What is the official website of Google for Business India ?

The official website of Google for Business India is https://ads.google.com/intl/en_in/start/overview-ha/.

What is Google for Business India's cybersecurity risk score?

Google for Business India has an AI-generated cybersecurity risk score of 772 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Google for Business India experienced?

According to Rankiteo, Google for Business India currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Google for Business India been affected by any supply chain cyber incidents ?

According to Rankiteo, Google for Business India has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Kernel Foundation - Master Linux Kernel & LDD (Incident ID: LIN1781159040) Google Cloud (Incident ID: LEAGOOVELOVHHOS1781109328) Google (Incident ID: GOOGOO1780561453) Google (Incident ID: OPEMICBRAGOOVIVBRO1779395125) Google Chrome (Incident ID: GOO1779200646) GitHub (Incident ID: GOO1778567308) Foxconn (Incident ID: GOOFOXAPP1778617574) Google (Incident ID: CANADOGOONETVER1777660893) CodeRabbit (Incident ID: CODGIT1783765479) Google AI (Incident ID: GITGOO1780431903) Google (Incident ID: STEGOO1779783870) Google (Incident ID: GITGOO1777302471) Google (Incident ID: GOO1781072701) Anodot by Glassbox (Incident ID: MED1777300385) GitLab (Incident ID: MOZPHAGITPROGOOGIT1780935989) Google Chrome (Incident ID: MICBRAGOOOPEVIV1775147800) Axios (Incident ID: AXIGOO1775048584) Apple (Incident ID: OPEGOOFACAPP1772800304) Google (Incident ID: UNIGOO1776879280) Tecplix Technologies Private Limited (Incident ID: BAD1772389516) Google Cloud (Incident ID: GOO1772173606) Anthropic (Incident ID: ANTGOOAPPMED1771064819) Google Cloud (Incident ID: MEDZYPTELMETTIKGOOYOU1770029110) okta (Incident ID: OKTSALGOO1769222214) Google Cloud (Incident ID: GOO1768649952) Google (Incident ID: CRU1769440011) Dolby Laboratories (Incident ID: GOODOL1767776529) Klue (Incident ID: GOOKLUVMW1782304423) Google (Incident ID: ADOSTRGOO1780611936) Snowflake (Incident ID: MEREQUUNIMAEMGMGOOTOYSNOALLORARIPTIC1775528897) Google Cloud (Incident ID: GOOVER1783448669) Google Analytics (Incident ID: GOOCLO1778581869) NA (Incident ID: GITGOODEEWPSTEL1770472851) Google (Incident ID: GOO1779733470) GitHub (Incident ID: GIT3492034100925) NPM (Incident ID: GOONPMORGGOVAPPMETTHEAWSTIKK7-1773672350)

Does Google for Business India have SOC 2 Type 1 certification ?

According to Rankiteo, Google for Business India is not certified under SOC 2 Type 1.

Does Google for Business India have SOC 2 Type 2 certification ?

According to Rankiteo, Google for Business India does not hold a SOC 2 Type 2 certification.

Does Google for Business India comply with GDPR ?

According to Rankiteo, Google for Business India is not listed as GDPR compliant.

Does Google for Business India have PCI DSS certification ?

According to Rankiteo, Google for Business India does not currently maintain PCI DSS compliance.

Does Google for Business India comply with HIPAA ?

According to Rankiteo, Google for Business India is not compliant with HIPAA regulations.

Does Google for Business India have ISO 27001 certification ?

According to Rankiteo,Google for Business India is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Google for Business India operate in ?

Google for Business India operates primarily in the Technology, Information and Internet industry.

How many employees does Google for Business India have ?

Google for Business India employs approximately None employees people worldwide.

Does Google for Business India own any subsidiaries ?

Google for Business India presently has no subsidiaries across any sectors.

How many LinkedIn followers does Google for Business India have ?

Google for Business India's official LinkedIn profile has approximately 17,041 followers.

What is the NAICS classification code for Google for Business India ?

Google for Business India is classified under the NAICS code 513, which corresponds to Others.

Does Google for Business India have a Crunchbase profile ?

No, Google for Business India does not have a profile on Crunchbase.

Does Google for Business India have a LinkedIn profile ?

Yes, Google for Business India maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/google-for-biz-in.

How many cybersecurity incidents has Google for Business India experienced ?

As of July 31, 2026, Rankiteo reports that Google for Business India has experienced 100 cybersecurity incidents.

How many peer or competitor companies does Google for Business India have ?

Google for Business India has an estimated 15,107 peer or competitor companies worldwide.

What types of cybersecurity incidents has Google for Business India faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability, Breach, Ransomware and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

GBI

Boost Score +25 with badge (5 left)

772

/1000

Fair

797

/1000

Fair

Google for Business India Vendor Cyber Rating & Cyber Score

google.com

Add Your Compliance Badge

Google for Business India helps Indian businesses, marketers, advertisers, and SMBs grow using Google Ads, AI-powered tools, and digital best practices. Follow us for insights, updates, and inspiration.

GBI A.I CyberSecurity Scoring

Scoring History

GBI

Google for Business India CyberSecurity News & History

Past Incidents

100

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Google

Cyber Attack

7/2026

APPDISTREGOOTHE...

Google

Cyber Attack

7/2026

GOOCOI178368685...

Google Antigravity

Vulnerability

7/2026

ANYWINGOOAMAAUG...

Google

Vulnerability

100

6/2026

THECLOGOOTHE178...

Google

Cyber Attack

6/2026

GOOTIK178168478...

Google Chrome

Vulnerability

6/2026

GOO1781000631

Google

Vulnerability

100

6/2026

Kernel Foundati...

LIN1781159040

Google Cloud

Cyber Attack

6/2026

Google Cloud

LEAGOOVELOVHHOS...

Google

Cyber Attack

6/2026

Google

GOOGOO178056145...

Android

Vulnerability

100

6/2026

AND1780388640

Google

Cyber Attack

5/2026

TIKGOO177966876...

Google

Vulnerability

5/2026

Google

OPEMICBRAGOOVIV...

Google Analytics

Breach

5/2026

OPEGOO177879042...

Google Chrome

Vulnerability

5/2026

Google Chrome

GOO1779200646

Google Chrome

Vulnerability

5/2026

GOO1778588839

Google

Vulnerability

5/2026

GOO1778574244

Google

Cyber Attack

100

5/2026

U.SGOO177856001...

Google

Cyber Attack

100

5/2026

GitHub

GOO1778567308

Google

Ransomware

100

5/2026

Foxconn

GOOFOXAPP177861...

Google Research

Cyber Attack

5/2026

GOO1778516874

Google

Breach

5/2026

METORATICBANYAH...

Google

Cyber Attack

5/2026

Google

CANADOGOONETVER...

Google Antigravity

Cyber Attack

5/2026

CodeRabbit

CODGIT178376547...

Google AI

Cyber Attack

5/2026

Google AI

GITGOO178043190...

Google

Cyber Attack

5/2026

BLETREGOO178066...

Android

Vulnerability

5/2026

AND1777969476

Google

Cyber Attack

100

5/2026

Google

STEGOO177978387...

Google Chrome

Vulnerability

4/2026

GOOMOZ177749463...

Google

Vulnerability

4/2026

Google

GITGOO177730247...

Google

Vulnerability

4/2026

GOOMICMED177765...

Google

Cyber Attack

4/2026

GOOSAL177791964...

Google

Vulnerability

4/2026

Google

GOO1781072701

Google

Cyber Attack

4/2026

Anodot by Glass...

MED1777300385

Google Public Polic...

Breach

4/2026

ROCGOOAWS177643...

Google

Cyber Attack

4/2026

LASGOO177616994...

Google

Vulnerability

100

4/2026

GOOLIN178349929...

Google

Vulnerability

4/2026

GOO1775571947

Google

Vulnerability

4/2026

ANTGOO177660882...

Google

Cyber Attack

4/2026

GitLab

MOZPHAGITPROGOO...

Google Chrome

Vulnerability

4/2026

Google Chrome

MICBRAGOOOPEVIV...

Google Research

Cyber Attack

100

3/2026

Axios

AXIGOO177504858...

Google Workspace

Breach

3/2026

WORNOTGOOZOONIK...

Google

Cyber Attack

3/2026

THEGOO177447048...

Google Research

Vulnerability

3/2026

GOOANTOPE177373...

Google

Breach

3/2026

GOO1779200764

Google Chrome

Vulnerability

3/2026

GOO1773664366

Google

Cyber Attack

3/2026

BININSGOO177325...

Google

Vulnerability

3/2026

GOO1775053870

Google Cloud

Vulnerability

3/2026

GOO1773203263

Google

Cyber Attack

3/2026

Apple

OPEGOOFACAPP177...

Google Cloud

Vulnerability

100

3/2026

GOO1781699328

Google Workspace

Cyber Attack

3/2026

MICGOO177262824...

Google

Cyber Attack

3/2026

GOO1774348563

Android

Vulnerability

3/2026

QUAAND177256349...

Google

Cyber Attack

3/2026

GOO1772490314

Google

Cyber Attack

3/2026

GOO1781613134

Google

Cyber Attack

3/2026

Google

UNIGOO177687928...

Google Polska

Cyber Attack

3/2026

WIRGOO178165588...

Google

Cyber Attack

100

3/2026

Tecplix Technol...

BAD1772389516

Android

Cyber Attack

2/2026

OPPXIAAND177231...

Google

Vulnerability

2/2026

GOO1772253234

Google Cloud

Vulnerability

2/2026

Google Cloud

GOO1772173606

Google Research

Cyber Attack

2/2026

TELGOO177211089...

Google Chrome

Vulnerability

2/2026

GOO1771975200

Google

Vulnerability

2/2026

OPEGOOMICVIVBRA...

Google Ads

Cyber Attack

2/2026

Anthropic

ANTGOOAPPMED177...

Google Research

Cyber Attack

100

2/2026

GOOZOO177090838...

Google Chrome

Breach

2/2026

GOOBLOKONBIG177...

Google Cloud

Vulnerability

2/2026

GOO1770717378

Google Cloud

Cyber Attack

2/2026

Google Cloud

MEDZYPTELMETTIK...

Google

Cyber Attack

2/2026

AMAINSCOIGOOFLI...

Google Workspace

Cyber Attack

1/2026

okta

OKTSALGOO176922...

Google

Breach

1/2026

GOO1769272069

Google

Vulnerability

1/2026

GOO1768856368

Google

Vulnerability

1/2026

GOO1768808982

Google Cloud

Vulnerability

1/2026

Google Cloud

GOO1768649952

Google

Breach

1/2026

Google

CRU1769440011

Google

Vulnerability

1/2026

GOO1769604147

Google Chrome

Vulnerability

1/2026

GOO1769604246

Google Chrome

Vulnerability

1/2026

GOO1768994572

Google

Vulnerability

1/2026

Dolby Laborator...

GOODOL176777652...

Google Cloud

Cyber Attack

1/2026

GOO1767719152

Google

Vulnerability

1/2026

GOO1772476003

Google Research

Vulnerability

100

1/2026

GOOAMAOPEANT177...

YouTube

Vulnerability

1/2026

YOUGOO178221066...

Google

Breach

100

1/2026

Klue

GOOKLUVMW178230...

Google Cloud

Vulnerability

12/2025

AMAUNIGOOWAK176...

Google

Cyber Attack

12/2025

Google

ADOSTRGOO178061...

Google

Ransomware

100

12/2025

Snowflake

MEREQUUNIMAEMGM...

Google for Business...

Vulnerability

12/2025

GOO1765461915

Google Cloud

Vulnerability

11/2025

Google Cloud

GOOVER178344866...

Google Cloud

Cyber Attack

11/2025

GOO1779352039

Google Analytics

Cyber Attack

11/2025

Google Analytic...

GOOCLO177858186...

Google

Vulnerability

10/2025

GOO1781253053

Google

Cyber Attack

9/2025

GITGOODEEWPSTEL...

Google

Cyber Attack

100

9/2025

Google

GOO1779733470

Google for Business...

Cyber Attack

8/2025

GOO846082525

Google

Cyber Attack

8/2025

METSIGGOO178051...

Google

Vulnerability

8/2025

GitHub

GIT349203410092...

Google

Vulnerability

8/2025

NPM

GOONPMORGGOVAPP...

Loading…

A.I.

GBI Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for GBI

Incidents vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for Google for Business India in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Google for Business India in 2026.

Incident Types GBI vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for Google for Business India in 2026.

Incident History - GBI (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Google for Business India Subsidiaries

GBI

Technology, Information and Internet

Website: https://ads.google.com/intl/en_in/start/overview-ha/

Company Size: 5,001-10,000 employees

GoogleSoftware Development

Google for DevelopersTechnology, Information and Internet

Google CloudSoftware Development

YouTubeTechnology, Information and Internet

YouTube AdvertisersAdvertising Services

Think with GoogleAdvertising Services

Loading…

Google for Business India Similar Companies

Swiggy

swiggy.com

Swiggy is India’s pioneering on-demand convenience platform, catering to millions of consumers each month. Founded in 2014, its mission is to elevate the quality of life for the urban consumer by offering unparalleled convenience. With an extensive footprint in food delivery, Swiggy Food collaborates with nearly 2 lakh restaurants across 600+ cities. Swiggy Instamart, its quick commerce platform operating in 120+ cities, delivers groceries and other essentials across 40+ categories in 10 minutes. Fueled by a commitment to innovation, Swiggy continually incubates and integrates new services like Swiggy Dineout and Swiggy Genie into its multi-service app. Leveraging cutting-edge technology and Swiggy One, the country’s only membership program offering benefits across food, quick commerce, dining out, and pick-up and drop services, Swiggy aims to provide a superior experience to its consumers. For more information, visit www.swiggy.com

Jumia Group

cb jumia.com

Jumia (NYSE :JMIA) is a leading e-commerce platform in Africa. It is built around a marketplace, Jumia Logistics, and JumiaPay. The marketplace helps millions of consumers and sellers to connect and transact. Jumia Logistics enables the delivery of millions of packages through our network of local partners. JumiaPay facilitates the payments of online transactions for Jumia's ecosystem. With over 1 billion people and 500 million internet users in Africa, Jumia believes that e-commerce is making people's lives easier by helping them shop and pay for millions of products at the best prices wherever they live. E-commerce is also creating new opportunities for SMEs to grow, and job opportunities for a new generation to thrive. With over 3,000 employees in more than 9 countries in Africa, Jumia is led by top talented leaders offering a great mix of local and international talents and is backed by very high-profile shareholders. Jumia is committed to creating sustainable impact in Africa. Jumia offers unique opportunities in a vibrant and booming environment, creating new jobs, new skills, and empowering a new generation.

Akamai Technologies

akamai.com

At Akamai, we make life better for billions of people, billions of times a day. Every day, billions of people around the world connect with their favorite brands to shop online, play the latest video games, log into mobile banking apps, learn remotely, share videos with friends, and so much more. They may not know it, but Akamai is there, powering and protecting life online. Over 20 years ago, we set out to solve the toughest challenge of the early internet: the “World Wide Wait.” And we’ve been solving the internet’s toughest challenges ever since, working toward our vision of a safer and more connected world. With the world’s most distributed compute platform — from cloud to edge — we make it easy for businesses to develop and run applications, while we keep experiences closer to users and threats farther away. That’s why innovative companies worldwide choose Akamai to build, deliver, and secure their digital experiences. Our leading security, compute, and delivery solutions are helping global companies make life better for billions of people, billions of times a day. Devoted, determined problem-solvers who share a passion for technology, we’re always pushing ground-breaking ideas and driving innovation. Want to power and protect life online, by solving the toughest challenges? Be part of an amazing team. Let’s connect: LinkedIn: https://www.linkedin.com/company/akamai-technologies Twitter: https://twitter.com/Akamai Blog: https://www.akamai.com/blog

SLB

slb.com

SLB is a global technology company that has driven energy innovation for more than a century. With a global footprint in more than 100 countries and employees representing almost twice as many nationalities, we work each day on innovating oil and gas, delivering digital at scale, decarbonizing industries, and developing and scaling new energy systems that accelerate the energy transition. Find out more at slb.com.

Myntra

myntra.com

At Myntra, we don’t just follow fashion - we define it. As India's leading fashion, lifestyle, and beauty destination, we bring together the best of style, technology, and innovation to create a seamless shopping experience for our customers. With a commitment to empowering self-expression, we curate over 13,000+ brands and labels, blending global trends with India’s unique fashion pulse. Our people are at the heart of everything we do. We thrive on innovation and impact, where data-driven insights and cutting-edge technology shape the future of fashion. We encourage out-of-the-box thinking, collaboration with leaders and experts, and driving meaningful change. Myntraites have a passion for fashion - we take pride in being India's voice in fashion and in the brand we stand for. Our non-hierarchical, inclusive culture values ownership, meritocracy, and self-driven individuals who challenge the status quo and grow with every opportunity. We believe in empowering every Myntraite by providing the freedom to shape their career, fostering an environment where creativity thrives, and ensuring well-being and self-expression for all. If you thrive in a fast-paced, result-driven environment and share our passion for fashion, Myntra is the place for you. Explore opportunities: https://jobs.myntra.com/home Be The Trend. Be Myntra.

Everforth

everforth.com

Everforth, Inc. (NYSE: EFOR) is a leading technology and digital engineering company that helps organizations adapt, innovate, and thrive in a world of constant change. Our six solution areas — AI and data, cloud and infrastructure, application and digital engineering, experience, cybersecurity, and enterprise platforms — accelerate time to value for our commercial and federal clients. Powered by proprietary assets, accelerators, and proven expertise, Everforth turns complexity into progress and delivers measurable outcomes. Everforth: Adapt and Thrive™.

Zomato

cb zomato.com

Zomato’s mission statement is “better food for more people.” Since our inception in 2010, we have grown tremendously, both in scope and scale - and emerged as India’s most trusted brand during the pandemic, along with being one of the largest hyperlocal delivery networks in the country. Today, Zomato represents a wide range of cultures through its diversified 5000+ team members, 3.5 lakh+ delivery partners, and our biggest collective of the finest restaurant partners. We are grateful that our business is able to provide upward social and economic movement for millions of households – of our delivery partners, as well as restaurant staff. We think of all of us as one big family! Our passion is driven by purpose and we take immense pride in our initiative ‘Feeding India’, one of India’s largest not-for-profits working to ensure that nobody in India goes to bed hungry. As of now, Feeding India provides over 150,000 nutritious meals to the underprivileged every day. In April 2020, Feeding India ran one of the largest food distribution drives in the world during the first wave of COVID, and distributed 78 million meals to daily wagers across the length and breadth of the country. During the second wave of COVID-19, Feeding India was again the first to act. We were able to source over 9,000 oxygen concentrators and distributed them for free to government hospitals across the country. This helped save millions of lives during one of the worst humanitarian crises faced by India in the recent times. We’re innovating hard to make last-mile delivery carbon neutral, to eliminate the use of plastic packaging, create meaningful opportunities in the gig economy, and to feed our country’s ever-growing appetite for high-quality, affordable, and hygienic food, one delivery at a time!

Nothing

cb nothing.tech

Nothing exists to make tech feel exciting again. We’re building a different kind of company, one that puts design, emotion, and human creativity at the heart of everything we do. From the way our products look to how they sound, feel, and function, we care about the details that make technology not just useful, but inspiring. This is a place for the curious. The creators. The ones who ask why not and mean it. If you're drawn to bold ideas, fast moves, and work that actually makes you feel something, you’ll fit right in. We're not here to follow the rules. We're here to make better ones. Founded in London in 2020, Nothing is a design-led tech company building an alternative to the industry giants. Our products, from award-winning smartphones to expressive audio and wearables, blend iconic design with intuitive engineering to put people and creativity back at the centre of consumer tech. Backed by GV (Google Ventures), EQT Ventures, C Ventures, and influential investors like Tony Fadell (iPod), Casey Neistat, and Kevin Lin (Twitch), we’ve grown from startup to global challenger in just a few years.

Fanatics

fanaticsinc.com

Fanatics is a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.

Loading…

NEWS

Google for Business India CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66720

SUMMARY

The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE (EtherType 0x88B8) Layer-2 multicast messages. A specially crafted GOOSE frame containing an undersized timestamp field can trigger a heap out-of-bounds read during message processing, causing the process to crash and resulting in a denial-of-service condition.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-66421

SUMMARY

OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript in the administrator's browser session by injecting HTML markup into agent transcript messages processed through the sessions API. Attackers can craft a message containing inline event handler payloads such as an img tag with an onerror attribute within the 60-character rendering budget, which is stored in the session transcript and interpolated unsanitized into innerHTML on the default landing page, allowing theft of session tokens and unauthorized calls to authenticated administrative endpoints including agent instruction file modification.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 9.3)

cvss3

Base Score: 9.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

cvss4

Base Score: 8.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.8

Exploitability

2.8

REFERENCES

CVE-2026-66420

SUMMARY

MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the CheckWebServerOriginName() function within webserver.js when self-signed certificates are in use. Attackers can open cross-origin WebSocket connections to any of the twelve WebSocket endpoints, send crafted action commands to exfiltrate the server sessionKey used to sign session cookies, forge session tokens as arbitrary users, and gain full remote control of all managed devices governed by the MeshCentral instance.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-66369

SUMMARY

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap out-of-bounds read. On affected platforms, this condition reliably terminates the subscriber process and causes a denial-of-service.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-66364

SUMMARY

The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process bus. When processing specific payload fields, an attacker controlled inner element length may exceed its enclosing length, causing the parser to over read by one byte. This out-of-bounds read reliably terminates the subscriber process, resulting in a denial-of-service condition.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…