What is the official website of Forestry Commission ?

The official website of Forestry Commission is https://www.gov.uk/government/organisations/forestry-commission.

What is Forestry Commission's cybersecurity risk score?

Forestry Commission has an AI-generated cybersecurity risk score of 771 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Forestry Commission experienced?

According to Rankiteo, Forestry Commission currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Forestry Commission been affected by any supply chain cyber incidents ?

According to Rankiteo, Forestry Commission has been affected by a supply chain cyber incident involving Fortinet, with the incident ID FORGOV1783297461.

Does Forestry Commission have SOC 2 Type 1 certification ?

According to Rankiteo, Forestry Commission is not certified under SOC 2 Type 1.

Does Forestry Commission have SOC 2 Type 2 certification ?

According to Rankiteo, Forestry Commission does not hold a SOC 2 Type 2 certification.

Does Forestry Commission comply with GDPR ?

According to Rankiteo, Forestry Commission is not listed as GDPR compliant.

Does Forestry Commission have PCI DSS certification ?

According to Rankiteo, Forestry Commission does not currently maintain PCI DSS compliance.

Does Forestry Commission comply with HIPAA ?

According to Rankiteo, Forestry Commission is not compliant with HIPAA regulations.

Does Forestry Commission have ISO 27001 certification ?

According to Rankiteo,Forestry Commission is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Forestry Commission operate in ?

Forestry Commission operates primarily in the Government Administration industry.

How many employees does Forestry Commission have ?

Forestry Commission employs approximately 2,425 people worldwide.

Does Forestry Commission own any subsidiaries ?

Forestry Commission presently has no subsidiaries across any sectors.

How many LinkedIn followers does Forestry Commission have ?

Forestry Commission's official LinkedIn profile has approximately 106,211 followers.

What is the NAICS classification code for Forestry Commission ?

Forestry Commission is classified under the NAICS code 92, which corresponds to Public Administration.

Does Forestry Commission have a Crunchbase profile ?

No, Forestry Commission does not have a profile on Crunchbase.

Does Forestry Commission have a LinkedIn profile ?

Yes, Forestry Commission maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/forestry-commission.

How many cybersecurity incidents has Forestry Commission experienced ?

As of July 29, 2026, Rankiteo reports that Forestry Commission has experienced 26 cybersecurity incidents.

How many peer or competitor companies does Forestry Commission have ?

Forestry Commission has an estimated 13,078 peer or competitor companies worldwide.

What types of cybersecurity incidents has Forestry Commission faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability, Breach, Ransomware and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Forestry Commission

Boost Score +25 with badge (5 left)

771

/1000

Fair

796

/1000

Fair

Forestry Commission Vendor Cyber Rating & Cyber Score

www.gov.uk

Add Your Compliance Badge

What do we do? We provide grants, licences and advice to private woodland owners to encourage new tree planting and to help keep private forests under sustainable management. Our plant health officers inspect wood imports at ports to minimise the risk from foreign pests and diseases. Our experts work with local authorities and landowners to contain and control any spread. We licence tree felling to protect our woodlands for generations to come.

Forestry Commission A.I CyberSecurity Scoring

Scoring History

Forestry Commission

Forestry Commission CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Foreign and Commonw...

Cyber Attack

100

7/2026

Fortinet

FORGOV178329746...

Cabinet Office

Breach

5/2026

CAB1777832879

Forestry Commission

Vulnerability

12/2025

DCM1765433387

Forestry Commission

Breach

11/2025

UK-523475211042...

Forestry Commission

Cyber Attack

100

10/2025

UK-556215510202...

Foreign and Commonw...

Breach

10/2025

FOR1766412101

Forestry Commission

Ransomware

100

9/2025

DCM1764770468

Forestry Commission

Breach

100

8/2025

UK-841081625

Forestry Commission

Breach

6/2025

HMR745060625

UK Home Office

Breach

4/2025

UK-1777581082

Forestry Commission

Breach

100

7/2024

UK-421016421104...

Forestry Commission

Breach

100

6/2024

UK-169221610212...

Forestry Commission

Breach

100

4/2024

UK-493314910132...

Forestry Commission

Breach

100

8/2023

UK-707072025

Forestry Commission

Breach

100

7/2023

UK-221002221104...

Forestry Commission

Cyber Attack

100

01/2023

DEP225811123

Forestry Commission

Breach

100

6/2022

UK-289342811142...

Forestry Commission

Breach

100

2/2022

UK-503305010202...

Forestry Commission

Breach

1/2022

UK-559215509112...

Forestry Commission

Breach

11/2021

GOV1527121122

Forestry Commission

Breach

100

10/2021

UK-576295710232...

HM Revenue & Custom...

Cyber Attack

9/2021

HMR1782752907

Forestry Commission

Breach

100

8/2021

UK-552175511242...

Forestry Commission

Breach

100

6/2021

UK-089380810032...

Forestry Commission

Cyber Attack

100

09/2015

NAT233920422

Forestry Commission

Breach

100

6/2010

UK-069420609202...

Loading…

A.I.

Forestry Commission Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Forestry Commission

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for Forestry Commission in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Forestry Commission in 2026.

Incident Types Forestry Commission vs Government Administration Industry Avg (This Year)

No incidents recorded for Forestry Commission in 2026.

Incident History - Forestry Commission (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Forestry Commission Subsidiaries

Forestry Commission

Government Administration

Website: https://www.gov.uk/government/organisations/forestry-commission

Company Size: 2,425

UK Civil ServiceGovernment Administration

Department for EducationGovernment Administration

TeachingPrimary and Secondary Education

Buying for SchoolsGovernment Administration

DfE Digital, Data and TechnologyGovernment Relations Services

Skills PartnerGovernment Administration

UK Ministry of DefenceDefense and Space Manufacturing

Defence Equipment & Support (DE&S)Defense and Space Manufacturing

Defence ProcurementDefense & Space

UK Home OfficeGovernment Administration

HM Revenue & CustomsGovernment Administration

National Crime Agency (NCA)Law Enforcement

UK Financial Intelligence Unit (UKFIU)Law Enforcement

National Economic Crime Centre (NECC)Law Enforcement

Department of Health and Social CareGovernment Relations Services

Department for Business and TradeGovernment Administration

Business SupportGovernment Relations

GREAT Trade and InvestmentWholesale Import and Export

UK Business and Trade - North AmericaGovernment Relations Services

OfstedGovernment Administration

Department for Work and Pensions (DWP)Government Administration

Disability ConfidentGovernment Administration

See PotentialGovernment Administration

Cabinet OfficeGovernment Administration

HM Government Public AppointmentsGovernment Administration

GOV.UKGovernment Relations Services

Department for Science, Innovation and TechnologyGovernment Administration

Careers at the Department for Science, Innovation and TechnologyGovernment Administration

Government Legal DepartmentLegal Services

Office for National StatisticsGovernment Administration

Government Statistical ServiceGovernment Administration

Civil Service Fast Stream Statisticians' OutreachGovernment Administration

Census2021Government Administration

DstlDefense and Space Manufacturing

Data Science ChallengeGovernment Administration

Ministry of Housing, Communities and Local Government - LegacyGovernment Administration

Northern PowerhouseCivic and Social Organizations

Ministry of Housing, Communities and Local Government - LegacyGovernment Administration

Office of Rail and Road (ORR)Truck Transportation

Competition and Markets AuthorityGovernment Administration

Charity Commission for England and WalesGovernment Administration

UK Export FinanceFinancial Services

OfqualGovernment Administration

HM Land RegistryGovernment Administration

OfwatUtilities

Regulators’ Alliance for Progressing Infrastructure Development (RAPID)Utilities

Infrastructure and Projects Authority (IPA)Government Administration

Attorney General's Office (UK)Government Administration

Northern Ireland OfficeGovernment Administration

Valuation Office AgencyGovernment Administration

Scotland OfficeGovernment Administration

Wales Office/Swyddfa CymruGovernment Administration

NS&IFinancial Services

Government Actuary's DepartmentGovernment Administration

UK Statistics Authority Government Administration

OfgemUtilities

Foreign and Commonwealth OfficeGovernment Administration

Department for Environment, Food and Rural AffairsGovernment Administration

Defra digital, data, technology and securityIT Services and IT Consulting

Defra Public AppointmentsGovernment Administration

HM TreasuryPublic Policy Offices

Office of Financial Sanctions Implementation (OFSI)Government Administration

Food Standards AgencyGovernment Administration

Starting a Food BusinessFood & Beverages

Crown Prosecution ServiceLaw Practice

Department for Culture, Media and SportGovernment Administration

Department for International Development (DFID)Government Administration

UK-Africa Investment Summit 2020Government Administration

Department for Transport (DfT), United KingdomGovernment Administration

Loading…

Forestry Commission Similar Companies

Region Midtjylland

regionmidtjylland.dk

Central Denmark Region is one of five regions in Denmark. Denmark is organised at three political and administrative levels: the national (government), the regional (5 regions) and the municipal level (98 municipalities). Each region is led by a Regional Council, consisting of 41 politicians elected every four years. The regions' responsibilities are within the areas of health, psychiatry, social og regional development. The region must secure the overall strategy and at the same time top quality services; be it in the personal educational contact at institutions or when a patient needs nerve fibre surgery. Facts - Central Denmark Region Central Denmark Region covers 19 municipalities and an area of 13,000 square kilometres. Central Denmark Region has a population of 1.3 million people - approx. 23% of the population in Denmark. Central Denmark Region has a gross budget of 28.9 billion DKK (2019). Central Denmark Region has approx. 30.000 employees. Health, psychiatry and social The primary responsibility of Central Denmark Region is healthcare. This includes being responsible for the nine somatic hospitals and eight psychiatric hospital departments, pre-hospital emergency services, general practitioners and practising specialist doctors. The region also operates a number of specialised social care institutions in agreement with local municipalities. Regional development Central Denmark Region is also responsible for regional development within the areas of public transport/mobility, education, culture and environment (soil contamination, groundwater protection and raw materials planning).

Assurance Maladie

ameli.fr

Travailler à l’Assurance Maladie, c’est donner une nouvelle dimension à votre métier et agir au quotidien pour la protection de notre système de santé. Participez à une grande diversité de projets dans un cadre bienveillant et soyez fier de contribuer à une mission essentielle : agir ensemble, protéger chacun. Depuis près de 80 ans, l'Assurance Maladie joue un rôle majeur au service de la solidarité nationale. Nous sommes convaincus que la clé de la pérennité du système de santé relève d'une responsabilité collective et réside dans l'implication forte de chacun de ses acteurs. Au sein de ce système, l'Assurance Maladie assume une triple mission : ⏺️ garantir un accès universel aux droits et permettre l'accès aux soins ⏺️ accompagner chacun dans la préservation de sa santé ⏺️ améliorer l'efficacité du système Toutes ses missions, l’Assurance Maladie les mène avec le souci d’assurer la meilleure qualité de service. Elle s’appuie pour cela sur un réseau de proximité qui couvre l’ensemble du territoire et l’engagement de plus de 80 000 collaborateurs qui agissent jour après jour à l’échelle départementale, régionale et nationale. Ensemble, au quotidien, ils font vivre ses valeurs d’universalité, de solidarité, de responsabilité et d’innovation.

City of Houston

cb houstontx.gov

Home to a respected and energetic cultural arts scene, celebrated restaurants featuring flavors from 35 countries, world-renowned theater groups and the brains behind U.S. space exploration, Houston is a diverse metropolis brimming with personality. With nearly 21,000 concerts, plays, exhibitions and other arts programs presented in Houston annually, residents and visitors have access to a wide variety of cultural programs. On any given night, it's a safe bet that there's a show somewhere in Houston's Theater District. More than 2 million people visit the Downtown area each year to attend one of the city's world-class performances. Within the Museum District you will find eighteen world-class institutions, including the Menil Collection, Museum of Fine Arts, Houston and the Houston Museum of Natural Science are clustered in this area, drawing a reported seven million visitors to the district each year. Houston’s restaurant scene is as ethnically diverse as its 4 million residents. ForbesTraveler.com ranked Houston as one of the best restaurant cities in America. The city is jam-packed with more than 8,000 tempting eateries that feature culinary flavors from more than 35 countries. With 56,405 acres of total park space, Houston rates first among the nation's 10 most populous cities in total acreage of park land. The 165 public and private golf courses around the city and teams in nearly every major professional sport keep sports fever high year-round. The city also employs over 22,000 full-time staff to keep the city running. We are always looking for everyone from Engineers to IT Professionals, from entry level to executive level. Check back here for current postings, follow us on Facebook at www.facebook.com/cohcareers or on Twitter @COHCareers for all the up to date recruitment happenings!

CONICET

conicet.gov.ar

El Consejo Nacional de Investigaciones Científicas y Técnicas (CONICET) es el principal organismo dedicado a la promoción de la ciencia y la tecnología en la Argentina. Su actividad se desarrolla en cuatro grandes áreas: • Ciencias agrarias, ingeniería y de materiales • Ciencias biológicas y de la salud • Ciencias exactas y naturales • Ciencias sociales y humanidades En el CONICET, además promovemos y gestionamos la transferencia de tecnologías, servicios y capacidades de Investigación y Desarrollo (I+D) que genera su comunidad científica hacia los sectores socioproductivos, Pymes, Gobiernos, organismos públicos y la sociedad civil. En ese sentido: • Conectamos recursos humanos altamente especializados con empresarios/as para generar oportunidades conjuntas. • Impulsamos la participación con cámaras y asociaciones empresarias, parques tecnológicos e industriales, organismos del Estado, ONG, organizaciones civiles, y redes nacionales e internacionales de vinculación tecnológica. • Facilitamos la transferencia al sector productivo mediante procesos de escalado, pruebas de concepto, entre otros. • Promovemos la creación de Empresas de Base Tecnológica. El CONICET es un ente autárquico del Estado Nacional en jurisdicción del Ministerio de Ciencia, Tecnología e Innovación.

Ministry of Health Saudi Arabia

moh.gov.sa

The Ministry of Health (MOH), by way of its objectives, policies and projects included in this strategy, seeks to accomplish a promising future vision; namely, delivering best-quality integrated and comprehensive healthcare services. Carrying health conditions or health status of Saudi inhabitants to the best and highest possible level, in terms of justice and equality in providing healthcare, and in terms of effectiveness and the possibility of incurring the financial burden of the treatment and healthcare. In doing so, the MOH takes as its target meeting citizens’ aspirations in this regard, by providing them with high-quality general and specialized health services, and covering all the population with these services. Creating a sole and exclusive entity to formulate health policies including health insurance services, etc. (such as operating the recently established Health Services Council.) Adopting a public and national health strategy which focuses of the main morbidity burdens; including non-communicable diseases, nutrition, reproductive health, smoking (tobacco-use), AIDS, traffic accidents, and injuries. The system must have an effective and fair method for estimating risks and benefits. Working to diversify sources of revenues to finance the system effectively. These sources must include also public revenues and insurance premiums, in addition to the equally allocated costs and taxes.

Department of Health (Philippines)

doh.gov.ph

The Philippine Department of Health (abbreviated as DOH; Filipino: Kagawaran ng Kalusugan) is the executive department of the Philippine government responsible for ensuring access to basic public health services by all Filipinos through the provision of quality health care and the regulation of all health services and products. It is the government's over-all technical authority on health. It has its headquarters at the San Lazaro Compound, along Rizal Avenue in Manila. The department is led by the Secretary of Health, nominated by the President of the Philippines and confirmed by the Commission on Appointments. The Secretary is a member of the Cabinet. The current Secretary of Health is Francisco Duque.

FDA

fda.gov

The Food and Drug Administration is an agency within the Department of Health and Human Services. The FDA is responsible for protecting the public health by ensuring the safety, efficacy, and security of human and veterinary drugs, biological products, and medical devices; and by ensuring the safety of our nation's food supply, cosmetics, and products that emit radiation. FDA also has responsibility for regulating the manufacturing, marketing, and distribution of tobacco products to protect the public health and to reduce tobacco use by minors. FDA is responsible for advancing the public health by helping to speed innovations that make medical products more effective, safer, and more affordable and by helping the public get the accurate, science-based information they need to use medical products and foods to maintain and improve their health. FDA also plays a significant role in the Nation's counterterrorism capability. FDA fulfills this responsibility by ensuring the security of the food supply and by fostering development of medical products to respond to deliberate and naturally emerging public health threats.

Council Careers Victoria

asn.au

Victorian local government jobs offer opportunities for people with diverse skills. The sector delivers more than 100 services and employs staff in the areas of health and community care, corporate and business support, engineering, planning and community development, and environment and emergency management. Local government offers you the opportunity to: • work directly with the community • work in any location across the state • be involved in on-going learning and development • negotiate flexible working arrangements • take part in employee health and recreation programs • undertake further study.

State of Michigan

Michigan.gov

Every day the contributions and achievements of State of Michigan employees have a direct impact on over 10 million Michiganders across the state. If you're looking for a fulfilling career in state government that can make a real difference in the lives of others, you can find your place working with us. We have opportunities in a number of career pathways, including, but not limited to, business and administrative support, education and human services, IT and computers, medical and healthcare, natural resources, law enforcement and public safety, skilled trades and more. Join our team for an: - Opportunity to make a difference - Challenging and rewarding work - Competitive salaries - Fun working environment - Great benefits (community service, vacation and sick leave, paid holidays, paid parental leave, longevity bonuses) - Job stability and career advancement - Flexible alternative and remote work schedules - Tuition discounts and student loan forgiveness - Professional development/training - Employee discount plan With positions in over 18 state departments, your perfect career fit is waiting for you at the State of Michigan. From urban centers to beach towns to the great outdoors, the opportunities are endless in Pure Michigan. With your state salary and benefits and Michigan’s affordable cost of living, you can explore all that Michigan has to offer. Ready to join our team? Visit www.Michigan.gov/Employment to search hundreds of state job openings by key word, job type, location, department, job category, salary and more. The State of Michigan is an Equal Opportunity Employer. We aim to recruit, hire, develop, and retain a diverse and high performing workforce. Our diversity helps drive our creative and effective problem solving, mutual respect, teamwork, and effective communication with the people we serve. Follow us on social media at www.Michigan.gov/SocialMedia and search hashtag #MiGovJobs for updates from state agencies.

Loading…

NEWS

Forestry Commission CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 23, 2026 08:00 AM

Commission presents proposals for new EU cybersecurity rules and Digital Networks Act - Finnish Government

The European Commission presented proposals on 20 and 21 January 2026 for new cybersecurity regulation and the Digital Networks Act (DNA).

Read Article

January 20, 2026 08:00 AM

New measures to strengthen cybersecurity resilience and capabilities

Find out how the EU plans to improve the efficiency and security of EU cybersecurity certification, how to reinforce ENISA and how to...

Read Article

January 12, 2026 08:00 AM

E&E News: Committee pushes bills to bolster DOE cybersecurity efforts

E&E DAILY | Lawmakers on the House Energy and Commerce Committee will weigh legislation this week that would reauthorize key cybersecurity...

Read Article

November 06, 2025 08:00 AM

USDA nominee for rural development eyes cyber, IT assists

Glen Smith told senators that threats against rural critical infrastructure scare “the bejeebus out of” him and he won't hesitate to ask...

Read Article

November 04, 2025 08:00 AM

E&E News: Committee OKs Agriculture Department nominees

E&E DAILY | The Senate Agriculture, Nutrition and Forestry Committee on Monday advanced nominees for three key posts at the Agriculture...

Read Article

October 31, 2025 07:00 AM

E&E News: Emergency language in wildfire bill splits environmentalists

E&E DAILY | A fast-moving bill to reduce wildfire risks in national forests would give the Agriculture Department a work-around past even...

Read Article

October 22, 2025 07:00 AM

E&E News: ‘Fix Our Forests’ bill gets Senate momentum

E&E DAILY | A Senate committee easily passed legislation Tuesday to reduce legal and environmental checks on forest thinning and logging...

Read Article

October 21, 2025 07:00 AM

Article | Senate Agriculture Committee advances bipartisan ‘Fix Our Forests Act’

The Senate Agriculture Committee voted Tuesday to advance bipartisan legislation that proponents say will help mitigate wildfire risk by...

Read Article

October 20, 2025 07:00 AM

E&E News: Bipartisan bill to combat wildfires set for committee vote

E&E DAILY | As the threat of wildfires continues to grow, lawmakers plan to take action this week with a vote on significant legislation...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66064

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/handler.go sendFile handler opened files using a cleaned path but derived the authorization filename from raw req.URL.Path, so a trailing slash could bypass .goshs ACL-file protection and block-list checks. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-66063

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.5, the httpserver/updown.go multipart upload handler split part.FileName() on / but did not reject .., allowing an unauthenticated upload with filename .. to create a file outside the served tree. This issue is fixed in version 2.1.5.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

3.9

REFERENCES

CVE-2026-64863

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. Prior to 2.1.4, the httpserver/server.go wdGuard handled WebDAV MOVE as a write-only method and did not enforce --no-delete, allowing WebDAV clients to delete or overwrite files via MOVE with Overwrite: T. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-62325

SUMMARY

goshs is a feature-rich single-binary file server for red teamers and developers. From 2.1.3 until 2.1.4, the sftpserver/sftpserver.go password handler used Username != "" && Password != "", so running goshs with -b 'admin:' -sftp and no -fkf left both SFTP authentication handlers unset and allowed unauthenticated file access. This issue is fixed in version 2.1.4.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 9.1)

cvss3

Base Score: 9.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

3.9

REFERENCES

CVE-2026-59921

SUMMARY

Netty is an asynchronous, event-driven network application framework. Prior to versions 4.1.136.Final and 4.2.16.Final, HttpPostRequestEncoder constructs multipart HTTP request bodies by directly concatenating user-supplied filenames and field names into Content-Disposition MIME headers without validating or sanitizing CRLF characters (\r\n). Since MIME headers are delimited by CRLF, an attacker who controls the filename can inject arbitrary MIME headers into the multipart body part. The root cause is that neither the encoder nor the FileUpload implementations' setFilename() methods, which only check for null, neutralize CRLF characters before the filename is embedded into the header. This issue has been fixed in versions 4.1.136.Final and 4.2.16.Final.

Published

Date2026-07-28

Updated

Date2026-07-28

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.1

REFERENCES

https://github.com/netty/netty/security/advisories/GHSA-gcjf-9mgh-3p7g

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…