What is the official website of HM Revenue & Customs ?

The official website of HM Revenue & Customs is http://www.gov.uk/hmrc?&utm_source=l.co_hmrcgovuk&utm_medium=social&utm_campaign=channel_links.

What is HM Revenue & Customs's cybersecurity risk score?

HM Revenue & Customs has an AI-generated cybersecurity risk score of 711 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has HM Revenue & Customs experienced?

According to Rankiteo, HM Revenue & Customs currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has HM Revenue & Customs been affected by any supply chain cyber incidents ?

According to Rankiteo, HM Revenue & Customs has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Microsoft Dynamics 365 (Incident ID: ALL1785522998) Fortinet (Incident ID: FORGOV1783297461) Kraken Technology Group (Incident ID: UK-KRA1786368391)

Does HM Revenue & Customs have SOC 2 Type 1 certification ?

According to Rankiteo, HM Revenue & Customs is not certified under SOC 2 Type 1.

Does HM Revenue & Customs have SOC 2 Type 2 certification ?

According to Rankiteo, HM Revenue & Customs does not hold a SOC 2 Type 2 certification.

Does HM Revenue & Customs comply with GDPR ?

According to Rankiteo, HM Revenue & Customs is not listed as GDPR compliant.

Does HM Revenue & Customs have PCI DSS certification ?

According to Rankiteo, HM Revenue & Customs does not currently maintain PCI DSS compliance.

Does HM Revenue & Customs comply with HIPAA ?

According to Rankiteo, HM Revenue & Customs is not compliant with HIPAA regulations.

Does HM Revenue & Customs have ISO 27001 certification ?

According to Rankiteo,HM Revenue & Customs is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does HM Revenue & Customs operate in ?

HM Revenue & Customs operates primarily in the Government Administration industry.

How many employees does HM Revenue & Customs have ?

HM Revenue & Customs employs approximately 27,177 people worldwide.

Does HM Revenue & Customs own any subsidiaries ?

HM Revenue & Customs presently has no subsidiaries across any sectors.

How many LinkedIn followers does HM Revenue & Customs have ?

HM Revenue & Customs's official LinkedIn profile has approximately 532,135 followers.

What is the NAICS classification code for HM Revenue & Customs ?

HM Revenue & Customs is classified under the NAICS code 92, which corresponds to Public Administration.

Does HM Revenue & Customs have a Crunchbase profile ?

No, HM Revenue & Customs does not have a profile on Crunchbase.

Does HM Revenue & Customs have a LinkedIn profile ?

Yes, HM Revenue & Customs maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hmrc.

How many cybersecurity incidents has HM Revenue & Customs experienced ?

As of September 16, 2026, Rankiteo reports that HM Revenue & Customs has experienced 30 cybersecurity incidents.

How many peer or competitor companies does HM Revenue & Customs have ?

HM Revenue & Customs has an estimated 13,451 peer or competitor companies worldwide.

What types of cybersecurity incidents has HM Revenue & Customs faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Vulnerability, Ransomware and Cyber Attack.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

HRC

Boost Score +25 with badge (5 left)

711

/1000

Moderate

736

/1000

Moderate

HM Revenue & Customs Vendor Cyber Rating & Cyber Score

www.gov.uk

Add Your Compliance Badge

Official LinkedIn channel for HM Revenue & Customs. We are the UK’s tax, payments, and customs authority, collecting money that pays for the UK’s public services. We use LinkedIn to provide regular updates about HMRC’s work on areas that will be of interest to the LinkedIn community, such as business tax updates, news on tax policy, guidance for agents and our stakeholders, and HMRC recruitment opportunities. We can provide general tax query support via our dedicated @HMRCcustomers channel on X, or via comments or DM on our Instagram and Facebook channels. Search “HMRC” on App Stores to download our app.

HRC

HM Revenue & Customs CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

UK Ministry of Defe...

Breach

8/2026

UK-HER178591219...

UK Ministry of Defe...

Breach

100

8/2026

UK-1785709637

Department for Educ...

Ransomware

100

7/2026

Microsoft Dynam...

ALL1785522998

UK Ministry of Defe...

Breach

100

7/2026

UK-1785371161

Foreign and Commonw...

Cyber Attack

100

7/2026

Fortinet

FORGOV178329746...

Cabinet Office

Breach

5/2026

CAB1777832879

UK Ministry of Defe...

Vulnerability

4/2026

Kraken Technolo...

UK-KRA178636839...

HM Revenue & Custom...

Vulnerability

12/2025

DCM1765433387

HM Revenue & Custom...

Breach

11/2025

UK-523475211042...

HM Revenue & Custom...

Cyber Attack

100

10/2025

UK-556215510202...

Foreign and Commonw...

Breach

10/2025

FOR1766412101

HM Revenue & Custom...

Ransomware

100

9/2025

DCM1764770468

HM Revenue & Custom...

Breach

100

8/2025

UK-841081625

HM Revenue & Custom...

Breach

6/2025

HMR745060625

UK Home Office

Breach

4/2025

UK-1777581082

HM Revenue & Custom...

Breach

100

7/2024

UK-421016421104...

HM Revenue & Custom...

Breach

100

6/2024

UK-169221610212...

HM Revenue & Custom...

Breach

100

4/2024

UK-493314910132...

HM Revenue & Custom...

Breach

100

8/2023

UK-707072025

HM Revenue & Custom...

Breach

100

7/2023

UK-221002221104...

HM Revenue & Custom...

Cyber Attack

100

01/2023

DEP225811123

HM Revenue & Custom...

Breach

100

6/2022

UK-289342811142...

HM Revenue & Custom...

Breach

100

2/2022

UK-503305010202...

HM Revenue & Custom...

Breach

1/2022

UK-559215509112...

HM Revenue & Custom...

Breach

11/2021

GOV1527121122

HM Revenue & Custom...

Breach

100

10/2021

UK-576295710232...

HM Revenue & Custom...

Cyber Attack

9/2021

HMR1782752907

HM Revenue & Custom...

Breach

100

8/2021

UK-552175511242...

HM Revenue & Custom...

Breach

100

6/2021

UK-089380810032...

HM Revenue & Custom...

Breach

100

6/2010

UK-069420609202...

Loading…

A.I.

HRC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for HRC

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for HM Revenue & Customs in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for HM Revenue & Customs in 2026.

Incident Types HRC vs Government Administration Industry Avg (This Year)

No incidents recorded for HM Revenue & Customs in 2026.

Incident History - HRC (X = Date, Y = Severity)

Loading…

SUBSIDIARY

HM Revenue & Customs Subsidiaries

HRC

Government Administration

Website: http://www.gov.uk/hmrc?&utm_source=l.co_hmrcgovuk&utm_medium=social&utm_campaign=channel_links

Company Size: 10,001+ employees

UK Civil ServiceGovernment Administration

Department for EducationGovernment Administration

TeachingPrimary and Secondary Education

Buying for SchoolsGovernment Administration

DfE Digital, Data and TechnologyGovernment Relations Services

Skills PartnerGovernment Administration

Office for National StatisticsGovernment Administration

Census2021Government Administration

Government Statistical ServiceGovernment Administration

DstlDefense and Space Manufacturing

Data Science ChallengeGovernment Administration

Charity Commission for England and WalesGovernment Administration

UK Export FinanceFinancial Services

UK Home OfficeGovernment Administration

UK Ministry of DefenceDefense and Space Manufacturing

Defence Equipment & Support (DE&S)Defense and Space Manufacturing

Defence ProcurementDefense & Space

Office of Rail and Road (ORR)Government Administration

Competition and Markets AuthorityGovernment Administration

OfqualGovernment Administration

OfwatUtilities

Regulators’ Alliance for Progressing Infrastructure Development (RAPID)Utilities

HM Land RegistryGovernment Administration

National Infrastructure and Service Transformation Authority (NISTA)Government Administration

Attorney General's Office (UK)Government Administration

Northern Ireland OfficeGovernment Administration

Scotland OfficeGovernment Administration

Valuation Office AgencyGovernment Administration

Wales Office/Swyddfa CymruGovernment Administration

NS&IFinancial Services

OfstedGovernment Administration

Cabinet OfficeGovernment Administration

HM Government Public AppointmentsGovernment Administration

GOV.UKGovernment Relations Services

Government Actuary's DepartmentGovernment Administration

UK Statistics AuthorityGovernment Administration

Department for Environment, Food and Rural AffairsGovernment Administration

Defra digital, data, technology and securityIT Services and IT Consulting

Defra Public AppointmentsGovernment Administration

HM TreasuryPublic Policy Offices

Office of Financial Sanctions Implementation (OFSI)Government Administration

Department for International Development (DFID)Government Administration

UK-Africa Investment Summit 2020Government Administration

Foreign and Commonwealth OfficeGovernment Administration

Food Standards AgencyGovernment Administration

Starting a Food BusinessFood & Beverages

Crown Prosecution ServiceLaw Practice

Department for Culture, Media and SportGovernment Administration

DCMS Public AppointmentsGovernment Administration

Forestry CommissionGovernment Administration

OfgemUtilities

Government Legal DepartmentLegal Services

Department of Health and Social CareGovernment Relations Services

Department for Science, Innovation and TechnologyGovernment Administration

Careers at the Department for Science, Innovation and TechnologyGovernment Administration

Department for Transport (DfT), United KingdomGovernment Administration

Department for Business and TradeGovernment Administration

Business SupportGovernment Relations

GREAT Trade and InvestmentWholesale Import and Export

UK Business and Trade - North AmericaGovernment Relations Services

Department for Work and Pensions (DWP)Government Administration

Disability ConfidentGovernment Administration

See PotentialGovernment Administration

Loading…

HM Revenue & Customs Similar Companies

Assurance Maladie

ameli.fr

Travailler à l’Assurance Maladie, c’est donner une nouvelle dimension à votre métier et agir au quotidien pour la protection de notre système de santé. Participez à une grande diversité de projets dans un cadre bienveillant et soyez fier de contribuer à une mission essentielle : agir ensemble, protéger chacun. Depuis près de 80 ans, l'Assurance Maladie joue un rôle majeur au service de la solidarité nationale. Nous sommes convaincus que la clé de la pérennité du système de santé relève d'une responsabilité collective et réside dans l'implication forte de chacun de ses acteurs. Au sein de ce système, l'Assurance Maladie assume une triple mission : ⏺️ garantir un accès universel aux droits et permettre l'accès aux soins ⏺️ accompagner chacun dans la préservation de sa santé ⏺️ améliorer l'efficacité du système Toutes ses missions, l’Assurance Maladie les mène avec le souci d’assurer la meilleure qualité de service. Elle s’appuie pour cela sur un réseau de proximité qui couvre l’ensemble du territoire et l’engagement de plus de 80 000 collaborateurs qui agissent jour après jour à l’échelle départementale, régionale et nationale. Ensemble, au quotidien, ils font vivre ses valeurs d’universalité, de solidarité, de responsabilité et d’innovation.

GSA

gsa.gov

General Services Administration (GSA) is an independent agency of the United States government established in 1949 to help manage and support the basic functioning of federal agencies. Our organization includes the Public Buildings Service (PBS), Federal Acquisition Service (FAS), and a variety of Service and Staff Offices. Learn more about our organization at gsa.gov. Our Mission GSA's mission is to deliver value and savings in real estate, acquisition, technology, and other mission-support services across government. Our Vision Effective and efficient government for the American people. Our Values Service, Accountability, and Innovation ----------- You can also find us on these social media sites: Twitter: https://twitter.com/usgsa Facebook: https://www.facebook.com/GSA/ Instagram: https://www.instagram.com/usgsa/

Västra Götalandsregionen

vgregion.se

Region Västra Götaland is governed by democratically elected politicians and with just over 50,000 employees is one of Sweden’s biggest employers. It is tasked with offering good healthcare and dental care and providing the prerequisites for good public health, a rich cultural life, a good environment, jobs, research, education and good communications. All together, these provide a foundation for sustainable growth in Västra Götaland. Koncernen Västra Götalandsregionen finns till för människorna i Västra Götaland och för allt som ligger invånarna nära: jobb, utbildning, hälso- och sjukvård, kultur och kommunikationer. Västra Götalandsregionen ska bidra till hälsa och trygghet i vardagen och för ett livskraftigt Västra Götaland nu och i framtiden. Vi har ett gemensamt ansvar att se till den enskilda människans behov och till regionmedborgarnas samlade behov för att uppnå visionen Det goda livet. Det gör vi inom våra tre ansvarsområden: Hälso- och sjukvård, tillväxt och utveckling och kollektivtrafik. Koncernen har drygt 50 000 medarbetare som arbetar inom framförallt hälso-och sjukvård men även inom kollektivtrafik, kulturverksamhet, skolor, folktandvård, lokal- och fastighetsförvaltning och folkhälsofrågor. Att arbeta i Västra Götalandsregionen gör avtryck – hos människor, i samhället och för framtiden. Lediga tjänster finns på: www.vgregion.se/jobb

City of Los Angeles

linkpages.pro

The City of Los Angeles employs more than 45,000 people in a wide range of careers. Visit our website for information on current openings, including regular civil service positions, exempt and emergency appointment opportunities, in addition to internships! The City of Los Angeles is a Mayor-Council-Commission form of government, as originally adopted by voters of the City of Los Angeles, effective July 1, 1925, and reaffirmed by a new Charter effective July 1, 2000. A Mayor, City Controller, and City Attorney are elected by City residents every four years. Fifteen City Council members representing fifteen districts are elected by the people for four-year terms, for a maximum of two terms. Members of Commissions are generally appointed by the Mayor, subject to the approval of the City Council. General Managers of the various City departments are also appointed by the Mayor, subject to confirmation by the City Council. Most employees of the City are subject to the civil service provisions of the City Charter.

National Park Service

nps.gov

Most people know that the National Park Service cares for national parks, a network of over 420 natural, cultural and recreational sites across the nation. The treasures in this system – the first of its kind in the world – have been set aside by the American people to preserve, protect, and share the legacies of this land. People from all around the world visit national parks to experience America's story, marvel at the natural wonders, and have fun. Places like the Grand Canyon, the Statue of Liberty, and Gettysburg are popular destinations, but so too are the hundreds of lesser known yet equally meaningful gems like Rosie the Riveter in California, Boston Harbor Islands in Massachusetts, and Russell Cave in Alabama. The American system of national parks was the first of its kind in the world, and provides a living model for other nations wishing to establish and manage their own protected areas. The park service actively consults with these Nations, sharing what we've learned, and gaining knowledge from the experience of others. Beyond national parks, the National Park Service helps communities across America preserve and enhance important local heritage and close-to-home recreational opportunities. Grants and assistance are offered to register, record and save historic places; create community parks and local recreation facilities; conserve rivers and streams, and develop trails and greenways.

Gouvernement du Québec – Carrières

quebec.ca

Travailler dans la fonction publique du Québec, c'est plus qu'une carrière! Réparti(e)s dans une vingtaine de ministères et une soixantaine d'organismes à travers le Québec, tous les gestes posés par les employé(e)s de la fonction publique façonnent l’avenir de la société et contribuent à améliorer la vie des Québécoises et Québécois; nous rendons nos routes sécuritaires; nous protégeons nos richesses naturelles; nous faisons rayonner notre culture; nous améliorons nos milieux de vie; etc. Pour nous, être au service de la population, c’est bien plus qu’une carrière! Travailler dans la fonction publique québécoise permet d’œuvrer dans différentes organisations tout en maintenant ses conditions de travail. Nous adhérons aux valeurs de compétence, d’impartialité, d’intégrité, de loyauté et de respect; nous offrons de bonnes conditions de travail, de même que des milieux de travail sains et motivants, nous valorisons l’équité, la diversité et l’inclusion par notre Programme d’accès à l’égalité en emploi dont l’objectif principal est d’assurer une meilleure représentativité des groupes victimes de discrimination en emploi, nous favorisons l’équilibre entre la vie professionnelle et personnelle, nous misons sur le développement des compétences, nous sommes fier(ères) et dévoué(e)s. Nous sommes la fonction publique du Québec!

USDA

usda.gov

The United States Department of Agriculture is the United States federal executive department responsible for developing and executing U.S. federal government policy on farming, agriculture, and food. It aims to meet the needs of farmers and ranchers, promote agricultural trade and production, work to assure food safety, protect natural resources, foster rural communities and end hunger in the United States and abroad.

City of Toronto

toronto.ca

The City of Toronto is committed to fostering a positive and progressive workplace culture, and strives to build a workforce that reflects the citizens it serves. We are committed to building a high performing public service, with strong and effective leaders to enable service excellence, through high engagement and healthy and safe workplaces. Toronto is home to more than 2.9 million people whose diversity and experiences make this great city Canada’s leading economic engine and one of the world’s most diverse and livable cities. As the fourth largest city in North America, Toronto is a global leader in technology, finance, film, music, culture, and innovation, and consistently places at the top of international rankings due to investments championed by its government, residents and businesses. Toronto Public Service consists of approximately 35,771 employees, providing programs and services to Toronto residents, businesses and visitors. Additionally, the City of Toronto has a number of agencies and corporations including the Toronto Police Service, Toronto Public Library and the Toronto Transit Commission, which make up the broader municipal organization. There are 44 operating divisions and offices providing an extensive level of programs and services. We offer diverse career opportunities across a wide variety of professional, trade, administrative, managerial and other employment roles. The Toronto Public Service has won numerous awards for quality, innovation and efficiency in delivering citizen-focused services. We are proud to have been named one of Canada's Top 100 Employers, Canada's Best Diversity Employers, Top Family Friendly Employers and Greater Toronto's Top Employers. Consider joining the award-winning Toronto Public Service and help us make a difference in a great City!

Comunidad de Madrid

comunidad.madrid

Si necesitas información general y especializada sobre los servicios públicos madrileños puedes llamar al teléfono de Atención al Ciudadano 012. En la Comunidad de Madrid estamos encantados de recibir comentarios y favorecer el diálogo, por eso te proponemos unas normas básicas de participación: - Respeta a los demás usuarios y haz un uso adecuado de la red al publicar un comentario. Se eliminará cualquier mensaje difamatorio, ofensivo, amenazador, grosero o que esté penado por las leyes españolas. - Haz comentarios relacionados con lo publicado, sé lo más breve posible y evita las mayúsculas. Se borrarán aquellos comentarios que se consideren fuera de tema. - No están permitidos los mensajes que contengan spam o publicidad intrusiva. - La Comunidad de Madrid no se hace responsable del contenido de las opiniones que los participantes dejan en los comentarios, ni se identifica con ellas. ¡Esperamos tu participación! Síguenos también en www.twitter.com/ComunidadMadrid y www.facebook.com/ComunidadeMadrid.

Loading…

NEWS

HM Revenue & Customs CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 10, 2026 03:23 PM

HMRC introduces GOV.UK One Login for new customers

New customers registering for HM Revenue and Customs (HMRC) digital services can now sign-up using GOV.UK One Login.

Read Article

February 10, 2026 03:14 PM

More details of timeline for vaping duty registration issued by HMRC

HM Revenue and Customs (HMRC) is reminding manufacturers, importers and warehouses involved with vaping products to prepare for registration...

Read Article

February 10, 2026 02:46 PM

HMRC urges vaping firms to prepare for duty registration

HM Revenue and Customs (HMRC) has reminded manufacturers, importers, and warehouse keepers involved with vaping products to prepare for...

Read Article

February 10, 2026 01:18 PM

HMRC will be sending £200 fines to taxpayers after a change to tax return rules

HM Revenue & Customs (HMRC) has announced it will be sending £200 fines to taxpayers after a change to tax return rules.

Read Article

February 10, 2026 01:09 PM

Young people urged to claim UK Government cash worth over £2,200

Child Trust Funds worth an average of £2242 are waiting for more than 14500 young people aged 24 and under in Scotland.

Read Article

February 10, 2026 11:23 AM

Vaping businesses urged to prepare for Vaping Products Duty registration from April 2026

HM Revenue and Customs (HMRC) is reminding manufacturers, importers, and warehousekeepers involved with vaping products to prepare for...

Read Article

February 10, 2026 10:35 AM

HMRC urging youngsters yet to claim Child Trust Fund to do so during National Apprenticeship Week

While an apprenticeship can provide a good start to life in work, latest figures show 758000 young people could be missing out on cash.

Read Article

February 10, 2026 10:16 AM

Claiming HMRC £2,242 payment 'takes five minutes' and hundreds of thousands are owed it

HM Revenue and Customs (HMRC) is encouraging young people who haven't yet claimed their Child Trust Fund to do so this week, during National...

Read Article

February 10, 2026 10:05 AM

One group of people owed £2,242 by HMRC and 'it takes five minutes'

HM Revenue and Customs (HMRC) is urging young people who have yet to claim their Child Trust Fund to do so this week, which is National...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-85893

SUMMARY

Use after free in Microsoft Edge (Chromium-based) allows an unauthorized attacker to elevate privileges over a network.

Published

Date2026-09-15

Updated

Date2026-09-15

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

2.8

REFERENCES

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-85893

CVE-2026-69486

SUMMARY

Heap-based buffer overflow in Microsoft Edge (Chromium-based) allows an unauthorized attacker to execute code over a network.

Published

Date2026-09-15

Updated

Date2026-09-15

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

2.8

REFERENCES

https://msrc.microsoft.com/update-guide/vulnerability/CVE-2026-69486

CVE-2025-11395

SUMMARY

A flaw was found in Podman. If an attacker can pass a crafted tar archive to the `podman load` command, they can create files on the host machine with the privileges of the user running Podman.

Published

Date2026-09-15

Updated

Date2026-09-15

RISK INFORMATION (Score: 5.5)

cvss3

Base Score: 5.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

Impact Score

3.4

Exploitability

2.1

REFERENCES

CVE-2026-92259

SUMMARY

Integer overflow or wraparound vulnerability in Samsung Opensource Escargot allows attackers with write access to the bytecode-cache directory to cause a heap-based buffer overflow and denial of service via a crafted cache file. This issue affects Escargot: ac94df78493ee6fede286620d94f724e46b4d238.

Published

Date2026-09-15

Updated

Date2026-09-15

RISK INFORMATION (Score: 5.5)

cvss3

Base Score: 5.5

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

1.8

REFERENCES

https://github.com/Samsung/escargot/pull/1650

CVE-2026-92257

SUMMARY

Netcore NR255-V version 1.5.130703 contains a stored cross-site scripting vulnerability in L7 content management pages that use eval() sinks, affecting the call board text and policy group handling components. Attackers can inject persistent script payloads through these pages to have malicious code executed in the context of other users viewing the affected content.

Published

Date2026-09-15

Updated

Date2026-09-15

RISK INFORMATION (Score: 5.4)

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.7

Exploitability

2.3

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

HM Revenue & Customs Vendor Cyber Rating & Cyber Score

HRC A.I CyberSecurity Scoring

HM Revenue & Customs CyberSecurity News & History

HRC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for HRC

Incidents vs Government Administration Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types HRC vs Government Administration Industry Avg (This Year)

Incident History - HRC (X = Date, Y = Severity)

HM Revenue & Customs Subsidiaries

HRC

HM Revenue & Customs Similar Companies

Assurance Maladie

GSA

Västra Götalandsregionen

City of Los Angeles

National Park Service

Gouvernement du Québec – Carrières

USDA

City of Toronto

Comunidad de Madrid

HM Revenue & Customs CyberSecurity News

HMRC introduces GOV.UK One Login for new customers

More details of timeline for vaping duty registration issued by HMRC

HMRC urges vaping firms to prepare for duty registration

HMRC will be sending £200 fines to taxpayers after a change to tax return rules

Young people urged to claim UK Government cash worth over £2,200

Vaping businesses urged to prepare for Vaping Products Duty registration from April 2026

HMRC urging youngsters yet to claim Child Trust Fund to do so during National Apprenticeship Week

Claiming HMRC £2,242 payment 'takes five minutes' and hundreds of thousands are owed it

One group of people owed £2,242 by HMRC and 'it takes five minutes'

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

HM Revenue & Customs CyberSecurity News & History

HRC Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for HRC

Incidents vs Government Administration Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types HRC vs Government Administration Industry Avg (This Year)

Incident History - HRC (X = Date, Y = Severity)

HM Revenue & Customs Subsidiaries

HRC

HM Revenue & Customs Similar Companies

Assurance Maladie

GSA

Västra Götalandsregionen

City of Los Angeles

National Park Service

Gouvernement du Québec – Carrières

USDA

City of Toronto

Comunidad de Madrid

HM Revenue & Customs CyberSecurity News

HMRC introduces GOV.UK One Login for new customers

More details of timeline for vaping duty registration issued by HMRC

HMRC urges vaping firms to prepare for duty registration

HMRC will be sending £200 fines to taxpayers after a change to tax return rules

Young people urged to claim UK Government cash worth over £2,200

Vaping businesses urged to prepare for Vaping Products Duty registration from April 2026

HMRC urging youngsters yet to claim Child Trust Fund to do so during National Apprenticeship Week

Claiming HMRC £2,242 payment 'takes five minutes' and hundreds of thousands are owed it

One group of people owed £2,242 by HMRC and 'it takes five minutes'

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo