What is the official website of Hikvision Bulgaria ?

The official website of Hikvision Bulgaria is https://www.hikvision.com/europe/.

What is Hikvision Bulgaria's cybersecurity risk score?

Hikvision Bulgaria has an AI-generated cybersecurity risk score of 745 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Hikvision Bulgaria experienced?

According to Rankiteo, Hikvision Bulgaria currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Hikvision Bulgaria been affected by any supply chain cyber incidents ?

According to Rankiteo, Hikvision Bulgaria has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: SonicWall (Incident ID: SAPFORVBUCITSONSOPHIK1785846368) Hikvision (Incident ID: HIK1773044701) Hikvision MEA (Incident ID: HIKDAH1772677469) OpenClaw (Incident ID: TP-HIKFOXGOOREVARITHEOPECIS1770645410)

Does Hikvision Bulgaria have SOC 2 Type 1 certification ?

According to Rankiteo, Hikvision Bulgaria is not certified under SOC 2 Type 1.

Does Hikvision Bulgaria have SOC 2 Type 2 certification ?

According to Rankiteo, Hikvision Bulgaria does not hold a SOC 2 Type 2 certification.

Does Hikvision Bulgaria comply with GDPR ?

According to Rankiteo, Hikvision Bulgaria is not listed as GDPR compliant.

Does Hikvision Bulgaria have PCI DSS certification ?

According to Rankiteo, Hikvision Bulgaria does not currently maintain PCI DSS compliance.

Does Hikvision Bulgaria comply with HIPAA ?

According to Rankiteo, Hikvision Bulgaria is not compliant with HIPAA regulations.

Does Hikvision Bulgaria have ISO 27001 certification ?

According to Rankiteo,Hikvision Bulgaria is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Hikvision Bulgaria operate in ?

Hikvision Bulgaria operates primarily in the Appliances, Electrical, and Electronics Manufacturing industry.

How many employees does Hikvision Bulgaria have ?

Hikvision Bulgaria employs approximately 4 people worldwide.

Does Hikvision Bulgaria own any subsidiaries ?

Hikvision Bulgaria presently has no subsidiaries across any sectors.

How many LinkedIn followers does Hikvision Bulgaria have ?

Hikvision Bulgaria's official LinkedIn profile has approximately 629 followers.

What is the NAICS classification code for Hikvision Bulgaria ?

Hikvision Bulgaria is classified under the NAICS code 335, which corresponds to Electrical Equipment, Appliance, and Component Manufacturing.

Does Hikvision Bulgaria have a Crunchbase profile ?

No, Hikvision Bulgaria does not have a profile on Crunchbase.

Does Hikvision Bulgaria have a LinkedIn profile ?

Yes, Hikvision Bulgaria maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hikvision-bulgaria.

How many cybersecurity incidents has Hikvision Bulgaria experienced ?

As of August 30, 2026, Rankiteo reports that Hikvision Bulgaria has experienced 7 cybersecurity incidents.

How many peer or competitor companies does Hikvision Bulgaria have ?

Hikvision Bulgaria has an estimated 9,699 peer or competitor companies worldwide.

What types of cybersecurity incidents has Hikvision Bulgaria faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware, Vulnerability and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Hikvision Bulgaria

Boost Score +25 with badge (5 left)

745

/1000

Moderate

770

/1000

Fair

Hikvision Bulgaria Vendor Cyber Rating & Cyber Score

hikvision.com

Add Your Compliance Badge

Hikvision е водещият световен доставчик на иновативни продукти и решения за сигурност. До края на 2019 г. Hikvision има 40403 служители, 19065 от които са инженери в областта на научноизследователската и развойната дейност. Компанията ежегодно инвестира 7 - 8% от годишните си приходи от продажби в научноизследователска и развойна дейност за продължаване на продуктовите иновации. Hikvision създаде цялостна система за научноизследователска и развойна дейност на няколко нива, която включва всяка операция - от научни изследвания до проектиране, разработване, тестване, техническа поддръжка и сервиз. Hikvision напредва в основните технологии на аудио и видео кодирането, обработката на видео изображения и свързаното с тях съхранение на данни,

Hikvision Bulgaria A.I CyberSecurity Scoring

Scoring History

Hikvision Bulgaria

Hikvision Bulgaria CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Hikvision

Vulnerability

100

8/2026

SonicWall

SAPFORVBUCITSON...

Hikvision

Ransomware

100

3/2026

NOVHIK177442743...

Hikvision

Vulnerability

100

3/2026

Hikvision

HIK1773044701

Hikvision MEA

Vulnerability

100

3/2026

Hikvision MEA

HIKDAH177267746...

Hikvision

Vulnerability

1/2026

HIK1770108920

Hikvision

Cyber Attack

11/2025

OpenClaw

TP-HIKFOXGOOREV...

Hikvision

Cyber Attack

100

1/2024

DOMCISLINDRAFOR...

Loading…

A.I.

Hikvision Bulgaria Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Hikvision Bulgaria

Incidents vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for Hikvision Bulgaria in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Hikvision Bulgaria in 2026.

Incident Types Hikvision Bulgaria vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for Hikvision Bulgaria in 2026.

Incident History - Hikvision Bulgaria (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Hikvision Bulgaria Subsidiaries

Hikvision Bulgaria

Appliances, Electrical, and Electronics Manufacturing

Website: https://www.hikvision.com/europe/

Company Size: 201-500 employees

HikvisionIT Services and IT Consulting

Hikvision MEAInformation Technology & Services

HIKVISION EuropeIT Services and IT Consulting

Hikvision IberiaSecurity and Investigations

Hikvision HiWatch SeriesSeguridad e investigación

Hikvision ProAV IberiaFabricación de equipos para audio y vídeo

Hikvision PortugalSeguridad e investigación

Pearson CarterStaffing and Recruiting

Hikvision South AfricaIT Services and IT Consulting

Hikvision UK & IrelandIT Services and IT Consulting

Hikvision Onboard SecurityIT Services and IT Consulting

Hikvision LatinoaméricaAppliances, Electrical, and Electronics Manufacturing

Hikvision BrasilIT Services and IT Consulting

Hikvision USASecurity and Investigations

HIKVISION ITALYSecurity and Investigations

HIKVISION FranceIT Services and IT Consulting

Hikvision BangladeshIT Services and IT Consulting

Hikvision PakistanIT Services and IT Consulting

Hikvision CanadaSecurity Systems Services

Hikvision MéxicoIT Services and IT Consulting

Hikvision DACHAppliances, Electrical, and Electronics Manufacturing

Hikvision Australia and New ZealandIT Services and IT Consulting

Hikvision NordicProduktion af apparater, elektrisk og elektronisk udstyr

CleanLeaseTextile Manufacturing

CleanLease (Medical) Green LineLaundry and Drycleaning Services

Hikvision BangladeshIT Services and IT Consulting

Hikvision Asia PacificInformation Technology & Services

Hikvision PolandIT Services and IT Consulting

Hikvision BeneluxBeveiliging

Hikvision Adriatic/MaltaSecurity and Investigations

Hikvision SingaporeIT Services and IT Consulting

Hikvision RomaniaFabricația de electrocasnice, electrice și electronice

Hikvision Greece & CyprusIT Services and IT Consulting

HIKVISION EGYPTComputer Networking Products

Hikvision HungaryIT Services and IT Consulting

Hikvision CzechIT Services and IT Consulting

UNV STOREIT Services and IT Consulting

Hikvision BangladeshIT Services and IT Consulting

HIKVISION LIETUVAIT Services and IT Consulting

Hikvision KoreaIT Services and IT Consulting

Hikvision ThailandSecurity and Investigations

Hikvision NepalSecurity and Investigations

Hikvision-Store MexicoComputers and Electronics Manufacturing

Hikvision KoreaIT Services and IT Consulting

Hikvision BangladeshIT Services and IT Consulting

Hikvision Store PakistanComputers and Electronics Manufacturing

Loading…

Hikvision Bulgaria Similar Companies

TE Connectivity

te.com

TE Connectivity plc (NYSE: TEL) is a global industrial technology leader creating a safer, sustainable, productive and connected future. As a trusted innovation partner, our broad range of connectivity and sensor solutions enable the distribution of power, signal and data to advance next-generation transportation, energy networks, automated factories, data centers enabling artificial intelligence and more. Our more than 90,000 employees, including 10,000 engineers, work alongside customers in approximately 130 countries. In a world that is racing ahead, TE ensures that EVERY CONNECTION COUNTS.

Haier

cb haier.com

Established in 1984, Haier Group is a world-leading provider of solutions to better life. Focusing on user experience, Haier has been included on the list of BrandZ™ Top 100 Most Valuable Global Brands for two consecutive years as the world’s first and only IoT ecosystem brand. Haier has topped Global Major Appliances Brand Rankings by Euromonitor International for 12 consecutive years. Its subsidiary Haier Smart Home is among the list of Global 500 of Fortune. To date, Haier Group owns three listed companies, has seven global brands such as Haier, Casarte, Leader, GE Appliances, Fisher & Paykel, AQUA and Candy. It has successfully incubated 5 unicorn companies and 41 gazelle companies. Moreover, Haier has established 10+N innovation ecosystems, 28 industrial parks, 122 manufacturing centers and nearly 240,000 sales networks around the globe, it has gone deep into 160 countries and regions globally, serving more than 1 billion users’ families. (Data as of January 2021) Haier Group is committed to working with its world-class ecosystem partners to continuously build premium brand, scenario brand and ecosystem brand, and to set up IoT ecosystems in clothing, food, accommodation, travel, health, elderly care, biomedicine and education, and to tailor personalized smart life for users around the globe.

Foxconn

cb foxconn.com

Established in Taiwan in 1974, Hon Hai Technology Group (Foxconn) (2317: Taiwan) is the world’s largest electronics manufacturer. Foxconn is also the leading technological solution provider, and it continuously leverages its expertise in software and hardware to integrate its unique manufacturing systems with emerging technologies. By capitalizing on its expertise in Cloud Computing, Mobile Devices, IoT, Big Data, AI, Smart Networks, and Robotics / Automation, the Group has expanded not only its capabilities into the development of electric vehicles, digital health and robotics, but also three key technologies –AI, semiconductors and new-generation communications technology – which are key to driving its long-term growth strategy and the four core product pillars: Consumer Products, Enterprise Products, Computing Products and Components and Others. In 2021, Hon Hai's annual revenue reached NT$5.99 trillion. The company has established R&D and manufacturing centers in other markets around the world including China, India, Japan, Vietnam, Malaysia, Czech Republic, U.S. and more. With a focus on research and development, the company owns more than 54,253 patents. In addition to maximizing value-creation for customers who include many of the world’s leading technology companies, Foxconn is also dedicated to championing environmental sustainability in the manufacturing process and serving as a best-practices model for global enterprises. The company has received widespread international accolades and recognition since its establishment. The company ranked 22nd on the Fortune Global 500 rankings in 2021 and 25th in the Top 100 Digital Companies in the Forbes ranking of the World’s Best Employers in 2019. Moreover, on Forbes’ World’s Best Employers 2021 rankings, the company ranked 1st in Taiwan. Foxconn is also the only Taiwanese private company awarded for 5 consecutive years of Clarivate Top 100 Global Innovators (2018 - 2022).

Vertiv

Vertiv.com

Vertiv is a global leader in critical digital infrastructure for applications in data centers, communication networks, and commercial and industrial environments. As businesses, industries, and communities become more connected, we pioneer and deliver end-to-end power and cooling technologies to help our customers stay resilient, optimized, and future-ready. With our industry-leading innovative technologies and global services network, we are fueling the revolution of the digital world - keeping technology ecosystems running efficiently and without interruption. Vertiv is supercharging data’s potential; accelerating the pace of technology, raising the bar for accelerated compute and redefining the limits of densification. The world depends on data we power and cool™

Midea Group

midea-group.com

Midea Group aspires to the vision of “Bringing Great Innovations to Life”, upholding the Founders’ philosophy of creating a better life through technology. Midea Group has evolved into a global leading technology company specializing in six major businesses including Smart Home Business, Industrial Technologies, Building Technologies, Robotics &Automation, Midea Healthcare and Annto Logistics. Over the past ten years, we have invested nearly 100 billion yuan in R&D and developed a global network spanning 38 R&D centers and 44 major production sites across the world. At present, Midea Group’s products and services serve more than 500 million customers in over 200 countries and regions, our brand portfolio contains Little Swan, Toshiba, WAHIN, COLMO, Clivet, Eureka, KUKA, GMCC, Welling, LINVOL, and Wandong. With nearly 200,000 employees globally and more than 40,000 based internationally, Midea Group ranks 277th on the Global Fortune 500 in 2024, marking the 9th consecutive year on the list. The company holds A/A2/A credit ratings from S&P, Moody's, and Fitch respectively. Midea Group places a strong focus on technology leadership, driving innovation across global markets. Midea adheres to the new strategic axis of "Technology Leadership, User Direct Access, Digital Intelligence Driven, and Global Breakthroughs," we advance our leadership in Smart Home and Smart Manufacturing while fostering talent. By providing growth opportunities in a dynamic, global environment, we empower our teams to shape the future of innovation.

Flex

flex.com

Flex (Reg. No. 199002645H) is the global manufacturing partner of choice that helps leading brands design, build, and manage products that improve the world. For more information, visit flex.com. We love to hear your thoughts, comments and ideas so feel free to like, share and comment away. Any question or opinion is good to go as long as it is respectful and falls within the scope of this page. Derogatory comments, spam and unsolicited selling are not welcome here and such posts will be removed.

TDK

tdk.com

TDK Corporation is a world leader in electronic solutions for the smart society based in Tokyo, Japan. Built on a foundation of material sciences mastery, TDK welcomes societal transformation by resolutely remaining at the forefront of technological evolution. It was established in 1935 to commercialize ferrite, a key material in electronic and magnetic products. TDK’s comprehensive, innovation-driven portfolio features passive components such as ceramic, aluminum electrolytic and film capacitors, as well as magnetics, high-frequency, and piezo and protection devices. The product spectrum also includes sensors and sensor systems such as temperature and pressure, magnetic, and MEMS sensors. In addition, TDK provides power supplies and energy devices, magnetic heads, software and more. These products are marketed under the product brands TDK, EPCOS, InvenSense, Micronas, Tronics, and TDK-Lambda. TDK focuses on demanding markets in automotive, industrial and consumer electronics, and information and communication technology. The company has a network of design and manufacturing locations and sales offices in Asia, Europe, and in North and South America. In fiscal 2025, TDK posted total sales of USD 14.4 billion and employed about 105,000 people worldwide.

Dyson

dyson.com

Dyson solves real-world problems and creates better products through the application of engineering, science, design and creativity. It is a family-owned, global technology company, founded by Sir James Dyson who remains at the helm alongside his son Jake. Since inventing the first cyclonic bagless vacuum cleaner, the DC01, Dyson has consistently invested in research and development to improve its products and technologies radically. Dyson offers products across a growing range of areas: floorcare, air purification, robotics, haircare including formulations, lighting, hand drying, and most recently audio. Dyson continues to expand into new areas. Today, Dyson sells products in more than 80 markets, has 450 Dyson stores worldwide and is available in all major technology and beauty retailers. Dyson has global headquarters in Singapore and major technology campuses in Singapore, the UK, Malaysia, and the Philippines. Its global team of engineers, scientists and software developers are focused on developing technology-enabled products which work better and which people love to use. Key areas of focus have included high-speed electric digital motors, sensing and vision systems, robotics, machine learning and aerodynamics. Beyond products, to encourage an inventive future, Dyson is also inspiring the next generation of engineers and inventors through the Dyson Institute of Engineering and Technology, the James Dyson Foundation and the James Dyson Award. The Dyson family applies its problem-solving approach in other fields, and established Dyson Farming in 2012. It is one of the largest farming businesses in the UK, extending to 36,000 acres across Lincolnshire, Oxfordshire, Gloucestershire and Somerset. It is a family-owned enterprise unlike any other, focussed on long-term investment in British farming and the countryside to grow tasty and nutritious food.

Havells India Ltd

havells.com

Havells India Limited is a leading FMEG company with a strong global presence, manufacturing a wide range of electrical products for residential, commercial, and industrial use. Key brands include Havells, Havells Studio, Lloyd, Havells Crabtree, Standard Electricals and REO. With a focus on innovation and customer satisfaction, Havells boasts a robust distribution network, exclusive brand showrooms, and a strong emphasis on service. The company prioritizes sustainability, with a focus on renewable energy, waste reduction, and environmental conservation. Havells is committed to social responsibility, with initiatives in education, sanitation, and community development. Recognized for its sustainability efforts, Havells has been ranked in the Dow Jones Sustainability Index and maintains an 'A' rating in the MSCI ESG Rating. Learn more about Havells on the following channels: Facebook I Youtube I Twitter I Instagram I

Loading…

NEWS

Hikvision Bulgaria CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 16, 2023 08:00 AM

Sofia's Rollout Of Chinese Cameras On Public Transit Raises Questions, Sparks Backlash

The Bulgarian capital has spent millions on installing Hikvision surveillance cameras in its public transit network, just as other EU...

Read Article

August 23, 2022 07:00 AM

80,000 Hikvision cameras exposed to hackers

Research finds that a flaw in Hikvision cameras has not been correctly patched by 80000 customers, leaving the devices open to attack.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-82424

SUMMARY

A weakness has been identified in PHPGurukul Student Information System 1.0. Affected by this vulnerability is an unknown functionality of the file /student_edit1.php. Executing a manipulation of the argument ID can lead to sql injection. The attack can be launched remotely. The exploit has been made available to the public and could be used for attacks.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-82423

SUMMARY

A vulnerability has been found in macrozheng mall up to 1.0.3. The affected element is an unknown function of the file /order/paySuccess of the component Payment Status Endpoint. The manipulation of the argument orderId leads to enforcement of behavioral workflow. The attack is possible to be carried out remotely. The vendor deleted the GitHub issue for this vulnerability without any explanation.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 5.4)

cvss2

Base Score: 5.5

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:P/A:P

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.8

REFERENCES

CVE-2026-82422

SUMMARY

A security flaw has been discovered in itsourcecode Sales and Inventory System 1.0. Impacted is an unknown function of the file /pages/emp_del.php. The manipulation of the argument ID results in sql injection. The attack may be launched remotely. The exploit has been released to the public and may be used for attacks.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-82421

SUMMARY

A vulnerability was identified in itsourcecode Sales and Inventory System 1.0. This issue affects some unknown processing of the file /pages/emp_edit.php. The manipulation of the argument ID leads to sql injection. The attack may be initiated remotely. The exploit is publicly available and might be used.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15369

SUMMARY

The Custom User Registration Fields for WooCommerce plugin for WordPress is vulnerable to Privilege Escalation in versions up to, and including, 2.2.3. This is due to the plugin accepting an attacker-controlled afreg_select_user_role value from the unauthenticated WooCommerce Store API /wc/store/v1/checkout request in the af_reg_checkout_data_to_order_meta_data_block() function, persisting it in order meta, and then passing it directly to WP_User::add_role() in the af_reg_custom_order_processing_function() function (hooked to woocommerce_thankyou) without validating against the plugin's admin-configured allowed role list. This makes it possible for unauthenticated attackers to elevate their privileges to Administrator by creating an account during checkout with a modified JSON body specifying administrator (or any other role slug) as the desired role. Note: The exploit requires the "User Role Selection" setting to be enabled.

Published

Date2026-08-29

Updated

Date2026-08-29

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…