What is the official website of Henkel Consumer Brands ?

The official website of Henkel Consumer Brands is https://www.henkel.com/brands-and-businesses/henkel-consumer-brands.

What is Henkel Consumer Brands's cybersecurity risk score?

Henkel Consumer Brands has an AI-generated cybersecurity risk score of 753 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Henkel Consumer Brands experienced?

According to Rankiteo, Henkel Consumer Brands currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Henkel Consumer Brands been affected by any supply chain cyber incidents ?

According to Rankiteo, Henkel Consumer Brands has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Henkel Consumer Brands have SOC 2 Type 1 certification ?

According to Rankiteo, Henkel Consumer Brands is not certified under SOC 2 Type 1.

Does Henkel Consumer Brands have SOC 2 Type 2 certification ?

According to Rankiteo, Henkel Consumer Brands does not hold a SOC 2 Type 2 certification.

Does Henkel Consumer Brands comply with GDPR ?

According to Rankiteo, Henkel Consumer Brands is not listed as GDPR compliant.

Does Henkel Consumer Brands have PCI DSS certification ?

According to Rankiteo, Henkel Consumer Brands does not currently maintain PCI DSS compliance.

Does Henkel Consumer Brands comply with HIPAA ?

According to Rankiteo, Henkel Consumer Brands is not compliant with HIPAA regulations.

Does Henkel Consumer Brands have ISO 27001 certification ?

According to Rankiteo,Henkel Consumer Brands is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Henkel Consumer Brands operate in ?

Henkel Consumer Brands operates primarily in the Fertigung industry.

How many employees does Henkel Consumer Brands have ?

Henkel Consumer Brands employs approximately 13 people worldwide.

Does Henkel Consumer Brands own any subsidiaries ?

Henkel Consumer Brands presently has no subsidiaries across any sectors.

How many LinkedIn followers does Henkel Consumer Brands have ?

Henkel Consumer Brands's official LinkedIn profile has approximately 51,166 followers.

Does Henkel Consumer Brands have a Crunchbase profile ?

No, Henkel Consumer Brands does not have a profile on Crunchbase.

Does Henkel Consumer Brands have a LinkedIn profile ?

Yes, Henkel Consumer Brands maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/henkel-consumer-brands.

How many cybersecurity incidents has Henkel Consumer Brands experienced ?

As of July 31, 2026, Rankiteo reports that Henkel Consumer Brands has not experienced any cybersecurity incidents.

How many peer or competitor companies does Henkel Consumer Brands have ?

Henkel Consumer Brands has an estimated 8 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

HCB

Boost Score +25 with badge (5 left)

753

/1000

Fair

778

/1000

Fair

Henkel Consumer Brands Vendor Cyber Rating & Cyber Score

henkel.com

Add Your Compliance Badge

We strive to meet the changing needs of consumers by driving new innovations with leading technologies.

HCB A.I CyberSecurity Scoring

Scoring History

HCB

Henkel Consumer Brands CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

HCB Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for HCB

Incidents vs Fertigung Industry Avg (This Year)

No incidents recorded for Henkel Consumer Brands in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Henkel Consumer Brands in 2026.

Incident Types HCB vs Fertigung Industry Avg (This Year)

No incidents recorded for Henkel Consumer Brands in 2026.

Incident History - HCB (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Henkel Consumer Brands Subsidiaries

HCB

Fertigung

Website: https://www.henkel.com/brands-and-businesses/henkel-consumer-brands

Company Size: 13

HenkelManufacturing

Henkel Adhesive TechnologiesChemische Produktion

Loading…

Henkel Consumer Brands Similar Companies

Loading…

NEWS

Henkel Consumer Brands CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Henkel bets on innovation as profits rise

Germany's Henkel on Thursday said it was betting on innovative products that help the consumer goods and adhesives maker save costs, ...

Read Article

Henkel to sell retailer brands business in North America

(Reuters) - German consumer goods maker Henkel said on Friday it would sell its retailer brands business in North America to an affiliate of ...

Read Article

Can This Consumer Goods Veteran Transform Advantage Solutions' Core Business?

Advantage Solutions names Dean General new Chief Operating Officer of Branded Services business segment · Appointment of seasoned executive with ...

Read Article

Persil-owner Henkel takes hit from weak US consumer sentiment

Germany's Henkel pointed to weaker consumer sentiment in North America as it reported a 1.0% fall in first-quarter sales on Thursday, ...

Read Article

First Quality Tissue to establish $984M Ohio manufacturing plant

Paper product maker First Quality Tissue is establishing a $984 million ultra-premium towel and tissue manufacturing facility in Defiance, Ohio, ...

Read Article

Cybersecurity strategy to drive purposeful growth

EY helped Henkel create a cybersecurity strategy that is aligned with its corporate strategy and the objectives of its digital unit.

Read Article

Henkel Debuts New Concentrated Formulas for all(R), Persil(R) and Snuggle(R) Liquid Laundry Products

Henkel, a leading manufacturer of well-known consumer and industrial brands, is introducing concentrated formulas and packaging across all®, Persil® and ...

Read Article

30 companies hiring early-career professionals right now

We have compiled a list of jobs and companies perfect for early-career professionals, helping you find the right fit this autumn season.

Read Article

Persil-owner Henkel's growth guidance disappoints as weak North America weighs

Persil-owner Henkel gave weaker-than-expected guidance for 2025 organic sales growth on Tuesday, projecting a slower start to the year due ...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66720

SUMMARY

The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE (EtherType 0x88B8) Layer-2 multicast messages. A specially crafted GOOSE frame containing an undersized timestamp field can trigger a heap out-of-bounds read during message processing, causing the process to crash and resulting in a denial-of-service condition.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-66421

SUMMARY

OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript in the administrator's browser session by injecting HTML markup into agent transcript messages processed through the sessions API. Attackers can craft a message containing inline event handler payloads such as an img tag with an onerror attribute within the 60-character rendering budget, which is stored in the session transcript and interpolated unsanitized into innerHTML on the default landing page, allowing theft of session tokens and unauthorized calls to authenticated administrative endpoints including agent instruction file modification.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 9.3)

cvss3

Base Score: 9.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

cvss4

Base Score: 8.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.8

Exploitability

2.8

REFERENCES

CVE-2026-66420

SUMMARY

MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the CheckWebServerOriginName() function within webserver.js when self-signed certificates are in use. Attackers can open cross-origin WebSocket connections to any of the twelve WebSocket endpoints, send crafted action commands to exfiltrate the server sessionKey used to sign session cookies, forge session tokens as arbitrary users, and gain full remote control of all managed devices governed by the MeshCentral instance.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-66369

SUMMARY

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap out-of-bounds read. On affected platforms, this condition reliably terminates the subscriber process and causes a denial-of-service.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-66364

SUMMARY

The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process bus. When processing specific payload fields, an attacker controlled inner element length may exceed its enclosing length, causing the parser to over read by one byte. This out-of-bounds read reliably terminates the subscriber process, resulting in a denial-of-service condition.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…