What is the official website of GitHub Brasil ?

The official website of GitHub Brasil is http://www.github.com.

What is GitHub Brasil's cybersecurity risk score?

GitHub Brasil has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has GitHub Brasil experienced?

According to Rankiteo, GitHub Brasil currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has GitHub Brasil been affected by any supply chain cyber incidents ?

According to Rankiteo, GitHub Brasil has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Microsoft Security Response Center (Incident ID: POL1785356870) OpenAI (Incident ID: CHE1784787889) AsyncAPI Initiative (Incident ID: CISSONMICORAASYKNX1784341544) AsyncAPI Initiative (Incident ID: ASYMIC1785327908) Packagist Conductors (Incident ID: WHMPACGITCPA1784816835) ShapedPlugin LLC (Incident ID: FORSHATANMICJAMIRHTEX1782147825) PRODAFT (Incident ID: MICSENKASESECRO1782073479) GitHub (Incident ID: GIT1780453444) npm, Inc. (Incident ID: NPMGIT1779963893) npm, Inc. (Incident ID: ELAGITAMAOPENPM1780050263) ANTV INC (Incident ID: ANTGIT1779395279) Google (Incident ID: OPEMICBRAGOOVIVBRO1779395125) GitHub (Incident ID: GIT1779459975) Microsoft Security (Incident ID: PUTWEBANYMIC1779215753) NXP Semiconductors (Incident ID: NPMGITNXPMIC1779193496) TanStack (Incident ID: GRA1779006227) GitHub (Incident ID: GIT1779251025) GitHub (Incident ID: PHPGIT1778747372) GitHub (Incident ID: GOO1778567308) Anthropic (Incident ID: ANT1778581440) TanStack (Incident ID: MIS1778869722) Google AI (Incident ID: GITGOO1780431903) PyPI (Incident ID: PYPGIT1PA1778761827) GitHub (Incident ID: MICMICMICGIT1780813480) CodeRabbit (Incident ID: CODGIT1783765479) Citrix (Incident ID: MICTHESECCIT1785522270) Google (Incident ID: GITGOO1777302471) npm, Inc. (Incident ID: GITNPMASU1776918263) Bitwarden (Incident ID: BIT1776975830) Checkmarx (Incident ID: CHEDOCGIT1776961598)

Does GitHub Brasil have SOC 2 Type 1 certification ?

According to Rankiteo, GitHub Brasil is not certified under SOC 2 Type 1.

Does GitHub Brasil have SOC 2 Type 2 certification ?

According to Rankiteo, GitHub Brasil does not hold a SOC 2 Type 2 certification.

Does GitHub Brasil comply with GDPR ?

According to Rankiteo, GitHub Brasil is not listed as GDPR compliant.

Does GitHub Brasil have PCI DSS certification ?

According to Rankiteo, GitHub Brasil does not currently maintain PCI DSS compliance.

Does GitHub Brasil comply with HIPAA ?

According to Rankiteo, GitHub Brasil is not compliant with HIPAA regulations.

Does GitHub Brasil have ISO 27001 certification ?

According to Rankiteo,GitHub Brasil is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does GitHub Brasil operate in ?

GitHub Brasil operates primarily in the Software Development industry.

How many employees does GitHub Brasil have ?

GitHub Brasil employs approximately 12 people worldwide.

Does GitHub Brasil own any subsidiaries ?

GitHub Brasil presently has no subsidiaries across any sectors.

How many LinkedIn followers does GitHub Brasil have ?

GitHub Brasil's official LinkedIn profile has approximately 206,451 followers.

What is the NAICS classification code for GitHub Brasil ?

GitHub Brasil is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does GitHub Brasil have a Crunchbase profile ?

No, GitHub Brasil does not have a profile on Crunchbase.

Does GitHub Brasil have a LinkedIn profile ?

Yes, GitHub Brasil maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/github-brazil.

How many cybersecurity incidents has GitHub Brasil experienced ?

As of August 9, 2026, Rankiteo reports that GitHub Brasil has experienced 100 cybersecurity incidents.

How many peer or competitor companies does GitHub Brasil have ?

GitHub Brasil has an estimated 30,580 peer or competitor companies worldwide.

What types of cybersecurity incidents has GitHub Brasil faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Vulnerability, Ransomware and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

GitHub Brasil

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

GitHub Brasil Vendor Cyber Rating & Cyber Score

github.com

Add Your Compliance Badge

O GitHub é a maior e mais avançada plataforma de desenvolvimento de softwares do mundo. Mais de 94 milhões de pessoas usam nossa plataforma para criar coisas incríveis junto dos amigos, colegas de trabalho, de faculdade e até com completos desconhecidos de todos os cantos do mundo. Nunca foi tão fácil criar mais rápido, códigos ainda melhores! Precisa de ajuda? É só enviar uma mensagem por aqui: /git.io/c

GitHub Brasil A.I CyberSecurity Scoring

Scoring History

GitHub Brasil

GitHub Brasil CyberSecurity News & History

Past Incidents

100

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

GitHub

Cyber Attack

8/2026

GIT1785839378

Microsoft Security ...

Vulnerability

100

7/2026

MIC1785392682

Microsoft Security ...

Breach

7/2026

Microsoft Secur...

POL1785356870

Microsoft Security

Vulnerability

7/2026

MIC1786107729

Microsoft Security

Cyber Attack

7/2026

MIC1784881741

Microsoft Security

Vulnerability

7/2026

MIC1784744777

Microsoft Security ...

Vulnerability

100

7/2026

OpenAI

CHE1784787889

Microsoft Security

Cyber Attack

7/2026

MIC1784658331

Microsoft Threat In...

Vulnerability

7/2026

MICNOVBRU178442...

Microsoft

Vulnerability

100

7/2026

MIC1784125827

Microsoft Security

Vulnerability

7/2026

AsyncAPI Initia...

CISSONMICORAASY...

Microsoft Security

Vulnerability

7/2026

MIC1784096635

Microsoft Threat In...

Cyber Attack

100

7/2026

AsyncAPI Initia...

ASYMIC178532790...

Microsoft Security

Vulnerability

7/2026

MIC1784096831

Microsoft

Vulnerability

7/2026

MIC1784089434

Microsoft

Vulnerability

7/2026

MIC1784816949

Microsoft Security

Vulnerability

100

7/2026

MIC1784141218

Microsoft Security ...

Vulnerability

7/2026

MIC1784298242

GitHub

Cyber Attack

100

7/2026

Packagist Condu...

WHMPACGITCPA178...

Microsoft Threat In...

Cyber Attack

100

7/2026

MIC1783680524

GitHub

Vulnerability

7/2026

GIT1783441439

Microsoft Security ...

Vulnerability

100

7/2026

MIC1783441514

Microsoft Security ...

Vulnerability

7/2026

MIC1783067043

Microsoft

Vulnerability

6/2026

MIC1782721445

Microsoft Security

Cyber Attack

6/2026

MIC1782483842

Microsoft Security

Cyber Attack

6/2026

MIC1782404840

Microsoft Security

Vulnerability

6/2026

MIC1782375843

Microsoft

Breach

6/2026

ANAMIC178542315...

Microsoft Security

Cyber Attack

6/2026

ShapedPlugin LL...

FORSHATANMICJAM...

Microsoft Security ...

Ransomware

100

6/2026

MIC1782204242

Microsoft Security

Cyber Attack

6/2026

PRODAFT

MICSENKASESECRO...

Microsoft Security

Vulnerability

6/2026

MIC1781785861

GitHub

Cyber Attack

6/2026

GIT1781778547

Microsoft Threat In...

Cyber Attack

6/2026

MIC1781713463

Microsoft Security ...

Vulnerability

6/2026

MIC1781238231

Microsoft Security

Cyber Attack

6/2026

SPOMICADO178120...

Microsoft Security ...

Vulnerability

6/2026

MIC1781785666

Microsoft Security ...

Vulnerability

6/2026

MIC1781101475

Microsoft Security ...

Vulnerability

6/2026

MIC1781072633

Microsoft Security

Vulnerability

6/2026

MIC1782296659

Microsoft Security ...

Breach

6/2026

MIC1780986305

Microsoft

Cyber Attack

6/2026

MIC1780900177

Microsoft Security ...

Vulnerability

6/2026

MIC1780640667

Microsoft 365

Vulnerability

6/2026

LINMIC178053984...

Microsoft Threat In...

Cyber Attack

6/2026

MICISR178456517...

GitHub

Vulnerability

100

6/2026

GitHub

GIT1780453444

Microsoft Security ...

Vulnerability

100

6/2026

MIC1784910234

Microsoft Visual St...

Vulnerability

6/2026

MIC1782398423

Microsoft Security

Vulnerability

6/2026

MIC1781591215

Microsoft

Vulnerability

6/2026

MIC1781541072

Microsoft Security ...

Vulnerability

100

6/2026

MIC1780287882

Microsoft Security ...

Vulnerability

6/2026

MIC1781540872

Microsoft Security

Cyber Attack

100

5/2026

OKTMICATTNVI178...

GitHub

Cyber Attack

5/2026

npm, Inc.

NPMGIT177996389...

GitHub

Cyber Attack

5/2026

npm, Inc.

ELAGITAMAOPENPM...

Microsoft Threat In...

Cyber Attack

5/2026

MIC1784291489

Microsoft Threat In...

Cyber Attack

100

5/2026

MIC1779704661

GitHub

Cyber Attack

100

5/2026

ANTV INC

ANTGIT177939527...

Microsoft Security

Vulnerability

5/2026

MIC1779272687

Microsoft Security ...

Vulnerability

5/2026

Google

OPEMICBRAGOOVIV...

Microsoft Security

Cyber Attack

5/2026

MIC1779258738

GitHub

Cyber Attack

5/2026

GIT1779179198

GitHub

Cyber Attack

100

5/2026

GitHub

GIT1779459975

Microsoft Threat In...

Cyber Attack

100

5/2026

MIC1779164698

Microsoft Security

Cyber Attack

5/2026

Microsoft Secur...

PUTWEBANYMIC177...

GitHub

Cyber Attack

5/2026

NXP Semiconduct...

NPMGITNXPMIC177...

GitHub

Breach

5/2026

TanStack

GRA1779006227

Microsoft Security ...

Vulnerability

5/2026

MIC1778833438

Microsoft Security ...

Vulnerability

100

5/2026

MIC1778732772

GitHub

Breach

5/2026

GitHub

GIT1779251025

Microsoft Security

Vulnerability

5/2026

MIC1778682772

GitHub

Vulnerability

5/2026

GitHub

PHPGIT177874737...

Microsoft Security ...

Vulnerability

100

5/2026

MIC1778747112

Microsoft Security

Vulnerability

5/2026

MIC1780475036

Microsoft Security

Vulnerability

5/2026

MIC1778646305

Microsoft Security ...

Vulnerability

5/2026

MIC1780511463

GitHub

Cyber Attack

100

5/2026

GitHub

GOO1778567308

Microsoft

Vulnerability

100

5/2026

MIC1778229035

GitHub

Vulnerability

5/2026

Anthropic

ANT1778581440

GitHub

Cyber Attack

5/2026

GIT1781001050

GitHub

Vulnerability

100

5/2026

ANTFOX7-ECARGIT...

GitHub

Breach

5/2026

TanStack

MIS1778869722

GitHub

Cyber Attack

5/2026

Google AI

GITGOO178043190...

GitHub

Cyber Attack

100

5/2026

PyPI

PYPGIT1PA177876...

Microsoft

Cyber Attack

100

5/2026

GitHub

MICMICMICGIT178...

GitHub

Cyber Attack

5/2026

CodeRabbit

CODGIT178376547...

Microsoft Threat In...

Vulnerability

100

5/2026

Citrix

MICTHESECCIT178...

Microsoft Threat In...

Cyber Attack

5/2026

MIC1785803042

Microsoft Security

Vulnerability

100

4/2026

LINCISMIC177793...

GitHub

Vulnerability

100

4/2026

GITCPAADTROB177...

Microsoft Security

Vulnerability

4/2026

MICFED177746571...

Microsoft

Vulnerability

4/2026

GOOMICMED177765...

GitHub

Vulnerability

4/2026

Google

GITGOO177730247...

Microsoft Security ...

Vulnerability

100

4/2026

MIC1777141431

Microsoft Security

Cyber Attack

100

4/2026

MIC1777019139

GitHub

Cyber Attack

4/2026

npm, Inc.

GITNPMASU177691...

GitHub

Cyber Attack

4/2026

Bitwarden

BIT1776975830

Microsoft

Vulnerability

4/2026

MIC1776839097

GitHub

Cyber Attack

100

4/2026

Checkmarx

CHEDOCGIT177696...

Microsoft Threat In...

Cyber Attack

100

4/2026

MIC1777004961

Loading…

A.I.

GitHub Brasil Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for GitHub Brasil

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for GitHub Brasil in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for GitHub Brasil in 2026.

Incident Types GitHub Brasil vs Software Development Industry Avg (This Year)

No incidents recorded for GitHub Brasil in 2026.

Incident History - GitHub Brasil (X = Date, Y = Severity)

Loading…

SUBSIDIARY

GitHub Brasil Subsidiaries

GitHub Brasil

Software Development

Website: http://www.github.com

Company Size: 12

GitHubSoftware Development

MicrosoftSoftware Development

Microsoft CloudSoftware Development

Microsoft LearnIT Services and IT Consulting

Microsoft 365IT Services and IT Consulting

Microsoft SecurityIT Services and IT Consulting

Microsoft AzureTechnology, Information and Internet

Microsoft ResearchThink Tanks

Microsoft DeveloperSoftware Development

Microsoft Visual StudioSoftware Development

Microsoft Dynamics 365Software Development

Microsoft Power PlatformSoftware Development

Microsoft AI Cloud Partner ProgramInformation Technology & Services

Microsoft FabricData Infrastructure and Analytics

Microsoft On the IssuesTechnology, Information and Internet

Microsoft SQL ServerSoftware Development

Microsoft SurfaceComputer Hardware

Microsoft AdvertisingAdvertising Services

Microsoft in GovernmentSoftware Development

343 IndustriesComputer Games

Microsoft for HealthcareSoftware Development

M12, Microsoft's Venture FundVenture Capital and Private Equity Principals

Microsoft VivaSoftware Development

Microsoft ReactorTechnology, Information and Internet

Microsoft Threat IntelligenceComputer and Network Security

FlipE-Learning Providers

VidkuIT Services and IT Consulting

Microsoft Military AffairsInformation Technology & Services

Metaswitch NetworksTelecommunications

Microsoft 365 Insider ProgramSoftware Development

MSoftware Development

Halo StudiosComputer Games

Microsoft Most Valuable ProfessionalsTechnology, Information and Internet

Microsoft AIDesarrollo de software

Microsoft CopilotSoftware Development

Microsoft Security Response CenterComputer and Network Security

Microsoft WindowsSoftware Development

Microsoft for NonprofitsSoftware Development

XboxEntertainment Providers

Microsoft News and StoriesTechnology, Information and Internet

Microsoft 365 DeveloperTechnology, Information and Internet

Studios Quality - Xbox Game StudiosComputer Games

Microsoft's Entrepreneurship for Positive ImpactSoftware Development

Go China ConnectionIT 服务与咨询

Visual Studio CodeSoftware Development

Microsoft EventsTechnology, Information and Internet

Microsoft Most Valued ProfessionalSoftware Development

GitHub LATAMSoftware Development

GitHub EducationSoftware Development

Loading…

GitHub Brasil Similar Companies

Cox Automotive Inc.

coxautoinc.com

Cox Automotive is the world’s largest automotive services and technology provider. Fueled by the largest breadth of first-party data fed by 2.3 billion online interactions a year, Cox Automotive tailors leading solutions for car shoppers, auto manufacturers, dealers, lenders and fleets. The company has 29,000+ employees on five continents and a portfolio of industry-leading brands that include Autotrader®, Kelley Blue Book®, Manheim®, vAuto®, Dealertrack®, NextGear Capital™, CentralDispatch® and FleetNet America®. Cox Automotive is a subsidiary of Cox Enterprises Inc., a privately-owned, Atlanta-based company with $22 billion in annual revenue.

PhonePe

cb phonepe.com

PhonePe Group is India’s leading fintech company, proudly recognized as India’s #1 Trusted Digital Payments* Brand for three consecutive years. Our flagship product, the PhonePe app was launched in August 2016, has rapidly become the preferred consumer payments app in India. In just eight years, PhonePe has gained over 57 crore + registered users and established a digital payments acceptance network of over 4 crore+ merchants spread across Tier 2,3 cites and beyond, covering 99% of the postal codes in the country. Building on our leadership in digital payments, PhonePe Group has expanded into financial services—including insurance, lending, and wealth management—along with new consumer tech ventures such as Pincode, a hyperlocal ecommerce platform, Indus App Store - India’s first localized app store, and Share.Market- A wealth and investment platform (app & website), catering to investors and traders needs. Headquartered in India, PhonePe Group aligns its diverse portfolio of businesses with our vision We're committed to empowering every Indian by unlocking the flow of money and providing equal access to easy & secure payments and financial services.

Nielsen

cb nlsn.co

Nielsen shapes the world’s media and content as a global leader in audience insights, data and analytics. Through our understanding of people and their behaviors across all channels and platforms, we empower our clients with independent and actionable intelligence so they can connect and engage with their audiences—now and into the future. Nielsen operates around the world in more than 55 countries. Learn more at http://nlsn.co/6006JMfty and connect with us on social media (LinkedIn, Twitter, Facebook and Instagram).

ByteDance

bytedance.com

ByteDance is a global incubator of platforms at the cutting edge of commerce, content, entertainment and enterprise services - over 2.5bn people interact with ByteDance products including TikTok. Creation is the core of ByteDance's purpose. Our products are built to help imaginations thrive. This is doubly true of the teams that make our innovations possible. Together, we inspire creativity and enrich life - a mission we aim towards achieving every day. At ByteDance, we create together and grow together. That's how we drive impact - for ourselves, our company, and the users we serve. We are committed to building a safe, healthy and positive online environment for all our users. We have over 110,000 employees based in more than 30 countries globally. Join us.

Upwork

cb upwork.com

Upwork is the world’s work marketplace that connects businesses with independent talent from across the globe. We serve everyone from one-person startups to large, Fortune 100 enterprises with a powerful, trust-driven platform that enables companies and talent to work together in new ways that unlock their potential. Our talent community on Upwork encompasses more than 10,000 skills in categories including website & app development, creative & design, customer support, finance & accounting, consulting, and operations.

Wolt

wolt.com

Wolt is a Helsinki-based technology company with a mission to bring joy, simplicity and earnings to the neighborhoods of the world. Wolt develops a local commerce platform that connects people looking to order food, groceries, and other goods with people interested in selling and delivering them. Wolt was founded in 2014 and joined forces with DoorDash (NASDAQ: DASH) in 2022. Together, we operate in more than 30 countries today.

Infor

infor.com

Infor is a global leader in business cloud software products for companies in industry specific markets. Infor builds complete industry suites in the cloud and efficiently deploys technology that puts the user experience first, leverages data science, and integrates easily into existing systems. Over 60,000 organizations worldwide rely on Infor to help overcome market disruptions and achieve business-wide digital transformation. Here are some key insights: • 60,000+ customers • 100+ offices • 1,700+ support experts • 2,000+ partners • 17,000+ employees • 175+ countries where customers are located • 15,000+ cloud customers • 40+ countries with Infor offices

TOTVS

cb totvs.com

Olá, somos a TOTVS! A maior empresa de tecnologia do Brasil. 🤓 Líder absoluta em sistemas e plataformas para empresas, a TOTVS possui mais de 70 mil clientes. Indo muito além do ERP, oferece tecnologia completa para digitalização dos negócios por meio de 3 unidades de negócio: - Gestão: ERPs, soluções cross e sistemas especializados visando garantir mais produtividade, eficiência e governança para os negócios; 💻 - Techfin: ERP Banking que oferece soluções de crédito B2B e pagamento, integrados a sistemas de gestão; 💸 - RD Station: Ferramentas digitais de marketing, vendas e relacionamento, para empresas de todos os portes e segmentos. 🚀 Nos últimos 5 anos, a companhia investiu R$3 bilhões em pesquisa e desenvolvimento para atender de maneira cada vez mais especializada empresas de 12 segmentos da economia, tornando-se um trusted advisor de seus clientes. A TOTVS é uma potência tecnológica que apoia a evolução de empresas de norte a sul do país. O Brasil, que faz, faz com TOTVS.

NetSuite

netsuite.com

Founded in 1998, Oracle NetSuite is the world’s first cloud computing company and the leader in AI-powered cloud enterprise resource planning (ERP) and business management software. NetSuite provides an AI-powered, unified cloud business system that helps organizations manage core business functions in a single system. These include financial management, inventory and supply chain management, CRM, field service management, human resources (HR), professional services automation (PSA), and omnichannel commerce. Businesses use NetSuite to gain real-time visibility into operations, automate financial processes, improve reporting and analytics, and make faster, data-driven decisions using built-in AI capabilities. With more than 25 years of experience in cloud software, NetSuite supports over 43,000 organizations in 220 countries and territories, ranging from startups to global enterprises. NetSuite is commonly used by entrepreneurs, executives, finance operations leaders, and more who need scalable, flexible, and integrated business management solutions to drive efficiency and growth.

Loading…

NEWS

GitHub Brasil CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 16, 2025 07:00 AM

Responding to npm package compromise by the Shai-Hulud worm.

How to recognize a Shai-Hulud worm attack on npm packages. Detection and response measures.

Read Article

August 28, 2025 07:00 AM

NX build compromise detection and response

The attackers used a compromised token issued for one of the Nx package maintainers to publish multiple malicious versions of the Nx package...

Read Article

February 04, 2025 08:00 AM

The biggest supply chain attacks in 2024

The first major supply-chain attack in 2024 involved malicious npm packages uploaded to GitHub in early January.

Read Article

February 20, 2022 08:00 AM

The 10 Best Cooking Podcasts For Chefs of Any Level | PS Food

From Recipe Club to The Sporkful, these 10 cooking podcasts offer tips, how-tos, reviews, and more for beginner cooks and seasoned chefs.

Read Article

April 01, 2021 07:00 AM

PHP language source code compromise attempt

Unknown attackers recently attempted to carry out a large-scale supply-chain attack by introducing malicious code to the official PHP GIT repository.

Read Article

March 15, 2006 12:51 PM

VMware by Broadcom - Cloud Computing for the Enterprise

Optimize cloud infrastructure with VMware for app platforms, private cloud, edge, networking, and security.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-71983

SUMMARY

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized parameters to execute arbitrary commands on the affected device and obtain root privileges.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71502

SUMMARY

CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient neutralization of Vue template expression delimiters in server-rendered user-controlled data. An unauthenticated attacker can create a public conversion whose name or description contains a malicious Vue expression using the application's configured [[ ... ]] delimiters. User profile names may provide an additional injection vector. Although Jinja HTML escaping is applied, the resulting value is subsequently included in a DOM region compiled by Vue. Vue interprets the attacker-controlled value as a template expression rather than ordinary text. By accessing the JavaScript Function constructor from within the expression, an attacker can execute arbitrary JavaScript in the security context of the CTI-Transmute origin. The application's nonce-based Content Security Policy does not prevent exploitation because the Vue runtime compiler requires the unsafe-eval policy exception. The malicious payload is stored by the application and executed whenever another user opens an affected page, such as the public conversion detail page. The victim may be a normal user or an administrator. Successful exploitation could allow the attacker to: * Access data available to the victim through the application. * Extract API keys, tokens, or other sensitive information exposed to the page. * Perform authenticated actions using the victim's session. * Modify conversions or other application data. * Escalate the impact by targeting an administrator. A demonstrated payload can use [].constructor.constructor(...) to obtain the JavaScript Function constructor and execute arbitrary code. The regression tests also show that a short first-stage payload could retrieve an uncapped conversion description and evaluate a larger second-stage payload. The patch addresses the vulnerability by registering a global Jinja finalize hook that inserts a zero-width Unicode word joiner inside every Vue delimiter found in server-rendered values. This prevents Vue from recognizing the values as template expressions while preserving their visible representation.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: )

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-71958

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username fields and execute arbitrary commands by crafting a specific payload, or cause the device to crash.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71957

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist[].name field and execute arbitrary commands by crafting a specific payload, or cause the device to crash.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71956

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious commands into the netDig.ping.dst field, resulting in command execution with root privileges.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…