What is the official website of Fuller's Brewery ?

The official website of Fuller's Brewery is https://www.fullersbrewery.co.uk/.

What is Fuller's Brewery's cybersecurity risk score?

Fuller's Brewery has an AI-generated cybersecurity risk score of 766 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Fuller's Brewery experienced?

According to Rankiteo, Fuller's Brewery currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Fuller's Brewery been affected by any supply chain cyber incidents ?

According to Rankiteo, Fuller's Brewery has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Oracle (Incident ID: CONDAVORASANASA1770645741) Oracle (Incident ID: ADIHEAHARMARTHEJAG1767017696)

Does Fuller's Brewery have SOC 2 Type 1 certification ?

According to Rankiteo, Fuller's Brewery is not certified under SOC 2 Type 1.

Does Fuller's Brewery have SOC 2 Type 2 certification ?

According to Rankiteo, Fuller's Brewery does not hold a SOC 2 Type 2 certification.

Does Fuller's Brewery comply with GDPR ?

According to Rankiteo, Fuller's Brewery is not listed as GDPR compliant.

Does Fuller's Brewery have PCI DSS certification ?

According to Rankiteo, Fuller's Brewery does not currently maintain PCI DSS compliance.

Does Fuller's Brewery comply with HIPAA ?

According to Rankiteo, Fuller's Brewery is not compliant with HIPAA regulations.

Does Fuller's Brewery have ISO 27001 certification ?

According to Rankiteo,Fuller's Brewery is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Fuller's Brewery operate in ?

Fuller's Brewery operates primarily in the Food and Beverage Services industry.

How many employees does Fuller's Brewery have ?

Fuller's Brewery employs approximately 1,063 people worldwide.

Does Fuller's Brewery own any subsidiaries ?

Fuller's Brewery presently has no subsidiaries across any sectors.

How many LinkedIn followers does Fuller's Brewery have ?

Fuller's Brewery's official LinkedIn profile has approximately followers.

What is the NAICS classification code for Fuller's Brewery ?

Fuller's Brewery is classified under the NAICS code 722, which corresponds to Food Services and Drinking Places.

Does Fuller's Brewery have a Crunchbase profile ?

No, Fuller's Brewery does not have a profile on Crunchbase.

Does Fuller's Brewery have a LinkedIn profile ?

Yes, Fuller's Brewery maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/fuller's-brewery.

How many cybersecurity incidents has Fuller's Brewery experienced ?

As of October 20, 2026, Rankiteo reports that Fuller's Brewery has experienced 21 cybersecurity incidents.

How many peer or competitor companies does Fuller's Brewery have ?

Fuller's Brewery has an estimated 8,861 peer or competitor companies worldwide.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Fuller's Brewery

Boost Score +25 with badge (5 left)

766

/1000

Fair

791

/1000

Fair

Fuller's Brewery Vendor Cyber Rating & Cyber Score

fullersbrewery.co.uk

Add Your Compliance Badge

Brewing has taken place near Fuller’s site on the River Thames for more than 350 years and The Griffin Brewery opened there in 1845. Based in Chiswick, West London it is London’s oldest continuous working brewery. It was the first brewery to win the CAMRA Champion Beer of Britain award and has produced a wave of acclaimed ales including Chiswick Bitter in 1930 and ESB, which was launched in 1971 and remains a favourite amongst ale enthusiasts. Through timeless classics, such as Fuller’s London Pride and an ever evolving portfolio, Fuller’s Griffin Brewery has long championed real ale and British brewing excellence, offering beers to suit all consumer tastes. As well as now being famous for producing award-winning beers, the brewery is

Fuller's Brewery

Fuller's Brewery CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Asahi Group Holding...

Ransomware

100

1/2026

Oracle

CONDAVORASANASA...

Asahi Group Holding...

Ransomware

100

1/2026

ASACITCGR176838...

Asahi Group Holding...

Cyber Attack

12/2025

Oracle

ADIHEAHARMARTHE...

Fuller's Brewery

Ransomware

100

11/2025

ASA393243911122...

Fuller's Brewery

Ransomware

100

10/2025

ASA373243710132...

Fuller's Brewery

Ransomware

100

10/2025

ASA216202110112...

Fuller's Brewery

Ransomware

100

9/2025

ASA1765382073

Fuller's Brewery

Ransomware

100

9/2025

ASA319203110082...

Asahi Group Holding...

Ransomware

100

9/2025

ASA1779287351

Fuller's Brewery

Ransomware

100

8/2025

ASA259202510072...

Fuller's Brewery

Cyber Attack

100

6/2025

ASA039310309302...

Fuller's Brewery

Ransomware

100

5/2025

ASA483244811272...

Asahi Group Holding...

Ransomware

100

1/2025

ASAアスク177108624...

Asahi Group Holding...

Ransomware

100

1/2025

MARASAJAG177133...

Fuller's Brewery

Ransomware

10/2024

ASA239212310152...

Fuller's Brewery

Ransomware

100

9/2024

ASA566245611272...

Fuller's Brewery

Ransomware

100

6/2024

ASA249242410082...

Fuller's Brewery

Ransomware

100

9/2023

ASA403264011272...

Asahi Group Holding...

Ransomware

100

4/2023

ASATHE179146277...

Fuller's Brewery

Ransomware

100

6/2022

ASA136201310082...

Asahi Group Holding...

Ransomware

100

12/2016

SANASA177754498...

Loading…

A.I.

Fuller's Brewery Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Fuller's Brewery

Incidents vs Food and Beverage Services Industry Avg (This Year)

No incidents recorded for Fuller's Brewery in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Fuller's Brewery in 2026.

Incident Types Fuller's Brewery vs Food and Beverage Services Industry Avg (This Year)

No incidents recorded for Fuller's Brewery in 2026.

Incident History - Fuller's Brewery (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Fuller's Brewery Subsidiaries

Fuller's Brewery

Food and Beverage Services

Website: https://www.fullersbrewery.co.uk/

Company Size: 201-500 employees

Asahi Europe & InternationalFood and Beverage Services

Birra PeroniFood & Beverages

Asahi Group HoldingsFood and Beverage Services

Asahi BeveragesFood and Beverage Services

Carlton & United BreweriesManufacturing

Asahi Holdings Southeast Asia Sdn BhdFood and Beverage Services

Koninklijke GrolschFood and Beverage Services

De Klok DrankenFood and Beverage Services

Asahi UKFood & Beverages

Plzeňský PrazdrojFood and Beverage Services

Ursus BreweriesFood and Beverage Services

Kompania PiwowarskaFood and Beverage Services

Asahi Beer Asia LimitedFood & Beverages

Asahi CanadaFood and Beverage Services

Meantime Brewing CompanyFood and Beverage Services

Asahi Brands FranceManufacturing

Dark Star Brewing Co LtdFood and Beverage Services

CORNISH ORCHARDSFood & Beverages

Asahi Beer USA IncFood and Beverage Services

Plzeňský Prazdroj Slovensko, a.s.Food & Beverages

Asahi Brands GermanyFood and Beverage Services

Loading…

Fuller's Brewery Similar Companies

Frito-Lay

cb fritolay.com

We believe every consumer should have access to their favorite snack, everywhere. We own the manufacturing process from seed to shelf and actively invest in technology to automate key steps of the process. This helps us be more agile in what we need to make, who we need to make it for, and how we can best deliver it to snack lovers from coast to coast.

Coca-Cola Consolidated

CokeConsolidated.com

Coca-Cola Consolidated is the largest Coca-Cola bottler in the United States. Our Purpose is to honor God in all we do, serve others, pursue excellence, and grow profitably. For over 120 years, we have been deeply committed to the consumers, customers, and communities we serve and are passionate about the broad portfolio of beverages and services we offer. We make, sell, and distribute beverages of The Coca-Cola Company and other partner companies in more than 300 brands and flavors across 14 states and the District of Columbia to approximately 60 million consumers. Headquartered in Charlotte, N.C., Coca-Cola Consolidated is traded on the NASDAQ Global Select Market under the symbol “COKE.” More information about the Company is available at www.cokeconsolidated.com. Follow Coca-Cola Consolidated on Facebook, Twitter, Instagram and LinkedIn.

蒙牛

mengniu.com.cn

As China’s leading dairy manufacturer, Mengniu focuses on producing nutritional, healthy and tasty dairy products for customers worldwide. 20 years of experiences enabled Mengniu to develop a diversified product matrix, including liquid milk, ice-cream, infant formula, cheese and etc. The company has also successfully launched a series of star brands such as Milk Deluxe, Just Yoghurt, Champion, Real Fruits, Yoyi-C, Future Star, Shiny Meadow, Deluxe Ice-Cream and Bellamy’s. In additional to mainland China, Hong Kong and Macau, Mengniu products have also entered markets in more than ten countries and regions including Singapore, Mongolia, Myanmar, Cambodia, Indonesia, Malaysia, and Canada. In line with market potential and business strategy, Mengniu has established 42 production bases in China, Oceania and Southeast Asia, with an annual production capacity exceeding 10 million tons. Mengniu always attaches great importance to integrating global resources. In recent years, Mengniu has reached strategic cooperation with a number of internationally renowned companies, research institutions and universities. The wining partnerships propelled Mengniu to build a comprehensive end-to-end supply chain, connecting milk source, R&D, production and sales. Nowadays, 100% of Mengniu’s raw milk is collected from large-scale and intensive farms. Mengniu has established three international R&D centers with partners such as UC-Davis from the US, Danone from France and Arla from Denmark, enabling Mengniu to deliver better products to global consumers in the future. Mengniu actively participates in the cooperation and development of the global dairy industry. Mr. Lu Minfang, CEO of Mengniu, is a member of the board of directors of the International Dairy Federation (IDF) and the Global Dairy Platform (GDP), as well as a member of the International Business Council (World Economic Forum). Mengniu adheres to the mission of “Every drop of nutrition makes every life thrive” as we believ

Dairy Queen

cb dairyqueen.com

Here at the DQ® system, we believe that HAPPY TASTES GOOD®. Our first location opened in Joliet, Illinois, 80 years ago. Since then we’ve grown to more than 7,000 DQ® locations in the U.S., Canada and 22 other countries. Our restaurants offer a variety of sweet treats and crave-worthy eats that hold a special place in the hearts and minds of fans of all ages, including our signature BLIZZARD® Treat. Guided by our vision to become the world’s favorite quick-service restaurant, we’re proud of the multinational company culture we’ve built while maintaining a small community feel. Our hardworking employees believe in our mission of creating positive memories for all who touch DQ. Headquartered in Minneapolis, Minnesota, with offices in Canada and Singapore, our corporate employees support our independent franchisees from our corporate offices and field locations around the world. Giving back Since 1984, the DQ system has raised more than $154 million to support Children’s Miracle Network Hospitals® in the U.S., and the Children’s Miracle Network Member Hospitals® in Canada. Every time fans and franchisees donate to these causes, every dollar stays in the community to support the local children’s hospital. Through our corporate giving initiative, DQ Cares, we provide employees time paid time off to volunteer in their communities. Careers If you believe in creating happy smiles, lasting memories and unforgettable moments, we want to hear from you. To learn more about DAIRY QUEEN® careers, visit dairyqueen.com/us-en/Company/Careers/. Franchise opportunities To become part of our sweet success and explore franchising opportunities, visit us at dairyqueenfranchising.com. Ownership The DQ brand, along with the ORANGE JULIUS® brand, is privately owned by Berkshire Hathaway Inc., a company owned by the legendary investor, Warren Buffet. Read our Social Media Community Guidelines: http://bit.ly/DQSocialCommunityGuidelines

VARUN BEVERAGES LIMITED

varunbeverages.com

Varun Beverages Limited (VBL) is one of the top FMCG players in the Indian Market. We are on track towards strengthening our position in the global beverage industry with our presence in 14 countries in the Indian sub-continent and Africa - where we are responsible for producing popular brands like Pepsi, Mirinda, 7up, Mountain Dew, Slice, Aquafina, Sting, Tropicana, Gatorade, and many more and making them readily available at outlets near you. We are committed towards delivering a refreshing beverage experience to our consumers. VBL in India is the second-largest franchisee partner for PepsiCo (outside US) and is powered by #HungryForMore spirit of 10,000+ employees who contribute to making the VBL family stronger and bigger every-day. Life@VBL is about endless opportunities and maximizing learnings every-day. We take immense pride in our employees’ commitment, ownership, and spirit of #OneTeamOneDream. We are equally committed to ESG principles; focusing on environmental stewardship and actively participating in community initiatives demonstrate our dedication to giving back to the environment and society. Our robust governance framework ensures accountability and sustainability in everything we do. For more details, please visit our website.

JDE Peet's

jdepeets.com

JDE Peet’s is the world’s leading pure-play coffee company, serving approximately 4,400 cups of coffee per second in more than 100 markets. Guided by our ‘Reignite the Amazing’ strategy, we are focusing on brand-led growth across three big bets: Peet’s, L’OR, and Jacobs, alongside a collection of 9 local icons. In 2024, JDE Peet’s generated total sales of EUR 8.8 billion and employed a global workforce of more than 21,000 employees. Discover more about our journey to deliver a coffee for every cup and a brand for every heart at www.jdepeets.com.

Nestlé Nespresso SA

nespresso.com

Coffee is at the heart of everything we do, and consumer satisfaction is why we do it. Our story started with one simple idea: everyone should be able to make the perfect cup of coffee at home. Something we still believe today, which is why we think delivering the highest quality coffee, sip after sip, is so important. To achieve this, we continuously strive for innovation. Our coffee experts look for the world’s most exclusive coffees, and create new and exciting blends through a very strict coffee selection process. We create exceptional coffee experiences by continuously reinventing our coffee system, and the way coffee lovers can enjoy our coffee, transforming coffee culture on a global scale. We are committed to making a positive impact. We source our coffee from unique regions, working in partnership with over 110 000 farmers through our Nespresso AAA Sustainable Quality™ program around the world. We help them achieve high certification standards – for example in water management, biodiversity and fair worker treatment – through our long-term partners Rainforest Alliance and Fairtrade international. At Nespresso, we offer personalized services to our Club Members: from delivery and repair to customer care and recycling systems. We are in direct contact with coffee lovers through our e-commerce platform, boutiques and social media, allowing us to anticipate and cater to their every need. We also provide a full range of machines and coffees to meet the specific needs of the world’s most foremost hotels, restaurants and business customers. Our business Solutions enable your company to offer the perfect cup of coffee to your employees, clients and customers, every time. Nespresso is not just coffee. It’s a genuine experience that combines perfection and pleasure, simplicity and aesthetics. Learn more, visit http://www.nestle-nespresso.com/

Kerry

kerry.com

Every day, millions of people throughout the world consume foods and beverages containing Kerry’s taste and nutrition solutions. We are committed to making the world of food and beverage better for everyone, and dedicated to our Purpose, Inspiring Food, Nourishing Life. At Kerry, we are proud to provide our customers – some of the world’s best-known food, beverage and pharma brands – with the expertise, insights and know-how they need to deliver products that people enjoy and feel better about consuming. Kerry is a company rich in heritage and resources. Over the past five decades, our focus on changing lifestyles, the globalisation of food tastes and ever-evolving consumer needs has brought us to a market-leading global position. Today, we are firmly established as a world leader in the food, beverage and pharma industries, with 22,000+ staff and 150+ innovation and manufacturing centres across 30+ countries. Learn more about Kerry: www.kerry.com

Greggs

greggs.co.uk

Greggs is a leading food-on-the-go retailer with over 2,400 shops nationwide and serving over six million customers a week. We stand for great tasting, freshly prepared food that our customers can trust, at affordable prices and aim to become the customers’ favourite for food-on-the-go. With ambitions to grow to over 3,0000 shops nationwide and ownership of our supply chain, we are in a unique position to make quality, freshly prepared food accessible to anyone, anywhere. Our supply network... is being reshaped to support growth and compete more effectively in the food-on-the-go market. We're investing in a major programme to support shop expansion substantially beyond 3,000 outlets in the UK. Our shops... are being refurbished and relocated in locations away from high streets such as retail and industrial parks, motorway service stations and travel hubs, to meet the demands of busy food-on-the-go customers. Our franchise model continues to offer opportunities for further growth in non-high street locations. Our product offer... is differentiated by the way we freshly prepare food in our shops each day and offer customers outstanding value for good quality, great tasting food-on-the-go, at any time of day. For more on how to join us at Greggs please visit careers.greggs.co.uk

Loading…

NEWS

Fuller's Brewery CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 14, 2025 07:00 AM

Asahi ransomware attack: Personal data potentially stolen

Personal data may have been stolen in the ransomware attack that forced Asahi to halt beer production, the company has said.

Read Article

October 10, 2025 07:00 AM

How hackers forced brewing giant Asahi back to pen and paper

The maker of Japan's most popular beer, Super Dry, was hit by a major cyber-attack last month.

Read Article

October 07, 2025 07:00 AM

Japanese Leading Brewer Asahi Suspends Operations After a Cyber Attack

Japan's top brewer, Asahi, has indefinitely suspended domestic ordering and shipment operations following a major system failure caused by a...

Read Article

October 03, 2025 07:00 AM

Japanese beer giant Asahi confirms ransomware attack

Japanese beer-making giant Asahi has disclosed today that a ransomware attack caused the IT disruptions that forced it to shut down...

Read Article

October 03, 2025 07:00 AM

Japan faces Asahi beer shortage after cyber-attack

The drinks giant said this week that the attack had a major impact on its domestic operations.

Read Article

September 30, 2025 07:00 AM

Cyber attack hits beer and beverage company Asahi Group Holdings

Japanese brewing firm Asahi Group Holdings has been hit by a cyber attack, which has impacted the company's shipping and customer service...

Read Article

September 29, 2025 07:00 AM

Asahi runs dry as online attackers take down Japanese brewer

Japan's largest brewery biz, Asahi, has shut down distribution systems following an online attack, and local drinkers will just have to make...

Read Article

September 29, 2025 07:00 AM

Japanese brewing giant Asahi hit by cyber-attack

The brewer says the attack hit shipping and customer service operations, but its European business is not affected.

Read Article

June 16, 2019 07:00 AM

World’s Largest Beer Brewer To Launch Cybersecurity Unit In Israel

Anheuser-Busch InBev (AB InBev) announced plans to open a cybersecurity center in Tel Aviv amid mounting concerns over hacking threats.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-77684

SUMMARY

The Bluetooth Classic Hands-Free Profile HF role in subsys/bluetooth/host/classic/hfp_hf.c does not release the AT command buffers that are still queued on hf->tx_pending when the RFCOMM DLC goes down. hfp_hf_disconnected() only cancelled the work items and cleared hf->acl, and no other code path ever dequeues those buffers, so each one is permanently lost from the fixed hf_pool (CONFIG_BT_MAX_CONN + 1 buffers, i.e. two in the default configuration). The same function also left BT_HFP_HF_FLAG_CONNECTED set, and hfp_hf_create() wiped the object with memset() as soon as hf->acl was NULL, without checking whether hf->work, hf->slc_work or hf->deferred_work was still pending or running. The remote Audio Gateway peer controls the trigger end to end and needs no application involvement: an unsolicited +BCS: 1 response makes bcs_handle() call bt_hfp_hf_select_codec() and queue an AT+BCS buffer, which cannot be transmitted while BT_HFP_HF_FLAG_RX_ONGOING is set, and an immediately following RFCOMM DISC strands that buffer. Repeating the connect / +BCS / disconnect cycle a couple of times empties hf_pool for good. With the pool exhausted, HFP command sending fails permanently, and because hfp_hf_send_cmd() allocates with K_FOREVER (bt_rfcomm_create_pdu() → bt_conn_create_pdu()) from the Bluetooth RX context — where that timeout is not downgraded to K_NO_WAIT — one further +BCS from the peer parks the Bluetooth RX thread inside net_buf_alloc() with no possible waker, halting all HCI event processing until the device is rebooted. Separately, reusing the HF slot while a work handler was still queued or running allowed memset() to wipe live k_work items out from under the system workqueue, corrupting shared kernel workqueue state. Exploitation requires an established HFP session (for SSP devices L2CAP enforces authentication before the RFCOMM channel is reachable) and a build with CONFIG_BT_HFP_HF enabled.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 5.7)

cvss3

Base Score: 5.7

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.1

REFERENCES

CVE-2026-19595

SUMMARY

The user-mode syscall verifier z_vrfy_rtio_cqe_get_mempool_buffer() in subsys/rtio/rtio_syscalls.c validated its two output parameters, buff and buff_len, with K_SYSCALL_MEMORY_READ() rather than K_SYSCALL_MEMORY_WRITE(). Both are pure out-parameters: z_impl_rtio_cqe_get_mempool_buffer() stores the mempool buffer address and its length through them. The distinction is enforced by every architecture validator — arch_buffer_validate() on RISC-V PMP explicitly accepts the global __rom_region/__rodata_region for reads only, and the ARM MPU validators accept P_RO_U_RO and P_RW_U_RO regions for reads only — so a read-validated pointer is not necessarily writable by the calling thread. An unprivileged user-mode thread that has been granted access to an RTIO context (rtio_access_grant()) can invoke the rtio_cqe_get_mempool_buffer() syscall with buff/buff_len pointing at memory it may read but not write, and with a completion-queue entry whose flags field it fully controls (only RTIO_CQE_FLAG_MEMPOOL_BUFFER in flags[7:0] is required; flags[19:8] and flags[31:20] supply the block index and count). The kernel then performs a pointer-sized and a 4-byte store through those addresses while running in supervisor mode. Reaching the store requires CONFIG_USERSPACE together with CONFIG_RTIO_SYS_MEM_BLOCKS, the configuration behind RTIO_DEFINE_WITH_MEMPOOL; without the latter the implementation returns -ENOTSUP and writes nothing. Two outcomes follow. If the target lies in a memory-domain partition declared K_MEM_PARTITION_P_RW_U_RO (privileged read-write, user read-only), the kernel-mode store succeeds and deposits partly attacker-chosen values into memory the memory domain had marked read-only for that thread, bypassing the partition's write protection. If the target lies in globally readable but unwritable memory such as .text/.rodata in flash, the store faults in kernel mode; the fault is delivered to z_fatal_error() and the default k_sys_fatal_error_handler() halts or reboots the device, giving an unprivileged thread a reliable full denial of service. The read-permission check does bound the damage: the address must still be readable by the calling thread, so kernel-private memory cannot be targeted and no confidential data is disclosed. The fix replaces both checks with K_SYSCALL_MEMORY_WRITE(), so a thread lacking write permission is terminated by K_OOPS before the implementation runs; the cqe argument correctly remains read-validated.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.1)

cvss3

Base Score: 6.1

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

Impact Score

4.2

Exploitability

1.8

REFERENCES

CVE-2026-19178

SUMMARY

IBM Storage TS4500 Library 1.1.1.6 through 1.12.0.3 could allow a remote authenticated attacker to gain unauthorized administrative privileges due to a race condition.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.8)

cvss3

Base Score: 6.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

1.6

REFERENCES

https://www.ibm.com/support/pages/node/7292610

CVE-2026-112991

SUMMARY

The html_to_markdown expansion module in MISP Modules contains a server-side request forgery (SSRF) vulnerability in its is_safe_url() URL validation function. The BLOCKED_RANGES list used to reject unsafe destination addresses was incomplete, omitting several critical IP address ranges. Specifically, the following ranges were not blocked: 0.0.0.0/8 (unspecified, which routes to loopback on Linux), 100.64.0.0/10 (carrier-grade NAT per RFC 6598), ::/128 (IPv6 unspecified), fc00::/7 (IPv6 Unique Local Addresses), and fe80::/10 (IPv6 link-local). The existing list only covered IPv4 loopback (127.0.0.0/8), RFC 1918 private ranges, IPv4 link-local (169.254.0.0/16), and IPv6 loopback (::1/128). An authenticated user with the ability to create or modify MISP attributes that trigger the html_to_markdown expansion module could supply URLs pointing to these unblocked internal address ranges. Because the module fetches the URL server-side to convert HTML content to Markdown, the request is made from the MISP server's network context. This allows an attacker to probe and read responses from internal services, carrier-grade NAT infrastructure, or link-local endpoints that would otherwise be unreachable from external networks. IPv4-mapped IPv6 forms (e.g., [::ffff:0.0.0.0]) also bypassed the existing checks. The security impact is primarily confidentiality: an attacker can read data served by internal services reachable from the MISP server. The MISP instance itself is not compromised, but it is abused as a proxy to access otherwise restricted network resources.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: )

cvss4

Base Score: 6.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/misp/misp-modules/commit/98a1c2c2f297665dd8d4609e9cd644007a57516b

CVE-2026-112372

SUMMARY

A weakness has been identified in H3C Magic NX15 V100R017. This affects the function importprofile of the file /api/upload. This manipulation of the argument fileName causes path traversal. It is possible to initiate the attack remotely. The exploit has been made available to the public and could be used for attacks. The vendor was contacted early about this disclosure.

Published

Date2026-10-19

Updated

Date2026-10-19

RISK INFORMATION (Score: 6.6)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 6.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:L/SI:L/SA:L/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

Fuller's Brewery Vendor Cyber Rating & Cyber Score

Fuller's Brewery A.I CyberSecurity Scoring

Fuller's Brewery CyberSecurity News & History

Fuller's Brewery Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Fuller's Brewery

Incidents vs Food and Beverage Services Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Fuller's Brewery vs Food and Beverage Services Industry Avg (This Year)

Incident History - Fuller's Brewery (X = Date, Y = Severity)

Fuller's Brewery Subsidiaries

Fuller's Brewery

Fuller's Brewery Similar Companies

Frito-Lay

Coca-Cola Consolidated

蒙牛

Dairy Queen

VARUN BEVERAGES LIMITED

JDE Peet's

Nestlé Nespresso SA

Kerry

Greggs

Fuller's Brewery CyberSecurity News

Asahi ransomware attack: Personal data potentially stolen

How hackers forced brewing giant Asahi back to pen and paper

Japanese Leading Brewer Asahi Suspends Operations After a Cyber Attack

Japanese beer giant Asahi confirms ransomware attack

Japan faces Asahi beer shortage after cyber-attack

Cyber attack hits beer and beverage company Asahi Group Holdings

Asahi runs dry as online attackers take down Japanese brewer

Japanese brewing giant Asahi hit by cyber-attack

World’s Largest Beer Brewer To Launch Cybersecurity Unit In Israel

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

Fuller's Brewery CyberSecurity News & History

Fuller's Brewery Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for Fuller's Brewery

Incidents vs Food and Beverage Services Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types Fuller's Brewery vs Food and Beverage Services Industry Avg (This Year)

Incident History - Fuller's Brewery (X = Date, Y = Severity)

Fuller's Brewery Subsidiaries

Fuller's Brewery

Fuller's Brewery Similar Companies

Frito-Lay

Coca-Cola Consolidated

蒙牛

Dairy Queen

VARUN BEVERAGES LIMITED

JDE Peet's

Nestlé Nespresso SA

Kerry

Greggs

Fuller's Brewery CyberSecurity News

Asahi ransomware attack: Personal data potentially stolen

How hackers forced brewing giant Asahi back to pen and paper

Japanese Leading Brewer Asahi Suspends Operations After a Cyber Attack

Japanese beer giant Asahi confirms ransomware attack

Japan faces Asahi beer shortage after cyber-attack

Cyber attack hits beer and beverage company Asahi Group Holdings

Asahi runs dry as online attackers take down Japanese brewer

Japanese brewing giant Asahi hit by cyber-attack

World’s Largest Beer Brewer To Launch Cybersecurity Unit In Israel

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo