What is Harvard Kenneth C. Griffin Graduate School of Arts and Sciences's cybersecurity risk score?

Harvard Kenneth C. Griffin Graduate School of Arts and Sciences has an AI-generated cybersecurity risk score of 771 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Harvard Kenneth C. Griffin Graduate School of Arts and Sciences experienced?

According to Rankiteo, Harvard Kenneth C. Griffin Graduate School of Arts and Sciences currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Harvard Kenneth C. Griffin Graduate School of Arts and Sciences been affected by any supply chain cyber incidents ?

According to Rankiteo, Harvard Kenneth C. Griffin Graduate School of Arts and Sciences has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Instructure (Incident ID: INS1779266405) Instructure (Incident ID: STAVICINSHAR1778218101) Instructure (Incident ID: UNISTAINSHAR1778200829) Ghost (Incident ID: DUCHARGHO1779798590) Instructure (Incident ID: THEYALRUTHARSTAINSPRI1778258906) Instructure (Incident ID: INSRUTUDEHARCOL1782312004) Instructure (Incident ID: MCGVERHARUDE1777034314) Oracle (Incident ID: DARHARPRICOLCLE1767881845)

Does Harvard Kenneth C. Griffin Graduate School of Arts and Sciences have SOC 2 Type 2 certification ?

According to Rankiteo, Harvard Kenneth C. Griffin Graduate School of Arts and Sciences does not hold a SOC 2 Type 2 certification.

Does Harvard Kenneth C. Griffin Graduate School of Arts and Sciences have PCI DSS certification ?

According to Rankiteo, Harvard Kenneth C. Griffin Graduate School of Arts and Sciences does not currently maintain PCI DSS compliance.

Does Harvard Kenneth C. Griffin Graduate School of Arts and Sciences have ISO 27001 certification ?

According to Rankiteo,Harvard Kenneth C. Griffin Graduate School of Arts and Sciences is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

How many employees does Harvard Kenneth C. Griffin Graduate School of Arts and Sciences have ?

Harvard Kenneth C. Griffin Graduate School of Arts and Sciences employs approximately 239 people worldwide.

How many LinkedIn followers does Harvard Kenneth C. Griffin Graduate School of Arts and Sciences have ?

Harvard Kenneth C. Griffin Graduate School of Arts and Sciences's official LinkedIn profile has approximately 9,384 followers.

What is the NAICS classification code for Harvard Kenneth C. Griffin Graduate School of Arts and Sciences ?

Harvard Kenneth C. Griffin Graduate School of Arts and Sciences is classified under the NAICS code 6113, which corresponds to Colleges, Universities, and Professional Schools.

Does Harvard Kenneth C. Griffin Graduate School of Arts and Sciences have a Crunchbase profile ?

No, Harvard Kenneth C. Griffin Graduate School of Arts and Sciences does not have a profile on Crunchbase.

Does Harvard Kenneth C. Griffin Graduate School of Arts and Sciences have a LinkedIn profile ?

Yes, Harvard Kenneth C. Griffin Graduate School of Arts and Sciences maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/harvardgsas.

How many peer or competitor companies does Harvard Kenneth C. Griffin Graduate School of Arts and Sciences have ?

Harvard Kenneth C. Griffin Graduate School of Arts and Sciences has an estimated 17,297 peer or competitor companies worldwide.

What types of cybersecurity incidents has Harvard Kenneth C. Griffin Graduate School of Arts and Sciences faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware, Cyber Attack and Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

HKCGGSAS

Boost Score +25 with badge (5 left)

771

/1000

Fair

796

/1000

Fair

Harvard Kenneth C. Griffin Graduate School of Arts and Sciences Vendor Cyber Rating & Cyber Score

harvard.edu

Add Your Compliance Badge

The Harvard Kenneth C. Griffin Graduate School of Arts and Sciences is where scholarship and innovation meet, where ideas are challenged and theories developed, where new knowledge is created, and where scholars emerge. We actively recruit and cultivate a diverse community of students across 58 fields of study. We also guarantee 5 years of funding to all PhD candidates.

HKCGGSAS A.I CyberSecurity Scoring

Scoring History

HKCGGSAS

Harvard Kenneth C. Griffin Graduate School of Arts and Sciences CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Harvard University

Ransomware

100

5/2026

Instructure

INS1779266405

Harvard University

Cyber Attack

100

5/2026

Instructure

STAVICINSHAR177...

Harvard University

Ransomware

100

5/2026

Instructure

UNISTAINSHAR177...

Harvard University

Cyber Attack

5/2026

Ghost

DUCHARGHO177979...

Harvard University

Cyber Attack

100

5/2026

Instructure

THEYALRUTHARSTA...

Harvard University

Cyber Attack

100

5/2026

Instructure

INSRUTUDEHARCOL...

Harvard University

Breach

100

4/2026

Instructure

MCGVERHARUDE177...

Harvard University

Breach

1/2026

Oracle

DARHARPRICOLCLE...

Harvard University

Ransomware

100

11/2025

HAR1770230343

Harvard University

Breach

1/2020

TICHARATTPRIMCD...

Loading…

A.I.

HKCGGSAS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for HKCGGSAS

Incidents vs Higher Education Industry Avg (This Year)

No incidents recorded for Harvard Kenneth C. Griffin Graduate School of Arts and Sciences in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Harvard Kenneth C. Griffin Graduate School of Arts and Sciences in 2026.

Incident Types HKCGGSAS vs Higher Education Industry Avg (This Year)

No incidents recorded for Harvard Kenneth C. Griffin Graduate School of Arts and Sciences in 2026.

Incident History - HKCGGSAS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Harvard Kenneth C. Griffin Graduate School of Arts and Sciences Subsidiaries

HKCGGSAS

Higher Education

Website: https://gsas.harvard.edu

Company Size: 239

Harvard UniversityHigher Education

Harvard Business SchoolHigher Education

Harvard Business School OnlineE-Learning Providers

Harvard Business School Executive EducationHigher Education

HBS Career & Professional DevelopmentHigher Education

HBS Institute for Business in Global SocietyBusiness Content

HBS Leadership InitiativeHigher Education

HBS Social Enterprise InitiativeCivic and Social Organizations

HBS Business and Environment InitiativeHigher Education

HBS Arthur Rock Center for EntrepreneurshipHigher Education

HBS Health Care InitiativeHospitals and Health Care

HBS Race, Gender & Equity InitiativeBusiness Content

HBS Private Capital ProjectHigher Education

HBS FoundryBusiness Content

Harvard Law SchoolHigher Education

Harvard T.H. Chan School of Public HealthHigher Education

Harvard T.H. Chan School of Public Health HR, Talent AcquisitionHigher Education

Harvard Public Health magazinePeriodical Publishing

Lee Kum Sheung Center for Health and HappinessPublic Health

Harvard Ministerial Leadership ProgramHigher Education

Master in Health Care Management at Harvard Chan SchoolHigher Education

Center for Health Communication at Harvard T.H. Chan School of Public HealthHigher Education

Harvard Chan Alumni and FriendsHigher Education

Center for Communicable Disease Dynamics - CCDDHigher Education

Department of Environmental Health at Harvard Chan SchoolHigher Education

Harvard Chan Education and Research CenterHigher Education

Voices in LeadershipHigher Education

Department of Nutrition at Harvard Chan SchoolHigher Education

Prevention Research Center on Nutrition and Physical Activity at Harvard Chan SchoolHigher Education

International Health Systems ProgramPublic Health

Harvard Graduate School of EducationHigher Education

Harvard University Graduate School of DesignArchitecture and Planning

Harvard Extension SchoolHigher Education

Harvard Advanced Leadership InitiativeHigher Education

Harvard Medical SchoolHigher Education

Harvard Medical School Department of Biomedical InformaticsHigher Education

Harvard Medical School Center for BioethicsHigher Education

Harvard Medical School Department of Health Care PolicyHigher Education

Harvard Medical School Center for Computational BiomedicineHigher Education

Black Staff CaucusHigher Education

Harvard Kennedy SchoolHigher Education

Harvard John A. Paulson School of Engineering and Applied SciencesHigher Education

Harvard University Talent and Careers ConnectionHigher Education

Wyss Institute at Harvard UniversityBiotechnology Research

Disruptive: Wyss Institute PodcastBiotechnology

Harvard Office of Technology Development (OTD)Research Services

Harvard Divinity SchoolHigher Education

Harvard Radcliffe InstituteHigher Education

Harvard Division of Continuing EducationHigher Education

Fairbank Center for Chinese Studies, Harvard UniversityHigher Education

Harvard University Alumni Affairs and Development (AA&D)Higher Education

The Harvard Center for Population and Development StudiesHigher Education

Loading…

Harvard Kenneth C. Griffin Graduate School of Arts and Sciences Similar Companies

Università degli Studi di Padova

unipd.it

Established in 1222, the University of Padova is one of Europe’s oldest and most prestigious seats of learning. Here is where Galileo Galilei taught and Elena Lucrezia Cornaro Piscopia became the first woman in the world to receive a university degree. Traditionally a free-thinking and trailblazing centre of education and research, the University Padova keeps faith with his historical motto Universa Universis Patavina Libertas: Liberty of Padova, universally and for all. Its excellence in the area of research is acknowledged by the National Agency for University Evaluation (Anvur 2017), which placed Padova at the first place of the national rankings for major universities. The University of Padova firmly believes in international collaborations as fundamental growth opportunities, as can be testified by the always increasing number of graduate and post-graduate student exchange programs promoted every year. Valuing the importance of quality and innovation, the University of Padova updates constantly its courses in order to meet the ever-changing needs of the labour market. Its potential students can choose among/between 8 schools, 32 departments, 173 degree courses and a wide range of post-graduate training options. Social Policy https://bit.ly/PSunipd

UC San Diego

ucsd.edu

Recognized as one of the top 15 research universities worldwide, our culture of collaboration sparks discoveries that advance society and drive economic impact. Everything we do is dedicated to ensuring our students have the opportunity to become changemakers, equipped with the multidisciplinary tools needed to accelerate answers to our world’s most pressing issues.

Colorado State University

colostate.edu

At Colorado State, there’s this energy we all share—this undeniable excitement for what’s next. And it’s a feeling you can only find here. As you choose a college, one of the biggest questions most students have is what to study. At Colorado State, we offer over 250 programs, over 50 minors, and several advising tracks. That means you’ll have the ability to reach your goals — no matter what they are. Founded in 1870 as the Colorado Agricultural College, Colorado State University is now among the nation's leading research universities. Our world-class research in infectious disease, atmospheric science, clean energy technologies, environmental science, and biomedical technology attracted more than $300 million in research funding annually. Our professional programs in veterinary medicine, occupational therapy, journalism, agriculture and construction management are ranked among the nation's best. Colorado State is the "university of choice" for Colorado residents; 30% of all of Colorado's science, math, engineering and technology majors pursue degrees at CSU. This is LinkedIn account is officially recognized by Colorado State University; however, the views and opinions expressed on this page are not necessarily those of the University. CSU retains discretion to allow or disallow comments and/or posts on this page. For more information about CSU’s Social Media Policy, visit http://www.socialmedia.colostate.edu.

University of Delaware

udel.edu

The University of Delaware - a state assisted, privately chartered institution - is a Land Grant, Sea Grant, Space Grant and Carnegie Research University (very high research activity). The University, with origins in 1743, was chartered by the State of Delaware in 1833. A Women's College was opened in 1914, and in 1945 UD became permanently coeducational. The main campus is located in Newark, Delaware, a suburban community of nearly 30,000, situated midway between Philadelphia and Baltimore. Courses are also offered at the Wilmington campus and at other locations throughout the State, including Dover, Georgetown, Milford, and Lewes.

Servicio Nacional de Aprendizaje (SENA)

sena.edu.co

El Servicio Nacional de Aprendizaje, SENA, es un establecimiento público del orden nacional con personería jurídica, patrimonio propio e independiente y autonomía administrativa. Adscrito al Ministerio del Trabajo de Colombia, ofrece formación gratuita a millones de colombianos que se benefician con programas técnicos, tecnológicos y complementarios, que enfocados al desarrollo económico, tecnológico y social del país, entran a engrosar las actividades productivas de las empresas y de la industria, para obtener mejor competitividad y producción con los mercados globalizados La Agencia Pública de Empleo SENA brinda desde hace más de 30 años un servicio gratuito que conecta a las personas que buscan empleo con las empresas que requieren talento humano. Además, es un operador autorizado por el Servicio Público de Empleo del Ministerio de Trabajo para realizar procesos de intermediación laboral en Colombia y en el exterior. El SENA, a través de la Agencia Pública de Empleo, gestiona los mecanismos y estrategias de atención dirigidas a poblaciones vulnerables, con el fin de aportar al mejoramiento de su perfil ocupacional y aumentar sus niveles de inserción laboral y empleabilidad.

University of North Texas

unt.edu

Ranked a Tier One research university by the Carnegie Classification, UNT is the flagship of the UNT System and is located in Denton, Texas. With 242 degree programs and a thriving community of nearly 44,000 students, UNT serves the North Texas region and helps drive the state’s economy through groundbreaking research, educational excellence focused on career readiness, and a spirit of creativity, innovation, and entrepreneurship. Across its Denton and Frisco campuses, UNT students earned more than 13,000 degrees last year.

Washington University in St. Louis

washu.edu

Washington University in St. Louis, a medium-sized, independent university, is dedicated to challenging its faculty and students alike to seek new knowledge and greater understanding of an ever-changing, multicultural world. The university has played an integral role in the history and continuing growth of St. Louis and benefits in turn from the wide array of social, cultural and recreational opportunities offered by the metropolitan area to its more than 2.8 million residents. The mission of Washington University in St. Louis is the promotion of learning — learning by students and by faculty. Teaching, the transmission of knowledge, is central to our mission, as is research, the creation of new knowledge.

University of Central Florida

ucf.edu

Founded in 1963 to provide talent for Central Florida and the growing U.S. space program, UCF has been making an impact on the state, the nation — and outer space — ever since. With 13 colleges and more than 230 degree programs, your passion lies at one of our campus locations designed to help you succeed. From the main campus in east Orlando to UCF Downtown and Rosen College of Hospitality Management to the Academic Health Sciences Campus, you’ll have the opportunity to learn in the heart of your industry. UCF also has multiple regional locations and fully online programs — including online bachelor’s degrees, online graduate degrees, online certificates and more — to ensure that you can achieve your dreams whenever and wherever you want. Being part of the UCF alumni family means... being a community. A group of people who have a UCF experience, who care about the university and who want to stay connected to it. Being the voice of UCF alumni. Upholding and creating the traditions of UCF. We began with 423, and now we are over 340,000 strong. Our UCF experience has altered us. It has stuck with us. It has changed us. We engage the world with spirit and pride. We are passionate. We are enthusiastic. We are dedicated. We inform, educate and inspire. We embrace our inner Knights. We love our alma mater. We bleed black and gold. We are UCF.

Purdue University

purdue.edu

Purdue University is a vast laboratory for discovery. The university is known not only for science, technology, engineering, and math programs, but also for our imagination, ingenuity, and innovation. It’s a place where those who seek an education come to make their ideas real — especially when those transformative discoveries lead to scientific, technological, social, or humanitarian impact. Founded in 1869 in West Lafayette, Indiana, the university proudly serves its state as well as the nation and the world. Academically, Purdue’s role as a major research institution is supported by top-ranking disciplines in pharmacy, business, engineering, and agriculture. More than 39,000 students are enrolled here. All 50 states and 130 countries are represented. Add about 950 student organizations and Big Ten Boilermaker athletics, and you get a college atmosphere that’s without rival.

Loading…

NEWS

Harvard Kenneth C. Griffin Graduate School of Arts and Sciences CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 21, 2025 04:19 PM

Harvard Researchers Demonstrate Key Step Toward Scalable Quantum Error Correction

Harvard researchers demonstrate advanced quantum error-correction techniques that improve qubit scalability and reliability, a key step...

Read Article

May 15, 2024 07:00 AM

This Chicago Museum Just Got A Ken Griffin Rebrand, 2 Years After He Fled The State

The Museum of Science and Industry has been renamed for the once richest person in Illinois, billionaire Ken Griffin.

Read Article

May 13, 2024 01:18 PM

Commencement 2024

Graduates gathered with family, classmates, and faculty in Harvard Yard to celebrate, reminisce, and mark the University's 373rd Commencement.

Read Article

January 30, 2024 08:00 AM

Billionaire Ken Griffin Becomes Latest To Stop Harvard Donations—Worries Elite Students Becoming ‘Whiny Snowflakes’

The Citadel founder and CEO said he would donate again if the school resumes its role of producing “problem solvers.”

Read Article

January 03, 2024 08:00 AM

2023 Was A Year Of Record-Breaking Mega Gifts For Higher Education

Several colleges received donations of $100 million or more in 2023. The largest went to Stony Brook University and McPherson College.

Read Article

October 19, 2023 07:00 AM

Billionaire Ken Griffin Condemns Harvard Groups’ Letter, But Will Continue To Donate To University Amid Israel And Hamas Conflict

The founder and CEO of hedge fund Citadel will not follow two other billionaires who cut ties with the Ivy League School after student...

Read Article

April 11, 2023 07:00 AM

Citadel founder Ken Griffin donates $300 million more to alma mater Harvard

Billionaire investor Kenneth Griffin, who started his hedge fund in his dormitory at Harvard University, is donating $300 million to his...

Read Article

April 11, 2023 07:00 AM

Hedge Fund Billionaire Ken Griffin Donates $300 Million To Harvard, Bolstering His Spot Among America’s Biggest Givers

Hedge fund magnate Ken Griffin donated $300 million to Harvard's Faculty of Arts and Sciences, the university announced on Tuesday.

Read Article

October 15, 2017 07:56 AM

Joint Degree Programs | MBA

In collaboration with five Harvard University graduate schools, HBS offers six joint degree programs to prepare individuals for complex leadership...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19917

SUMMARY

A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file delete_food_items1.php. Executing a manipulation of the argument checkbox can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-74767

SUMMARY

Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress() without enforcing a limit on the resulting uncompressed data. An attacker able to submit a crafted DAA file containing highly compressed data could cause Pandora to decompress a relatively small input into a very large amount of data in memory. Because the decompressed chunks are accumulated to construct the internal ISO image, this could result in excessive memory consumption and potentially CPU exhaustion, causing the extraction worker to become unresponsive, terminate, or affect the availability of the Pandora service. The patch introduces bounded decompression using decompressobj().decompress() with max_extracted_filesize, verifies the cumulative size of decompressed chunks, and raises a dedicated ZipBomb exception when the configured limit is exceeded. Pandora then aborts extraction and reports the file as too large.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/f4294a873f86fbf2569c289e329fff2f52ca50c9

CVE-2026-74764

SUMMARY

Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract() without applying an extraction filter. An attacker able to submit a specially crafted TAR archive containing malicious member paths, such as paths using ../ sequences or absolute paths, could cause extracted files to be written outside the intended extraction directory. This may allow the attacker to overwrite files accessible to the Pandora worker process and could potentially result in application compromise, arbitrary code execution, or denial of service depending on the files targeted and the privileges of the Pandora process. The vulnerability is corrected by using Python's filter='data' extraction filter, which rejects or sanitizes dangerous TAR members, including paths that escape the destination directory and unsafe link targets. The weakness corresponds to MITRE's general path traversal category, which includes archive extraction cases where attacker-controlled filenames cause files to be written outside the intended directory.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 10.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/186b58d41e04248a154d274fffb5813e7fa2012e

CVE-2026-73055

SUMMARY

Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed to a command, an attacker can inject a tilde payload to disclose the user's home directory location and, depending on usage, alter the location on which a command operates.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 4.8)

cvss3

Base Score: 4.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.2

REFERENCES

CVE-2026-73054

SUMMARY

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocket URI with duplicated query parameters to bypass access auth code validation and receive the live kernel event stream including document identifiers, titles, and operation logs.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…