What is the official website of Department of Nutrition at Harvard Chan School ?

The official website of Department of Nutrition at Harvard Chan School is https://hsph.harvard.edu/department/nutrition/.

What is Department of Nutrition at Harvard Chan School's cybersecurity risk score?

Department of Nutrition at Harvard Chan School has an AI-generated cybersecurity risk score of 791 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Department of Nutrition at Harvard Chan School experienced?

According to Rankiteo, Department of Nutrition at Harvard Chan School currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Department of Nutrition at Harvard Chan School been affected by any supply chain cyber incidents ?

According to Rankiteo, Department of Nutrition at Harvard Chan School has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Instructure (Incident ID: INS1779266405) Instructure (Incident ID: STAVICINSHAR1778218101) Instructure (Incident ID: UNISTAINSHAR1778200829) Ghost (Incident ID: DUCHARGHO1779798590) Instructure (Incident ID: THEYALRUTHARSTAINSPRI1778258906) Instructure (Incident ID: MCGVERHARUDE1777034314) Oracle (Incident ID: DARHARPRICOLCLE1767881845)

Does Department of Nutrition at Harvard Chan School have SOC 2 Type 1 certification ?

According to Rankiteo, Department of Nutrition at Harvard Chan School is not certified under SOC 2 Type 1.

Does Department of Nutrition at Harvard Chan School have SOC 2 Type 2 certification ?

According to Rankiteo, Department of Nutrition at Harvard Chan School does not hold a SOC 2 Type 2 certification.

Does Department of Nutrition at Harvard Chan School comply with GDPR ?

According to Rankiteo, Department of Nutrition at Harvard Chan School is not listed as GDPR compliant.

Does Department of Nutrition at Harvard Chan School have PCI DSS certification ?

According to Rankiteo, Department of Nutrition at Harvard Chan School does not currently maintain PCI DSS compliance.

Does Department of Nutrition at Harvard Chan School comply with HIPAA ?

According to Rankiteo, Department of Nutrition at Harvard Chan School is not compliant with HIPAA regulations.

Does Department of Nutrition at Harvard Chan School have ISO 27001 certification ?

According to Rankiteo,Department of Nutrition at Harvard Chan School is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Department of Nutrition at Harvard Chan School operate in ?

Department of Nutrition at Harvard Chan School operates primarily in the Higher Education industry.

How many employees does Department of Nutrition at Harvard Chan School have ?

Department of Nutrition at Harvard Chan School employs approximately None employees people worldwide.

Does Department of Nutrition at Harvard Chan School own any subsidiaries ?

Department of Nutrition at Harvard Chan School presently has no subsidiaries across any sectors.

How many LinkedIn followers does Department of Nutrition at Harvard Chan School have ?

Department of Nutrition at Harvard Chan School's official LinkedIn profile has approximately 166,025 followers.

What is the NAICS classification code for Department of Nutrition at Harvard Chan School ?

Department of Nutrition at Harvard Chan School is classified under the NAICS code 6113, which corresponds to Colleges, Universities, and Professional Schools.

Does Department of Nutrition at Harvard Chan School have a Crunchbase profile ?

No, Department of Nutrition at Harvard Chan School does not have a profile on Crunchbase.

Does Department of Nutrition at Harvard Chan School have a LinkedIn profile ?

Yes, Department of Nutrition at Harvard Chan School maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/hsph-nutrition.

How many cybersecurity incidents has Department of Nutrition at Harvard Chan School experienced ?

As of June 14, 2026, Rankiteo reports that Department of Nutrition at Harvard Chan School has experienced 9 cybersecurity incidents.

How many peer or competitor companies does Department of Nutrition at Harvard Chan School have ?

Department of Nutrition at Harvard Chan School has an estimated 17,077 peer or competitor companies worldwide.

What types of cybersecurity incidents has Department of Nutrition at Harvard Chan School faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Cyber Attack and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

DNHCS

Boost Score +25 with badge (5 left)

791

/1000

Fair

816

/1000

Good

Department of Nutrition at Harvard Chan School Vendor Cyber Rating & Cyber Score

harvard.edu

Add Your Compliance Badge

Researching how nutrition affects human health at molecular and population levels to shape public policy and help people make better diet and lifestyle choices.

DNHCS A.I CyberSecurity Scoring

Scoring History

DNHCS

Department of Nutrition at Harvard Chan School CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Harvard University

Ransomware

100

5/2026

Instructure

INS1779266405

Harvard University

Cyber Attack

100

5/2026

Instructure

STAVICINSHAR177...

Harvard University

Ransomware

100

5/2026

Instructure

UNISTAINSHAR177...

Harvard University

Cyber Attack

5/2026

Ghost

DUCHARGHO177979...

Harvard University

Cyber Attack

100

5/2026

Instructure

THEYALRUTHARSTA...

Harvard University

Breach

100

4/2026

Instructure

MCGVERHARUDE177...

Harvard University

Breach

1/2026

Oracle

DARHARPRICOLCLE...

Harvard University

Ransomware

100

11/2025

HAR1770230343

Harvard University

Breach

1/2020

TICHARATTPRIMCD...

Loading…

A.I.

DNHCS Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for DNHCS

Incidents vs Higher Education Industry Avg (This Year)

No incidents recorded for Department of Nutrition at Harvard Chan School in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Department of Nutrition at Harvard Chan School in 2026.

Incident Types DNHCS vs Higher Education Industry Avg (This Year)

No incidents recorded for Department of Nutrition at Harvard Chan School in 2026.

Incident History - DNHCS (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Department of Nutrition at Harvard Chan School Subsidiaries

DNHCS

Higher Education

Website: https://hsph.harvard.edu/department/nutrition/

Company Size: 11-50 employees

Harvard UniversityHigher Education

Harvard Business SchoolHigher Education

Harvard Business School OnlineE-Learning Providers

Harvard Business School Executive EducationHigher Education

HBS Career & Professional DevelopmentHigher Education

HBS Institute for Business in Global SocietyBusiness Content

HBS Social Enterprise InitiativeCivic and Social Organizations

HBS Leadership InitiativeHigher Education

HBS Arthur Rock Center for EntrepreneurshipHigher Education

HBS Health Care InitiativeHospitals and Health Care

HBS FoundryBusiness Content

HBS Business and Environment InitiativeHigher Education

HBS Private Capital ProjectHigher Education

HBS Race, Gender & Equity InitiativeBusiness Content

Harvard Law SchoolHigher Education

Harvard Graduate School of EducationHigher Education

Harvard University Graduate School of DesignArchitecture and Planning

Harvard Extension SchoolHigher Education

Harvard Advanced Leadership InitiativeHigher Education

Wyss Institute at Harvard UniversityBiotechnology Research

Disruptive: Wyss Institute PodcastBiotechnology

Harvard Radcliffe InstituteHigher Education

Harvard Office of Technology Development (OTD)Research Services

Harvard Medical SchoolHigher Education

Harvard Medical School Department of Biomedical InformaticsHigher Education

Harvard Medical School Center for BioethicsHigher Education

Harvard Medical School Department of Health Care PolicyHigher Education

Harvard Medical School Center for Computational BiomedicineHigher Education

Black Staff CaucusHigher Education

Harvard Kennedy SchoolHigher Education

Harvard Kenneth C. Griffin Graduate School of Arts and SciencesHigher Education

Harvard Divinity SchoolHigher Education

Harvard University Talent and Careers ConnectionHigher Education

Harvard John A. Paulson School of Engineering and Applied SciencesHigher Education

The Harvard Center for Population and Development StudiesHigher Education

Harvard Division of Continuing EducationHigher Education

Fairbank Center for Chinese Studies, Harvard UniversityHigher Education

Harvard University Alumni Affairs and Development (AA&D)Higher Education

Harvard T.H. Chan School of Public HealthHigher Education

Harvard Public Health magazinePeriodical Publishing

Harvard T.H. Chan School of Public Health HR, Talent AcquisitionHigher Education

Lee Kum Sheung Center for Health and HappinessPublic Health

Loading…

Department of Nutrition at Harvard Chan School Similar Companies

University of Utah

utah.edu

The University of Utah, located in Salt Lake City in the foothills of the Wasatch Mountains, is the flagship institution of higher learning in Utah. Founded in 1850, it serves over 31,000 students from across the U.S. and the world. With over 72 major subjects at the undergraduate level and more than 90 major fields of study at the graduate level, including law and medicine, the university prepares students to live and compete in the global workplace. Known for its proximity to seven world-class ski resorts within 40 minutes of campus, the U encourages an active, holistic lifestyle, innovation and collaborative thinking to engage students, faculty and business leaders. The University of Utah became a member of the PAC-12 conference in July 2011. Technology and Commercialization The University of Utah is tops in the country for creating start-up companies from university research, according to a ranking by the Association of University Technology Managers (AUTM). See http://unews.utah.edu/news_releases/u-of-utah-no-1-for-startups for more information. Forbes magazine’s recent ranking of the “Best States for Business” pointed to “an educated labor force” as a big reason Utah came in at number one. The U supplies many of the employees for companies that keep expanding their operations in Utah, such as Goldman Sachs, Adobe, Omniture, Oracle, Ebay and many others. http://pac12info.utah.edu/commercialization-of-innovation/ Healthcare University of Utah Health Care recently ranked first in the nation in a prestigious national study. The University Health System Consortium’s 2010 Quality and Accountability Study compared 98 of the nation’s top academic medical centers and ranked them based on core quality measures, patient safety indicators, mortality rates, re-admission rates, and patient satisfaction scores. See more about University of Utah Health Care at http://healthcare.utah.edu/index.php

UNSW

unsw.edu.au

The University of New South Wales (UNSW) is one of Australia's leading research and teaching universities. Established in 1949, UNSW has expanded rapidly and now has more than 52,000 students, including more than 14,000 international students from over 130 different countries. UNSW offers more than 300 undergraduate and 600 postgraduate programs, and has developed an extensive network of alumni chapters throughout Asia. UNSW is a founding member of the prestigious Group of Eight research intensive universities in Australia and a member of the Universitas 21 international consortium. The main UNSW campus is located on a 38-hectare site at Kensington, in Sydney. Other campuses are UNSW Art and Design (Paddington), UNSW Canberra (Canberra City and Australian Defence Force Academy), and sub-campuses at Randwick and Coogee, as well as research stations around NSW. We believe in academic freedom, so posts do not necessarily represent official UNSW views. Read our Social Media Terms of Service at www.unsw.to/sm UNSW Sydney CRICOS no.00098G facebook.com/unsw twitter.com/unsw instagram.com/unsw youtube.com/unsw

Lund University

lu.se

Lund University has around 46 000 students and 8 600 staff based in Lund, Helsingborg and Malmö. We are united in our efforts to understand, explain and improve our world and the human condition. Lund is considered one of the most popular study locations in Sweden. The University offers one of the broadest ranges of programmes and courses in Scandinavia, based on cross-disciplinary and cutting-edge research. The unique disciplinary range encourages boundary-crossing collaborations both within academia and with wider society, creating great conditions for scientific breakthroughs and innovations. The University has a distinct international profile, with partner universities in 76 countries. Lund University has an annual turnover of EUR 954 million, of which two-thirds go to research in our nine faculties, enabling us to offer one of the strongest and broadest ranges of research in Scandinavia. About this page: Lund University’s official LinkedIn page is managed by the communications department at Lund University. You are welcome to comment on our posts, but please do not post anything containing inappropriate language, personal attacks, sexual harassment, spam or advertising, confidential personal data, or copyright material. Contributions are monitored and material that violates Swedish law or is off topic will be removed.

University of Arkansas

uark.edu

The University of Arkansas is Arkansas' only R1 research institution and is the flagship land-grant campus of the U of A System. We provide an internationally competitive education for undergraduate and graduate students in more than 200 academic programs and contribute more than $2.2 billion in economic impact to the state of Arkansas. The Carnegie Foundation classifies the U of A among the top 3 percent of colleges and universities in America with the highest level of research activity. U.S. News & World Report ranks the University of Arkansas among its top American public research universities. Founded in 1871, the University of Arkansas comprises 10 colleges and schools and maintains a low student-to-faculty ratio that promotes personal attention and close mentoring to provide all students with life-changing opportunities. The U of A is dedicated to Arkansas and works to build a better world.

Amity University

amity.edu

Amity University is India's top ranked non-profit private University where more emphasis is given on not only making you academically brilliant, but true leaders and team players, thus preparing you for the real life corporate world. Amity is the leading education group of India with Most Hi-tech Campus. Amity Education Group has come to be recognized for pioneering a global culture in education in India with over two decades of academic excellence. It has received the highest 'A+' Grade Accreditation by the National Accreditation and Assessment Council (NAAC). Amity has campuses in New Delhi NCR Noida, Gurgaon, Lucknow, Jaipur, Gwalior as well as in Dubai and London. Group campuses are also in Singapore, New York, California, China, Romania, and across India. Amity University offers various career focused programs at the Undergraduate and Postgraduate levels in diverse disciplines of higher education. Besides the conventional programs like Engineering, Management, Commerce, Hospitality, Architecture, Interior Design etc. Our focus is on combining knowledge from practice and research with quality teaching and learning. Amity is committed to excellence in the courses it offers, in the experience of our students as part of our community and in the depth and breadth of our research. At Amity we are passionate about grooming leaders who are not only thorough professionals but also good human beings with Values and Sanskars. This is just one of the many reasons why we are consistently ranked Number 1 Non-profit Private University. Today, we are proud that Amity is synonymous with practical; industry focused education, and attracts the best students. The fact that our alumni are working in the best companies across the world is a testament to our extremely talented faculty who inculcate, by example, in each student the spirit of dedication, sincerity and loyalty, and to all the corporates who support our mission with so much enthusiasm.

Brown University

brown.edu

Located in historic Providence, Rhode Island and founded in 1764, Brown University is the seventh-oldest college in the United States. Brown is an independent, coeducational Ivy League institution comprising undergraduate and graduate programs, plus the Alpert Medical School, School of Public Health, School of Engineering, and the School of Professional Studies. With its talented and motivated student body and accomplished faculty, Brown is a leading research university that maintains a particular commitment to exceptional undergraduate instruction. Brown’s vibrant, diverse community consists of about 6,200 undergraduates, 2,000 graduate students, 490 medical school students, more than 5,000 summer, visiting, and online students, and over 700 faculty members. Brown students come from all 50 states and more than 115 countries. Undergraduates pursue bachelor’s degrees in more than 70 concentrations, ranging from Egyptology to cognitive neuroscience. Anything’s possible at Brown—the university’s commitment to undergraduate freedom means students must take responsibility as architects of their courses of study. Brown University has 51 doctoral programs and 28 master’s programs. The broad scope of options vary from interdisciplinary opportunities in molecular pharmacology and physiology to a master’s program in acting and directing through the Brown/Trinity Repertory Consortium. Around the world, nearly 90,000 Brown alumni are - in the words of Brown’s charter - leading lives of “usefulness and reputation” in every imaginable field of endeavor. Through events around the globe, reunions on campus, career resources, a host of online connections, and other services, the Brown Alumni Association fosters and supports a vibrant alumni community, wherever its members may be.

Florida International University

fiu.edu

FIU is Miami's public research university. Offering bachelor's, master's and doctoral degrees, both on campus and fully online. Designated a Preeminent State Research University, FIU emphasizes research as a major component in the university's mission. For more than 50 years, FIU has positioned itself as one of South Florida's anchor institutions by solving some of the greatest challenges of our time. We are dedicated to enriching the lives of the local and global community. With a student body of more than 56,000, we are among the largest universities in the nation and have collectively graduated more than 300,000 alumni, 165,000 of whom live and work in South Florida.

University of Virginia

virginia.edu

The University of Virginia was founded in 1819 as the model for modern universities that has since been emulated all over the world. After 200 years, this iconic institution of higher learning endures because it is fully immersed in meeting the greatest challenges of our time, day in and day out. It’s how we fulfill our animating purpose – to serve. UVA is Virginia’s flagship institution of higher learning, perennially ranked as one of the best public universities in the nation. Having the best public college financial aid package and the highest graduation rate in the nation, UVA offers a life-changing return on investment for students from all backgrounds. We promote access so a meritocracy of talent can participate in shaping our society. The revolutionary vision of an Academical Village has evolved to 12 Schools, each providing leadership in its field and attracting world-class talent. The University is the largest employer in the region and is a catalyst for growth across the Commonwealth, generating an annual economic impact of $5.9 billion. Ultimately, we prepare students to be citizen-leaders who themselves are guided by empathy, integrity, and truth. We believe that doing what you do best, for the benefit of others, is where greatness comes from. Which is why, at the University of Virginia, we strive to be great and good in all we do. #GreatandGood #UVA

UC Irvine

uci.edu

Since 1965, the University of California, Irvine has combined the strengths of a major research university with the bounty of an incomparable Southern California location. As a U.S. News & World Report top 10 public university, UCI’s unyielding commitment to rigorous academics, cutting-edge research, and leadership and character development makes the campus a driving force for innovation and discovery that serves our local, national and global communities in many ways. With more than 37,000 students, 1,497 faculty members and 11,622 staff, UCI is among the most dynamic campuses in the University of California system. Increasingly a first-choice campus for students, UCI ranks among the top U.S. universities in the number of undergraduate applications and continues to admit freshmen with highly competitive academic profiles. UCI is also ranked No. 2 by U.S. News & World Report for social mobility, which takes into account the graduation rate of students awarded Pell Grants. Orange County’s second-largest employer, UCI generates an annual economic impact on the county of $7 billion. http://www.uci.edu/

Loading…

NEWS

Department of Nutrition at Harvard Chan School CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

May 16, 2025 07:00 AM

In Healthy Aging, Carb Quality Counts

A study from the Human Nutrition Research Center on Aging links midlife intakes of high-quality carbohydrates and dietary fiber to better...

Read Article

May 16, 2025 07:00 AM

Eating these carbs can help boost healthy aging, according to a 30-year study

Time and time again, nutrition experts and dietitians praise the health benefits of eating a high-fiber diet, but 95% of Americans are...

Read Article

April 08, 2025 01:55 PM

3 eating habits that could help you age well—and 4 that don’t

These diets emphasize three main eating habits: high intake of plant-based foods like fruits, vegetables, whole grains, unsaturated fats, nuts, and legumes.

Read Article

March 26, 2025 07:00 AM

Improving cybersecurity to protect against online hate

With the rise of anti-science sentiment, individuals can protect themselves from online attacks via multiple strategies, according to...

Read Article

January 06, 2025 08:00 AM

The truth about how many transgender kids are using hormones and puberty blockers, according to a new study

Despite fears of their over-medicalization, transgender adolescents are only very rarely prescribed hormones and puberty blockers.

Read Article

December 27, 2023 08:00 AM

Eating a low-carb diet based on meat? You may gain weight later on, study finds

People who ate an unhealthy, meat-based low-carb diet gained weight over time compared with those who followed a heathier, plant-based...

Read Article

January 31, 2023 08:00 AM

The 4 best diets for healthy aging that experts say will keep your brain sharp and your body healthy

You can't change the number of candles on your birthday cake, but you can change how you feel and function as you get older—no injections,...

Read Article

October 03, 2022 07:00 AM

Cybersecurity Month: Multi-Factor Authentication (MFA)

Today's topic is Multi-Factor Authentication (MFA), also known as 2 Step Verification (2SV). Harvard's MFA solution is DUO.

Read Article

May 17, 2022 07:00 AM

If Office Cafeterias Comply with U.S. Nutrition Standards, It Could Save Millions in Health Care Spending

A new study from Friedman School researchers finds workplace cafeterias that follow Federal Food Service Guidelines can improve worker health and save millions...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-12175

SUMMARY

A vulnerability was detected in CodeAstro Student Attendance Management System 1.0. Impacted is an unknown function of the file /attendance-php/Admin/createStudents.php. Performing a manipulation of the argument admissionNumber results in sql injection. Remote exploitation of the attack is possible. The exploit is now public and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 4.7)

cvss2

Base Score: 5.8

Complexity: LOW

AV:N/AC:L/Au:M/C:P/I:P/A:P

cvss3

Base Score: 4.7

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:H/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

1.2

REFERENCES

CVE-2026-12174

SUMMARY

A security vulnerability has been detected in D-Link DCS-935L 1.10.01. This issue affects the function snprintf of the file /web/cgi-bin/greece/rhea of the component HTTP Handler. Such manipulation of the argument data leads to format string. The attack may be launched remotely. The exploit has been disclosed publicly and may be used.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 8.8)

cvss2

Base Score: 9.0

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:C/A:C

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 7.4

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-12183

SUMMARY

Nefteprodukttekhnika BUK TS-G Gas Station Automation System 2.9.1 through 2.10.2 on Linux contains an Improper Authentication vulnerability (CWE-287) in the system configuration module. The /php/ajax-login.php endpoint returns userid=1 (administrator) in response to any HTTP POST request that supplies arbitrary credentials (e.g., action=dologin&login=<any_value>&pwd=<any_value>), and subsequent privileged endpoints under /php/ajax-main.php and /modules/* do not validate a server-side session. A remote unauthenticated attacker can invoke any administrative action exposed by the configuration module, including reading and modifying user rules, fuel tank gauges, fuel dispensers, relays, cash registers, bank terminals, fuel cards, price and customer displays, cash collection, and pricing rules.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:L/SI:L/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-6428

SUMMARY

SQL Injection in reports/catalogue_out.pl in Koha Community Koha through 22.11.37, 23.x, 24.x before 24.11.16, 25.05.x before 25.05.11, 25.11.x before 25.11.05, 26.05.x before 26.05.01, and 26.11.x before 26.11.00 allows an authenticated staff user with the Reports module flag to read arbitrary data from the Koha application database via the Filter URL parameter when the Criteria parameter matches /branchcode/. The vulnerable sink in sub calculate concatenates the unmodified Filter request parameter directly into a LIKE clause of the auxiliary $strsth2 statement and executes it via DBI without bound parameters: my $f = @$filters[0]; $f =~ s/\*/%/g; $strsth2 .= " AND $column LIKE '$f' "; This enables error-based SQL injection (e.g., via EXTRACTVALUE) and full read access to sensitive tables including borrowers (password hashes, 2FA secrets, PII), borrower_password_recovery, api_keys, and sessions. Proof of concept (error-based, single request): GET /cgi-bin/koha/reports/catalogue_out.pl?do_it=1&output=screen&Limit=10&Criteria=branchcode&Filter=x'+AND+EXTRACTVALUE(1,CONCAT(0x7e,VERSION(),0x7c,USER(),0x7c,DATABASE(),0x7e))--+- Cookie: CGISESSID=<LIBRARIAN_SESSION> The response body contains the DBI exception leaking the MariaDB version, database user, client IP, and database name, after which arbitrary data can be paged out using LIMIT n,1 / SUBSTRING(...). The vulnerable sink was introduced in commit 6bb77ae3e4 (2008-07-09); CVE-2015-4633 patched the same class in sibling files but did not generalise the fix to reports/catalogue_out.pl. Fixed in Koha 22.11.38, 24.11.16, 25.05.11, 25.11.05, 26.05.01, and 26.11.00 by replacing the raw concatenation with a parameterised placeholder.

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.6)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:S/C:C/I:N/A:P

cvss3

Base Score: 7.6

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

cvss4

Base Score: 5.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:Y/R:X/V:C/RE:X/U:Amber

Impact Score

4.7

Exploitability

2.8

REFERENCES

CVE-2026-5513

SUMMARY

The Online Scheduling and Appointment Booking System – Bookly plugin for WordPress is vulnerable to Stored Cross-Site Scripting via the 'bookly-customer-full-name' cookie in versions up to, and including, 27.2 due to insufficient input sanitization and output escaping. This makes it possible for unauthenticated attackers to inject arbitrary web scripts in pages that will execute whenever a user accesses an injected page. Exploitation requires 'Remember personal information in cookies' setting to be enabled (disabled by default).

Published

Date2026-06-13

Updated

Date2026-06-13

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:L/A:N

Impact Score

2.7

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…