved to undertaking the duties of the Central Bank. In the 1960’s it focused on commercial banking while still handling the central banking duties in locations where the Central Bank had no branches. Eventually, issuing and managing Investment Certificates for the State.NBE currently controls 23.6% of the market share of total assets in the Egyptian banking sector, 25.8% of total deposits, and 21.8% of total loans. NBE owns a large network includes over 337 branches, offices and banking units across the country, alongside an international presence through NBE (United Kingdom), NBE (Republic of the Sudan) and NBE’s branches in New York (United States of America) and Shanghai (People’s Republic of China), as well as representative offices in Johannesburg (South Africa), Dubai (United Arab Emirates), and Adis Ababa (Republic of Ethiopia), in addition to a branch in the Dubai International Finance Center.NBE also has a network of correspondents throughout the world, but centered in Europe— Egypt’s primary trade partner.NBE is always keen on an effective presence in brokerage, financing different sectors, and maintaining the client’s trust by offing the best and latest services.Whilst leading the local banking market,NBE is continuously upgrading its network of branches and channels of electronic communication, and strives to refine its human resources through advanced national and international training programs.

QNB Türkiye

qnb.com.tr

Finansbank A.Ş. 26 Ekim 1987 tarihinde iş insanı Hüsnü Özyeğin liderliğinde 100 ortakla Bankalar Kanunu ve Türk Ticaret Kanunu hükümleri uyarınca kuruldu. Sektörde hızlı büyeme ile ilk 5 büyük özel banka arasına giren QNB Finansbank, 2006 yılında Yunanistan'ın en büyük bankası National Bank of Greece (NBG) tarafından satın alındı. Bu birleşme sonucunda NBG'nin Güneydoğu Avrupa'da sahip olduğu lider konumu ile bankanın Türkiye'deki yüksek büyüme potansiyeli bir araya geldi. 2006 yılından itibaren bireysel bankacılıkta da hızla büyüyen Finansbank; kredi kartı, dijitalleşme, teknoloji alanındaki yatırımları ve yarattığı çözümleri ile sektörde ilklere imza atan banka konumuna geldi. Ekim 2012'de tüm hizmetlerini sadece dijital kanallar üzerinden sunan ve Türkiye'nin ilk şubesiz dijital bankası olan Enpara.com'u kuran Finansbank, bu alanda Türkiye'de sektörde yeni bir dönemin kapılarını açtı. 2016 yılının haziran ayında Orta Doğu ve Afrika bölgesinin lider finansal kuruluşu olan Katar'ın en büyük bankası Qatar National Bank S.A.Q (QNB Group) tarafından satın alınan QNB Finansbank, uluslararası bir yapının parçası haline geldi. Böylelikle bankanın yeni ismi Ekim 2016 itibarıyla QNB Finansbank oldu. QNB Group'un, global bir marka olma vizyonu doğrultusunda ismini 2024 yılının Ekim ayı itibarıyla QNB Türkiye olarak yeniledi. QNB Türkiye, kurum kültürünü geleceğe taşıyan dinamik ve yenilikçi bir yapıya sahip. "Önce İnsan'' anlayışıyla çalışanların gelişimine öncelik veren banka, "Güven'' ile güçlü bir iş birliği ortamı kuruyor. Bankanın değerleri arasında yer alan "Adaptasyon'' ile değişimlere hızla uyum sağlarken, "Öncü Olmak'' vizyonuyla sektörde fark yaratıyor, "Birlikte Gelişim'' ilkesiyle de başarıya hep birlikte ulaşıyor. QNB Türkiye, çatısı altındaki iştirakleri QNB Leasing, QNB Invest, QNB Portföy, QNB Faktoring, QNB Sağlık, IBTech ve QNB eSolutions ile müşterilerinin tüm finansal ihtiyaçlarına yaratıcı, hızlı ve kolay çözümler sunmaya devam ediyor.

IDBI Bank

idbibank.in

Welcome to IDBI Bank's LinkedIn page! We are a leading bank in India, with a rich legacy. At IDBI Bank, we believe in empowering our customers by providing them with a wide range of banking products and services to meet their financial needs. Whether you are an individual, a small business owner, or a large corporation, we have tailored solutions that are designed to help you achieve your financial goals. Our product portfolio includes savings accounts, current accounts, fixed deposits, loans, credit cards, and many more. We offer digital banking services such as Internet banking, mobile banking, and e-wallets to make banking more convenient and accessible for our customers. At IDBI Bank, we strongly believe in creating a culture of innovation, learning, and growth for our employees. We provide a supportive work environment that encourages our employees to explore their potential and develop new skills. Follow our LinkedIn page to stay updated on our latest news, events, and insights. We are dedicated to serving our customers and communities, and we look forward to connecting with you on LinkedIn. Thank you for connecting with IDBI Bank!

Loading…

NEWS

Flagstar Business Banking CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 19, 2026 04:51 PM

TeQuion Brookins - 20 in their 20s 2020

TeQuion Brookins set out on a course to become a pharmacist but pivoted to business after earning her bachelor's in biochemistry and molecular biology from...

Read Article

March 17, 2026 01:24 AM

Flagstar Bank Expands Technology Leadership Team

Flagstar Bank, N.A. has announced the appointment of five senior technology leaders to accelerate the next phase of its "Simple and...

Read Article

March 17, 2026 12:43 AM

Flagstar Bank's Advancement in Technology: Moving Forward with Strategic Development

Flagstar Bank Advances Digital Transformation with Expanded Tech LeadershipFlagstar Bank, N.A. is making notable progress in its digital...

Read Article

March 10, 2026 07:00 AM

Flagstar Bank racks up awards for middle market and small business service

Crisil Coalition Greenwich names Flagstar Bank Best Bank for Service in U.S. middle market banking for 2026, after 2025 small business...

Read Article

March 05, 2026 08:00 AM

Flagstar Bank's IDR Upgraded to 'BB+' by Fitch, Outlook Remains Stable

Fitch Ratings (“Fitch”) has upgraded the credit ratings of Flagstar Bank, N.A. FLG. The rating agency raised the bank's Long-Term Issuer...

Read Article

February 20, 2026 08:00 AM

Michigan Federal Judge Grants Preliminary Approval to $31.5 Million Flagstar Bank Data Breach Class Settlement

A Michigan federal judge has granted preliminary approval to a $31.5 million settlement resolving consolidated class action claims that...

Read Article

January 14, 2026 08:00 AM

Cybersecurity, fraud attacks may cause systemic risk in 2026

Defenses against financial schemes, both physical and online, could leave bank executives scrambling to keep up with the pace of bad actors.

Read Article

January 08, 2026 08:00 AM

Pinnacle Apartment Sale Moves Ahead Despite New York City Objection

An auction for roughly 5500 rent-regulated apartments takes place on Thursday after a bankruptcy judge rejected the city's request to delay...

Read Article

January 06, 2026 08:00 AM

New York City Moves to Block Bankruptcy Sale of Rent-Regulated Apartments

Mayor Zohran Mamdani seeks to delay an auction of 5500 Pinnacle Group units, arguing the buyer lacks the capacity to protect tenants and pay...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-45537

SUMMARY

OpenSIPS is a Session Initiation Protocol (SIP) server implementation. In versions prior to 3.6.6 and 4.0.0-rc1, the construct_uri() function concatenates multiple URI components (protocol, username, domain, port, params) into a fixed 1024-byte global BSS buffer without any bounds checking. When a routing script calls construct_uri() with an attacker-controlled username, a combined component length exceeding 1024 bytes overflows the buffer, corrupting adjacent global data with attacker-controlled content. The overflow reaches disable_503_translation, a global flag controlling SIP 503 response handling, allowing an attacker to deterministically set the flag via the URI username and alter the server's routing behavior for subsequent messages. Because the same buffer is shared with contact_builder(), the overflow also corrupts that function's data, and without a memory sanitizer the adjacent globals are silently overwritten on every request containing a long username. This issue has been fixed in versions 3.6.6 and 4.0.0-rc1.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-18819

SUMMARY

A security vulnerability has been detected in RackTables up to 0.22.0/e5fff9f8aab339798ed47e8c6d7d977ed97a82bd. This vulnerability affects unknown code. The manipulation leads to cross-site request forgery. The attack is possible to be carried out remotely. The exploit has been disclosed publicly and may be used. The project maintainer confirms: "[I]t seems plausible, in that RackTables does not at this time have any CSRF prevention. You may assign a CVE ID to this, but there is no guarantee it will be handled in urgent, or even timely, manner, or at all."

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 4.3)

cvss2

Base Score: 5.0

Complexity: LOW

AV:N/AC:L/Au:N/C:N/I:P/A:N

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-18818

SUMMARY

A weakness has been identified in Ehco1996 django-sspanel up to 2023.12.26. This affects the function TicketDetailView of the file apps/sspanel/views.py of the component Support Ticket Handler. Executing a manipulation can lead to authorization bypass. The attack can be executed remotely. The vendor was contacted early about this disclosure but did not respond in any way. This vulnerability only affects products that are no longer supported by the maintainer.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-70620

SUMMARY

Odysseus before commit 87babb5 contains a server-side request forgery vulnerability that allows admin-privileged attackers to direct the server to probe internal network resources by supplying arbitrary URLs to the embedding endpoint configuration without scheme, host, IP range, or DNS rebind validation. Attackers can submit loopback addresses, RFC 1918 ranges, or link-local addresses through the embedding endpoint API to partially read responses from cloud instance metadata services, internal APIs, and other hosts reachable from the server.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:N/A:N

cvss4

Base Score: 6.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

2.3

REFERENCES

CVE-2026-70619

SUMMARY

Odysseus before commit bf325f6 contains a missing authorization vulnerability that allows authenticated non-admin users to manage server-wide embedding backend configuration by invoking endpoint management routes that verify session authentication but omit the admin authorization guard. Attackers can supply an attacker-controlled URL to overwrite the embedding backend persisted in the endpoint configuration file and process environment, causing all subsequent embedding operations including chat messages, RAG queries, memory entries, and vault text to be transmitted in plaintext to the attacker-controlled destination, or delete the endpoint configuration to deny embedding service to all users.

Published

Date2026-08-04

Updated

Date2026-08-04

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…