What is the official website of GitHub Brasil ?

The official website of GitHub Brasil is http://www.github.com.

What is GitHub Brasil's cybersecurity risk score?

GitHub Brasil has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has GitHub Brasil experienced?

According to Rankiteo, GitHub Brasil currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has GitHub Brasil been affected by any supply chain cyber incidents ?

According to Rankiteo, GitHub Brasil has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Resecurity (Incident ID: CISRESMICAMASERSALGIT1786868753) Microsoft (Incident ID: HCLTAT1786448292) Microsoft Power Platform (Incident ID: MICATL1786962683) Microsoft Dynamics 365 (Incident ID: ALL1785522998) Microsoft Security Response Center (Incident ID: POL1785356870) OpenAI (Incident ID: CHE1784787889) AsyncAPI Initiative (Incident ID: CISSONMICORAASYKNX1784341544) AsyncAPI Initiative (Incident ID: ASYMIC1785327908) Packagist Conductors (Incident ID: WHMPACGITCPA1784816835) ShapedPlugin LLC (Incident ID: FORSHATANMICJAMIRHTEX1782147825) PRODAFT (Incident ID: MICSENKASESECRO1782073479) GitHub (Incident ID: SNOGIT1787203094) GitHub (Incident ID: GIT1780453444) npm, Inc. (Incident ID: NPMGIT1779963893) npm, Inc. (Incident ID: ELAGITAMAOPENPM1780050263) ANTV INC (Incident ID: ANTGIT1779395279) Google (Incident ID: OPEMICBRAGOOVIVBRO1779395125) NXP Semiconductors (Incident ID: NPMGITNXPMIC1779193496) Microsoft Security (Incident ID: PUTWEBANYMIC1779215753) GitHub (Incident ID: GIT1779459975) TanStack (Incident ID: GRA1779006227) GitHub (Incident ID: GIT1779251025) GitHub (Incident ID: PHPGIT1778747372) GitHub (Incident ID: GOO1778567308) Anthropic (Incident ID: ANT1778581440)

Does GitHub Brasil have SOC 2 Type 1 certification ?

According to Rankiteo, GitHub Brasil is not certified under SOC 2 Type 1.

Does GitHub Brasil have SOC 2 Type 2 certification ?

According to Rankiteo, GitHub Brasil does not hold a SOC 2 Type 2 certification.

Does GitHub Brasil comply with GDPR ?

According to Rankiteo, GitHub Brasil is not listed as GDPR compliant.

Does GitHub Brasil have PCI DSS certification ?

According to Rankiteo, GitHub Brasil does not currently maintain PCI DSS compliance.

Does GitHub Brasil comply with HIPAA ?

According to Rankiteo, GitHub Brasil is not compliant with HIPAA regulations.

Does GitHub Brasil have ISO 27001 certification ?

According to Rankiteo,GitHub Brasil is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does GitHub Brasil operate in ?

GitHub Brasil operates primarily in the Software Development industry.

How many employees does GitHub Brasil have ?

GitHub Brasil employs approximately 12 people worldwide.

Does GitHub Brasil own any subsidiaries ?

GitHub Brasil presently has no subsidiaries across any sectors.

How many LinkedIn followers does GitHub Brasil have ?

GitHub Brasil's official LinkedIn profile has approximately 206,451 followers.

What is the NAICS classification code for GitHub Brasil ?

GitHub Brasil is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does GitHub Brasil have a Crunchbase profile ?

No, GitHub Brasil does not have a profile on Crunchbase.

Does GitHub Brasil have a LinkedIn profile ?

Yes, GitHub Brasil maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/github-brazil.

How many cybersecurity incidents has GitHub Brasil experienced ?

As of August 23, 2026, Rankiteo reports that GitHub Brasil has experienced 100 cybersecurity incidents.

How many peer or competitor companies does GitHub Brasil have ?

GitHub Brasil has an estimated 30,690 peer or competitor companies worldwide.

What types of cybersecurity incidents has GitHub Brasil faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Breach, Ransomware and Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

GitHub Brasil

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

GitHub Brasil Vendor Cyber Rating & Cyber Score

github.com

Add Your Compliance Badge

O GitHub é a maior e mais avançada plataforma de desenvolvimento de softwares do mundo. Mais de 94 milhões de pessoas usam nossa plataforma para criar coisas incríveis junto dos amigos, colegas de trabalho, de faculdade e até com completos desconhecidos de todos os cantos do mundo. Nunca foi tão fácil criar mais rápido, códigos ainda melhores! Precisa de ajuda? É só enviar uma mensagem por aqui: /git.io/c

GitHub Brasil A.I CyberSecurity Scoring

Scoring History

GitHub Brasil

GitHub Brasil CyberSecurity News & History

Past Incidents

100

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Microsoft Security

Breach

8/2026

MICVODSAF178747...

Microsoft Copilot

Vulnerability

8/2026

GOOMIC178711351...

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787163871

Microsoft Security

Vulnerability

8/2026

MIC1787149631

Microsoft

Vulnerability

100

8/2026

MIC1787156632

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787034406

GitHub

Cyber Attack

8/2026

GIT1786969496

Microsoft Security

Breach

8/2026

Resecurity

CISRESMICAMASER...

Microsoft

Vulnerability

100

8/2026

MICSAP178649758...

Microsoft Security

Vulnerability

8/2026

MIC1786525732

Microsoft Security ...

Vulnerability

8/2026

MIC1786620445

Microsoft Security

Vulnerability

8/2026

MIC1786631229

Microsoft Threat In...

Cyber Attack

100

8/2026

MIC1786568300

Microsoft

Breach

8/2026

Microsoft

HCLTAT178644829...

Microsoft Power Pla...

Vulnerability

100

8/2026

Microsoft Power...

MICATL178696268...

GitHub

Cyber Attack

8/2026

GIT1785839378

Microsoft Dynamics ...

Ransomware

100

7/2026

Microsoft Dynam...

ALL1785522998

Microsoft Security ...

Vulnerability

100

7/2026

MIC1785392682

Microsoft Security ...

Breach

7/2026

Microsoft Secur...

POL1785356870

Microsoft Security

Vulnerability

7/2026

MIC1786107729

Microsoft Security

Cyber Attack

7/2026

MIC1784881741

Microsoft Security ...

Vulnerability

100

7/2026

OpenAI

CHE1784787889

Microsoft Security

Vulnerability

7/2026

MIC1784744777

Microsoft Security

Cyber Attack

7/2026

MIC1784658331

Microsoft Threat In...

Vulnerability

7/2026

MICNOVBRU178442...

Microsoft Security

Vulnerability

7/2026

MIC1784096635

Microsoft

Vulnerability

100

7/2026

MIC1784125827

Microsoft Security

Vulnerability

7/2026

AsyncAPI Initia...

CISSONMICORAASY...

Microsoft Security ...

Vulnerability

7/2026

MIC1784298242

Microsoft Security

Vulnerability

100

7/2026

MIC1784141218

Microsoft

Vulnerability

7/2026

MIC1784816949

Microsoft Security

Vulnerability

7/2026

MIC1784096831

Microsoft

Vulnerability

7/2026

MIC1784089434

Microsoft Threat In...

Cyber Attack

100

7/2026

AsyncAPI Initia...

ASYMIC178532790...

GitHub

Cyber Attack

100

7/2026

Packagist Condu...

WHMPACGITCPA178...

Microsoft Threat In...

Cyber Attack

100

7/2026

MIC1783680524

Microsoft Security ...

Vulnerability

100

7/2026

MIC1783441514

GitHub

Vulnerability

7/2026

GIT1783441439

Microsoft Security ...

Vulnerability

7/2026

MIC1783067043

Microsoft Security

Ransomware

100

7/2026

MIC1787041566

Microsoft Security

Vulnerability

7/2026

MIC1786379301

Microsoft

Vulnerability

6/2026

MIC1782721445

Microsoft Security

Cyber Attack

6/2026

MIC1782483842

Microsoft Security

Vulnerability

6/2026

MIC1782375843

Microsoft Security

Cyber Attack

6/2026

MIC1782404840

Microsoft

Breach

6/2026

ANAMIC178542315...

Microsoft Security

Cyber Attack

6/2026

ShapedPlugin LL...

FORSHATANMICJAM...

Microsoft Security ...

Ransomware

100

6/2026

MIC1782204242

Microsoft Security

Cyber Attack

6/2026

PRODAFT

MICSENKASESECRO...

GitHub

Cyber Attack

6/2026

GIT1781778547

Microsoft Security

Vulnerability

6/2026

MIC1781785861

GitHub

Vulnerability

6/2026

GitHub

SNOGIT178720309...

Microsoft Threat In...

Cyber Attack

6/2026

MIC1781713463

Microsoft Security ...

Vulnerability

6/2026

MIC1781238231

Microsoft Security

Cyber Attack

6/2026

SPOMICADO178120...

Microsoft Security

Vulnerability

6/2026

MIC1782296659

Microsoft Security ...

Vulnerability

6/2026

MIC1781072633

Microsoft Security ...

Vulnerability

6/2026

MIC1781785666

Microsoft Security ...

Vulnerability

6/2026

MIC1781101475

Microsoft Security ...

Breach

6/2026

MIC1780986305

Microsoft

Cyber Attack

6/2026

MIC1780900177

Microsoft Security ...

Vulnerability

6/2026

MIC1780640667

Microsoft 365

Vulnerability

6/2026

LINMIC178053984...

Microsoft Threat In...

Cyber Attack

6/2026

MICISR178456517...

GitHub

Vulnerability

100

6/2026

GitHub

GIT1780453444

Microsoft Security

Vulnerability

6/2026

MIC1781591215

Microsoft Security ...

Vulnerability

100

6/2026

MIC1780287882

Microsoft

Vulnerability

6/2026

MIC1781541072

Microsoft Visual St...

Vulnerability

6/2026

MIC1782398423

Microsoft Security ...

Vulnerability

6/2026

MIC1781540872

Microsoft Security ...

Vulnerability

100

6/2026

MIC1784910234

Microsoft Security

Cyber Attack

100

5/2026

OKTMICATTNVI178...

GitHub

Cyber Attack

5/2026

npm, Inc.

NPMGIT177996389...

GitHub

Cyber Attack

5/2026

npm, Inc.

ELAGITAMAOPENPM...

Microsoft Threat In...

Cyber Attack

5/2026

MIC1784291489

Microsoft Threat In...

Cyber Attack

100

5/2026

MIC1779704661

Microsoft Security

Vulnerability

100

5/2026

MIC1786969594

GitHub

Cyber Attack

100

5/2026

ANTV INC

ANTGIT177939527...

Microsoft Security ...

Vulnerability

5/2026

Google

OPEMICBRAGOOVIV...

Microsoft Security

Cyber Attack

5/2026

MIC1779258738

Microsoft Security

Vulnerability

5/2026

MIC1779272687

GitHub

Cyber Attack

5/2026

GIT1779179198

GitHub

Cyber Attack

5/2026

NXP Semiconduct...

NPMGITNXPMIC177...

Microsoft Security

Cyber Attack

5/2026

Microsoft Secur...

PUTWEBANYMIC177...

GitHub

Cyber Attack

100

5/2026

GitHub

GIT1779459975

Microsoft Threat In...

Cyber Attack

100

5/2026

MIC1779164698

GitHub

Breach

5/2026

TanStack

GRA1779006227

Microsoft Security ...

Vulnerability

5/2026

MIC1778833438

Microsoft Security ...

Vulnerability

100

5/2026

MIC1778732772

GitHub

Breach

5/2026

GitHub

GIT1779251025

GitHub

Vulnerability

5/2026

GitHub

PHPGIT177874737...

Microsoft Security

Vulnerability

5/2026

MIC1778682772

Microsoft Security

Vulnerability

5/2026

MIC1780475036

Microsoft Security ...

Vulnerability

100

5/2026

MIC1778747112

Microsoft Security ...

Vulnerability

5/2026

MIC1780511463

Microsoft Security

Vulnerability

5/2026

MIC1778646305

GitHub

Cyber Attack

100

5/2026

GitHub

GOO1778567308

Microsoft

Vulnerability

100

5/2026

MIC1778229035

GitHub

Vulnerability

5/2026

Anthropic

ANT1778581440

GitHub

Cyber Attack

5/2026

GIT1781001050

Loading…

A.I.

GitHub Brasil Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for GitHub Brasil

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for GitHub Brasil in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for GitHub Brasil in 2026.

Incident Types GitHub Brasil vs Software Development Industry Avg (This Year)

No incidents recorded for GitHub Brasil in 2026.

Incident History - GitHub Brasil (X = Date, Y = Severity)

Loading…

SUBSIDIARY

GitHub Brasil Subsidiaries

GitHub Brasil

Software Development

Website: http://www.github.com

Company Size: 12

GitHubSoftware Development

MicrosoftSoftware Development

Microsoft CloudSoftware Development

Microsoft LearnIT Services and IT Consulting

Microsoft 365IT Services and IT Consulting

Microsoft SecurityIT Services and IT Consulting

Microsoft AzureTechnology, Information and Internet

Microsoft ResearchThink Tanks

Microsoft DeveloperSoftware Development

Microsoft Visual StudioSoftware Development

Microsoft Dynamics 365Software Development

Microsoft Power PlatformSoftware Development

Microsoft AI Cloud Partner ProgramInformation Technology & Services

Microsoft FabricData Infrastructure and Analytics

Microsoft On the IssuesTechnology, Information and Internet

Microsoft SQL ServerSoftware Development

Microsoft SurfaceComputer Hardware

Microsoft AdvertisingAdvertising Services

Microsoft in GovernmentSoftware Development

343 IndustriesComputer Games

Microsoft for HealthcareSoftware Development

M12, Microsoft's Venture FundVenture Capital and Private Equity Principals

Microsoft VivaSoftware Development

Microsoft ReactorTechnology, Information and Internet

Microsoft Threat IntelligenceComputer and Network Security

FlipE-Learning Providers

VidkuIT Services and IT Consulting

Microsoft Military AffairsInformation Technology & Services

Metaswitch NetworksTelecommunications

Microsoft 365 Insider ProgramSoftware Development

MSoftware Development

Halo StudiosComputer Games

Microsoft Most Valuable ProfessionalsTechnology, Information and Internet

Microsoft AIDesarrollo de software

Microsoft CopilotSoftware Development

Microsoft Security Response CenterComputer and Network Security

Microsoft WindowsSoftware Development

Microsoft for NonprofitsSoftware Development

XboxEntertainment Providers

Microsoft News and StoriesTechnology, Information and Internet

Microsoft 365 DeveloperTechnology, Information and Internet

Studios Quality - Xbox Game StudiosComputer Games

Microsoft's Entrepreneurship for Positive ImpactSoftware Development

Go China ConnectionIT 服务与咨询

Visual Studio CodeSoftware Development

Microsoft EventsTechnology, Information and Internet

Microsoft Most Valued ProfessionalSoftware Development

GitHub LATAMSoftware Development

GitHub EducationSoftware Development

Loading…

GitHub Brasil Similar Companies

PedidosYa

pedidosya.com

We’re the delivery market leader in Latin America. Our platform connects over 77.000 restaurants, supermarkets, pharmacies and stores with millions of users. Nowadays we operate in more than 500 cities in Latinamerica. And we are now over 3.400 employees. PedidosYa is available for iOS, Android and Windows Phone operating systems and downloads are now over 20 million.

Baidu, Inc.

baidu.com

Baidu is a leading AI company with strong Internet foundation, driven by our mission to “make the complicated world simpler through technology”. Founded in 2000 as a search engine platform, we were an early adopter of artificial intelligence in 2010. Since then, we have established a full AI stack, from deep learning frameworks to models and applications, with industry-leading self-developed technology at every level. Over the past two decades, we have built a diversified portfolio of products and services, spanning an ecosystem of hundreds of millions of users, millions of developers, and hundreds of thousands of enterprises. We have now integrated our leading AI capabilities into our offerings, driving innovative use cases. Join us to shape the future of AI and technology. For media inquiries, contact us at [email protected]. For career opportunities, visit https://talent.baidu.com/static/index.html

Epic

epic.com

Join us in our mission to help the world get well, help the world stay well, and help future generations be healthier. We hire smart and motivated people from all academic majors to code, test, and implement healthcare software that hundreds of millions of patients and doctors rely on to improve care and ultimately save lives around the globe. No healthcare experience is necessary; we'll train you to be an expert in health IT and we'll provide you with personal development classes to grow as a professional. Our expectations for you are high, but in healthcare so are the stakes.

Synopsys Inc

cb synopsys.com

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.

Bolt

bolt.eu

At Bolt, we're building a future where people don’t need to own personal cars to move around safely and conveniently. A future where people have the freedom to use transport on demand, choosing whatever vehicle's best for each occasion — be it a car, scooter, or e-bike. We're helping over 200 million customers move around in more than 600 cities globally while also supporting more than 4.5 million drivers and couriers to earn a living. The best bit? We're only just getting started. Read more at bolt.eu

Booking.com

booking.com

A career at Booking.com is all about the journey, helping you explore new challenges in a place where you can be your best self. With plenty of exciting twists, turns and opportunities along the way. We’ve always been pioneers, on a mission to shape the future of travel through cutting edge technology, to make it easier for everyone to enjoy amazing experiences wherever they go. Under a desert sky, or in the heart of a bustling city. Discovering the perfect hideaway, or the perfect paella. When you join us, you’ll be part of a community where taking a different path and trying something new is celebrated and supported. And where making a difference counts. We’re determined to make the world of travel more sustainable, more accessible, and more inclusive, to create a positive impact on a global scale. That’s why we’re always looking for people who search for better solutions, the ones eager to stray off the beaten path to find new ways of doing things. Because at Booking.com it’s more than a job, it’s a journey we’re on together.

Nielsen

cb nlsn.co

Nielsen shapes the world’s media and content as a global leader in audience insights, data and analytics. Through our understanding of people and their behaviors across all channels and platforms, we empower our clients with independent and actionable intelligence so they can connect and engage with their audiences—now and into the future. Nielsen operates around the world in more than 55 countries. Learn more at http://nlsn.co/6006JMfty and connect with us on social media (LinkedIn, Twitter, Facebook and Instagram).

Shopee

shopee.com

Shopee is the leading e-commerce platform in Southeast Asia and Taiwan. It is a platform tailored for the region, providing customers with an easy, secure and fast online shopping experience through strong payment and logistical support. Shopee aims to continually enhance its platform and become the region’s e-commerce destination of choice via ongoing product optimisation and localised user-centered strategies. Shopee, a Sea company, was first launched in Singapore in 2015, and has since expanded its reach to Malaysia, Thailand, Taiwan, Indonesia, Vietnam and the Philippines. Sea is a leader in digital entertainment, e-commerce and digital financial services across Greater Southeast Asia. Sea's mission is to better the lives of consumers and small businesses with technology, and is listed on the NYSE under the symbol SE. The Shopee team is rapidly expanding across the region and we are constantly on the lookout for talents who have the passion and drive to become part of a fast-moving and dynamic team. Do check out our career website http://careers.shopee.com for our available positions!

DiDi

didiglobal.com

DiDi Global Inc. is a leading mobility technology platform. It offers a wide range of app-based services across Asia Pacific, Latin America, and other global markets, including ride hailing, taxi hailing, designated driving, hitch and other forms of shared mobility as well as certain energy and vehicle services, food delivery, and intra-city freight services. DiDi provides car owners, drivers, and delivery partners with flexible work and income opportunities. It is committed to collaborating with policymakers, the taxi industry, the automobile industry, and the communities to solve the world’s transportation, environmental, and employment challenges through the use of AI technology and localized smart transportation innovations. DiDi strives to create better life experiences and greater social value, by building a safe, inclusive, and sustainable transportation and local services ecosystem for cities of the future.

Loading…

NEWS

GitHub Brasil CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

September 16, 2025 07:00 AM

Responding to npm package compromise by the Shai-Hulud worm.

How to recognize a Shai-Hulud worm attack on npm packages. Detection and response measures.

Read Article

August 28, 2025 07:00 AM

NX build compromise detection and response

The attackers used a compromised token issued for one of the Nx package maintainers to publish multiple malicious versions of the Nx package...

Read Article

February 04, 2025 08:00 AM

The biggest supply chain attacks in 2024

The first major supply-chain attack in 2024 involved malicious npm packages uploaded to GitHub in early January.

Read Article

February 20, 2022 08:00 AM

The 10 Best Cooking Podcasts For Chefs of Any Level | PS Food

From Recipe Club to The Sporkful, these 10 cooking podcasts offer tips, how-tos, reviews, and more for beginner cooks and seasoned chefs.

Read Article

April 01, 2021 07:00 AM

PHP language source code compromise attempt

Unknown attackers recently attempted to carry out a large-scale supply-chain attack by introducing malicious code to the official PHP GIT repository.

Read Article

March 15, 2006 12:51 PM

VMware by Broadcom - Cloud Computing for the Enterprise

Optimize cloud infrastructure with VMware for app platforms, private cloud, edge, networking, and security.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-78122

SUMMARY

docker-socket-proxy fails to properly gate read endpoints in the /containers Docker API namespace when the CONTAINERS environment variable is set. Attackers can use GET requests to /containers/{id}/archive, /containers/{id}/export, /containers/{id}/logs, and /containers/{id}/top to read arbitrary files and download entire container filesystems as tar archives.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

cvss4

Base Score: 8.3

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

2.8

REFERENCES

CVE-2026-78049

SUMMARY

A vulnerability has been found in Systerel S2OPC up to 1.7.3. Impacted is the function SOPC_NodeMgtHelperInternal_AddVariableNodeAttributes of the file src/ClientServer/address_space/internal/sopc_node_mgt_helper_internal.c of the component AddNodes Service. The manipulation of the argument UserAccessLevel leads to out-of-bounds read. It is possible to initiate the attack remotely. A high degree of complexity is needed for the attack. The exploitability is considered difficult. The exploit has been disclosed to the public and may be used. The identifier of the patch is aafbd37d381b618312ebdf5ddf57027f62c14fdd. It is suggested to install a patch to address this issue.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: 3.7)

cvss2

Base Score: 2.6

Complexity: HIGH

AV:N/AC:H/Au:N/C:N/I:N/A:P

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

cvss4

Base Score: 2.9

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2026-12999

SUMMARY

The Infineon Airoc Wi-Fi driver's transmit callback airoc_mgmt_send() in drivers/wifi/infineon/airoc_wifi.c allocates a net_buf from the fixed airoc_pool for every outbound packet. When whd_network_send_ethernet_data() returns a synchronous failure, the underlying WHD library does not take ownership of the buffer, but the pre-fix driver returned -EIO without releasing it. Each failed transmit therefore permanently leaks one buffer from the pool. airoc_pool is small and fixed (AIROC_WIFI_TX_PACKET_POOL_COUNT + AIROC_WIFI_RX_PACKET_POOL_COUNT, default 20 buffers) and is shared by WHD's whd_host_buffer_get callback for both transmit and receive. Once enough send failures have leaked the pool dry, airoc_wifi_host_buffer_get() returns WHD_BUFFER_ALLOC_FAIL for all subsequent allocations, so both transmit and the WHD-driven receive path fail and Wi-Fi connectivity is lost until the device is rebooted. The leak occurs only on the transmit error path. A Wi-Fi-adjacent attacker can influence the conditions that cause synchronous send failures (for example by deauthenticating/disassociating the station while the local stack continues to attempt transmits), and ordinary transient failures over the device's lifetime accumulate toward the same state. Reliable on-demand triggering is of high complexity and the impact is availability-only, but the resulting denial of service is permanent and non-recoverable without a reboot. The fix releases the buffer with airoc_wifi_buffer_release() on the failure branch, returning it to the pool. The commit also removes a redundant k_sem_give() in airoc_mgmt_disconnect(); because data->sema_common is a binary semaphore (limit 1) the duplicate give merely saturated at 1 and had no security impact.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: HIGH

CVSS:3.1/AV:A/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

1.6

REFERENCES

CVE-2026-74733

SUMMARY

In the Linux kernel, the following vulnerability has been resolved: gpio: pca953x: fix pca953x_irq_bus_sync_unlock regmap lock Locking is disabled in the regmap config as this driver uses its own lock. This means that all calls to regmap functions (read or write) must hold the i2c_lock. The function pca953x_irq_bus_sync_unlock() did not do this, and it was therefore possible that multiple threads could cause an incorrect register to be read/written. A previous patch partly fixed this, but only protected the write to the interrupt mask register, and not the read from the direction register.

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

CVE-2026-74732

SUMMARY

In the Linux kernel, the following vulnerability has been resolved: drm/amd/display: Check for tg ops in dce110_set_avmute Some older DCE timing generators do not implement is_tg_enabled in their ops table. Calling it unconditionally when waiting for AV mute frames causes a NULL pointer dereference on Southern Islands dGPUs when turning the display off over HDMI. Check that tg and the required ops exist before waiting for frames. (cherry picked from commit 2686a0c0aaa07bec2e24131835cf27b5fd4935a5)

Published

Date2026-08-22

Updated

Date2026-08-22

RISK INFORMATION (Score: )

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…