What is the official website of J & P Richardson Manufacturing ?

The official website of J & P Richardson Manufacturing is http://www.jpr.com.au.

What is J & P Richardson Manufacturing's cybersecurity risk score?

J & P Richardson Manufacturing has an AI-generated cybersecurity risk score of 749 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has J & P Richardson Manufacturing experienced?

According to Rankiteo, J & P Richardson Manufacturing currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has J & P Richardson Manufacturing been affected by any supply chain cyber incidents ?

According to Rankiteo, J & P Richardson Manufacturing has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does J & P Richardson Manufacturing have SOC 2 Type 1 certification ?

According to Rankiteo, J & P Richardson Manufacturing is not certified under SOC 2 Type 1.

Does J & P Richardson Manufacturing have SOC 2 Type 2 certification ?

According to Rankiteo, J & P Richardson Manufacturing does not hold a SOC 2 Type 2 certification.

Does J & P Richardson Manufacturing comply with GDPR ?

According to Rankiteo, J & P Richardson Manufacturing is not listed as GDPR compliant.

Does J & P Richardson Manufacturing have PCI DSS certification ?

According to Rankiteo, J & P Richardson Manufacturing does not currently maintain PCI DSS compliance.

Does J & P Richardson Manufacturing comply with HIPAA ?

According to Rankiteo, J & P Richardson Manufacturing is not compliant with HIPAA regulations.

Does J & P Richardson Manufacturing have ISO 27001 certification ?

According to Rankiteo,J & P Richardson Manufacturing is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does J & P Richardson Manufacturing operate in ?

J & P Richardson Manufacturing operates primarily in the Appliances, Electrical, and Electronics Manufacturing industry.

How many employees does J & P Richardson Manufacturing have ?

J & P Richardson Manufacturing employs approximately None employees people worldwide.

Does J & P Richardson Manufacturing own any subsidiaries ?

J & P Richardson Manufacturing presently has no subsidiaries across any sectors.

How many LinkedIn followers does J & P Richardson Manufacturing have ?

J & P Richardson Manufacturing's official LinkedIn profile has approximately 36 followers.

What is the NAICS classification code for J & P Richardson Manufacturing ?

J & P Richardson Manufacturing is classified under the NAICS code 335, which corresponds to Electrical Equipment, Appliance, and Component Manufacturing.

Does J & P Richardson Manufacturing have a Crunchbase profile ?

No, J & P Richardson Manufacturing does not have a profile on Crunchbase.

Does J & P Richardson Manufacturing have a LinkedIn profile ?

Yes, J & P Richardson Manufacturing maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/j-&-p-richardson-manufacturing.

How many cybersecurity incidents has J & P Richardson Manufacturing experienced ?

As of September 14, 2026, Rankiteo reports that J & P Richardson Manufacturing has experienced 1 cybersecurity incidents.

How many peer or competitor companies does J & P Richardson Manufacturing have ?

J & P Richardson Manufacturing has an estimated 9,720 peer or competitor companies worldwide.

What types of cybersecurity incidents has J & P Richardson Manufacturing faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware.

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

JPRM

Boost Score +25 with badge (5 left)

749

/1000

Moderate

774

/1000

Fair

J & P Richardson Manufacturing Vendor Cyber Rating & Cyber Score

jpr.com.au

Add Your Compliance Badge

LOCAL EXPERIENCE & EXPERTISE. GLOBAL TECHNOLOGY & INNOVATION. J & P Richardson Industries (JPR) is one of Australia’s longest established Electrical Contracting and Engineering firms, offering 60 years local experience and proven project delivery. This, combined with parent company Vinci Energies’ leading technologies and global expertise, provides a unique platform – extensive local experience and knowledge, with the latest international innovation. HIGH QUALITY, IN HOUSE SWITCHBOARD & SHEET METAL MANUFACTURING JPR has an in-house switchboard and sheet metal manufacturing department, supplying a wide range of modular and custom built Low Voltage switchboards. These include motor control centres and power switchboards as well as

JPRM

J & P Richardson Manufacturing CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

J & P Richardson Ma...

Ransomware

100

9/2023

VIN096210910302...

Loading…

A.I.

JPRM Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for JPRM

Incidents vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for J & P Richardson Manufacturing in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for J & P Richardson Manufacturing in 2026.

Incident Types JPRM vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

No incidents recorded for J & P Richardson Manufacturing in 2026.

Incident History - JPRM (X = Date, Y = Severity)

Loading…

SUBSIDIARY

J & P Richardson Manufacturing Subsidiaries

JPRM

Appliances, Electrical, and Electronics Manufacturing

Website: http://www.jpr.com.au

Company Size: 201-500 employees

VINCI EnergiesInformation Technology & Services

VINCIConstruction

VINCI ConstructionConstruction

VINCI Construction Grands ProjetsConstruction

Sogea-SatomConstruction

VINCI Building UKConstruction

FreyssinetCivil Engineering

VINCI Construction FranceConstruction

Soletanche BachyConstruction

NUVIAConstruction

Entrepose GroupOil and Gas

VINCI Construction Outre-merConstruction

MenardConstruction

VINCI CONSTRUCTION SIIT Services and IT Consulting

EuroviaConstruction

EUROVIA ESPAÑA. GRUPO VINCIConstruction

ETFRail Transportation

BA Blacktop Group of CompaniesConstruction

Test CMS-ONEConstruction

Eurovia QuébecConstruction

VINCI ImmobilierReal Estate

VINCI Immobilier ConseilReal Estate

VINCI AutoroutesTransportation/Trucking/Railroad

Nicholson ConstructionConstruction

VINCI ConcessionsTruck Transportation

VINCI AirportsAirlines and Aviation

VINCI HighwaysTransportation/Trucking/Railroad

LeonardConstruction

Leonard in der D-A-CH RegionConstruction

VINCI insertion EmploiServices d’aide à l’insertion professionnelle

ActemiumAutomation Machinery Manufacturing

AxiansInformation Technology & Services

OmexomElectric Power Transmission, Control, and Distribution

ComsipStaffing and Recruiting

VINCI Energies PortugalHolding Companies

ElectrixUtilities

VINCI Energies DeutschlandDesign Services

Digitalschmiede VINCI Energies DeutschlandIT und Services

VINCI Energies Building Solutions in GermanyConstruction

G+H GroupConstruction

VINCI Facilities DeutschlandConstruction

SKE InternationalConstruction

VINCI Energies BrasilIT Services and IT Consulting

VINCI Energies ItaliaIT Services and IT Consulting

Axians ItaliaInformation Technology & Services

VINCI Facilities ItaliaFacilities Services

Elphi VM Impianti ElettriciAppliances, Electrical, and Electronics Manufacturing

VINCI Energies Building Solutions ItaliaConstruction

UxelloConstruction

VINCI Energies BelgiumIT Services and IT Consulting

Mentor IMC GroupOil and Gas

VINCI Energies UK & RoITechnology, Information and Internet

Mobility - Enjoy the wayIT Services and IT Consulting

VINCI Energies NLIT Services and IT Consulting

Axians NLIT Services and IT Consulting

Axians | Business AnalyticsIT Services and IT Consulting

Axians NL | Business ApplicationsIT Services and IT Consulting

Actemium NederlandAutomation Machinery Manufacturing

Koning & HartmanTechnology, Information and Internet

Omexom NLRenewable Energy Semiconductor Manufacturing

VerkerkConstruction

VINCI Energies Building Solutions in NederlandConstruction

VerAutomation B.V.Automation Machinery Manufacturing

Bosman BedrijvenConstruction

Schilt BedrijvenConstruction

Amecha BVIndustrial Machinery Manufacturing

de Jong engineeringAutomation Machinery Manufacturing

PT Indokomas Buana PerkasaConstruction

VINCI Energies SverigeEnvironmental Services

VINCI Nordic Foundation Ideell organisationsförvaltning

SECURE Systems & ServicesInformation Technology & Services

Omexom SuomiElectric Power Transmission, Control, and Distribution

VINCI Energies NorgeEnvironmental Services

VINCI Energies SénégalIT Services and IT Consulting

VINCI Energies SpainIT Services and IT Consulting

J & P Richardson IndustriesConstruction

J & P Richardson Engineering & DesignAppliances, Electrical, and Electronics Manufacturing

J & P Richardson UtilitiesCivil Engineering

J & P Richardson ContractingAppliances, Electrical, and Electronics Manufacturing

Loading…

J & P Richardson Manufacturing Similar Companies

Bharat Heavy Electricals Limited

bhel.com

Established in 1964, BHEL is one of India's largest engineering and manufacturing enterprises in the energy and infrastructure sectors, and a leading power equipment manufacturer globally. BHEL serves the core sectors of the economy and provides a comprehensive portfolio of products, systems and services to customers in power, transmission, transportation, renewables, water, defence & aerospace, oil & gas, and industry. BHEL has created value for its stakeholders due to the scale and depth of its operations, rich experience, competent manpower, innovative ecosystem, diverse product-mix and focus on sustainable business solutions. BHEL’s greatest asset- its highly skilled and committed workforce of more than 34,000 employees is the cornerstone of its success. BHEL’s commitment to nation building reflects in many ways- in its contribution to the country’s installed power generation capacity; bringing the latest state-of-the-art technology to the country; consistent highest expenditure of more than 2.5% of its turnover on R&D and innovation in the Indian engineering segment; pan-India presence; establishment of world-class assets with presence in over 84 country across the globe, and contribution to the society at large through initiatives in skilling youth, health & hygiene, education, cleanliness and environment protection, to name a few. With a widespread network of 16 manufacturing facilities, 2 repair units, 4 regional offices, 8 service centres, 1 subsidiary, 3 active joint ventures, 15 regional marketing centres, 3 overseas offices and current project execution at more than 150 project sites across India and abroad, BHEL manufactures a wide range of high quality & reliable products adhering to national & international standards. BHEL has installed over 1000 utility sets worldwide with its installed base of supplied power generating equipment exceeding 185 GW. BHEL has also commissioned 200+ electric substations & 5 major HVDC projects in the country.

Havells India Ltd

havells.com

Havells India Limited is a leading FMEG company with a strong global presence, manufacturing a wide range of electrical products for residential, commercial, and industrial use. Key brands include Havells, Havells Studio, Lloyd, Havells Crabtree, Standard Electricals and REO. With a focus on innovation and customer satisfaction, Havells boasts a robust distribution network, exclusive brand showrooms, and a strong emphasis on service. The company prioritizes sustainability, with a focus on renewable energy, waste reduction, and environmental conservation. Havells is committed to social responsibility, with initiatives in education, sanitation, and community development. Recognized for its sustainability efforts, Havells has been ranked in the Dow Jones Sustainability Index and maintains an 'A' rating in the MSCI ESG Rating. Learn more about Havells on the following channels: Facebook I Youtube I Twitter I Instagram I

Delta Electronics

deltaww.com

Delta is a global innovative provider of switching power supplies and DC brushless fans, as well as a major source for power management solutions, components, visual displays, industrial automation, networking products, and renewable energy solutions. Delta Group has sales offices worldwide and manufacturing plants in Taiwan, China, Thailand, Mexico, India and Europe. As a global innovator in power electronics, Delta's mission is, "To provide innovative, clean and efficient energy solutions for a better tomorrow." Delta is committed to environmental protection and has implemented green, lead-free production and waste management programs for many years.

Foxconn

cb foxconn.com

Established in Taiwan in 1974, Hon Hai Technology Group (Foxconn) (2317: Taiwan) is the world’s largest electronics manufacturer. Foxconn is also the leading technological solution provider, and it continuously leverages its expertise in software and hardware to integrate its unique manufacturing systems with emerging technologies. By capitalizing on its expertise in Cloud Computing, Mobile Devices, IoT, Big Data, AI, Smart Networks, and Robotics / Automation, the Group has expanded not only its capabilities into the development of electric vehicles, digital health and robotics, but also three key technologies –AI, semiconductors and new-generation communications technology – which are key to driving its long-term growth strategy and the four core product pillars: Consumer Products, Enterprise Products, Computing Products and Components and Others. In 2021, Hon Hai's annual revenue reached NT$5.99 trillion. The company has established R&D and manufacturing centers in other markets around the world including China, India, Japan, Vietnam, Malaysia, Czech Republic, U.S. and more. With a focus on research and development, the company owns more than 54,253 patents. In addition to maximizing value-creation for customers who include many of the world’s leading technology companies, Foxconn is also dedicated to championing environmental sustainability in the manufacturing process and serving as a best-practices model for global enterprises. The company has received widespread international accolades and recognition since its establishment. The company ranked 22nd on the Fortune Global 500 rankings in 2021 and 25th in the Top 100 Digital Companies in the Forbes ranking of the World’s Best Employers in 2019. Moreover, on Forbes’ World’s Best Employers 2021 rankings, the company ranked 1st in Taiwan. Foxconn is also the only Taiwanese private company awarded for 5 consecutive years of Clarivate Top 100 Global Innovators (2018 - 2022).

Keysight Technologies

keysight.com

Keysight empowers innovators to explore, design, and bring world-changing technologies to life. As the industry’s premier global innovation partner, Keysight’s software-centric solutions serve engineers across the design and development environment, enabling them to deliver tomorrow’s breakthroughs at speed and with reduced risk. Keysight leverages its strength as the world’s leading test and measurement provider and today enables innovators to push the boundaries of engineering by quickly solving design, emulation, and test challenges to help create the best product experiences. Whether you're looking to improve your design and development process, optimize and secure your network, or harness AI and digital twins to get a head start on technologies like 6G, AV and EV, IoT, or quantum computing — Keysight accelerates innovation across the workflow with intelligent insights built on the most accurate measurements. Our fusion of technology knowledge, measurement science expertise, and tailored solutions helps you forge ahead with confidence in our connected and dynamic world. Keysight Technologies (NYSE: KEYS) is an S&P 500 technology company, headquartered in Santa Rosa, California, with offices and manufacturing worldwide. Keysight owns 2,000+ patents and our ~15,000 employees work with nearly 32,000 customers worldwide to start technology revolutions. Keysight customers span the communications, industrial automation, aerospace and defense, automotive, energy, semiconductor, and general electronics markets. Join us! To accelerate innovation to connect and secure the world, innovators start here, with Keysight.

Vertiv

Vertiv.com

Vertiv is a global leader in critical digital infrastructure for applications in data centers, communication networks, and commercial and industrial environments. As businesses, industries, and communities become more connected, we pioneer and deliver end-to-end power and cooling technologies to help our customers stay resilient, optimized, and future-ready. With our industry-leading innovative technologies and global services network, we are fueling the revolution of the digital world - keeping technology ecosystems running efficiently and without interruption. Vertiv is supercharging data’s potential; accelerating the pace of technology, raising the bar for accelerated compute and redefining the limits of densification. The world depends on data we power and cool™

Molex

molex.com

Molex makes a connected world possible by enabling technologies that transform the future and improve lives. With a presence in more than 40 countries, Molex offers a complete range of connectivity products, services and solutions for the data communications, medical, industrial, automotive and consumer electronics industries. We’re doing more than developing solutions for our customers, we’re Creating Connections for Life.

WEG

weg.net

Founded in 1961, WEG is a global electro-electronic equipment company, operating in the capital goods sector a with focus on electric motors, gearboxes and drives and controls, energy generation and transformers, electrification products and systems, automation and digitalization. WEG stands out in innovation by constantly developing solutions to meet the major trends in energy efficiency, renewable energy and electric mobility. With manufacturing units in 15 countries and present in more than 135 countries, the company has more than 47,000 employees worldwide. WEG’s net revenue reached R$ 38.0 billion in 2024, 57.0% from external markets.

Legrand

legrandgroup.com

Legrand is a global specialist in electrical and digital building infrastructures, dedicated to supporting technological, societal and environmental change around the globe. Our purpose is to improve lives by transforming the spaces where people live, work and meet by delivering electrical and digital infrastructures and connected solutions that are simple, innovative and sustainable. With nearly 38,000 employees around the world, we work hard every day to make the buildings of tomorrow more sustainable for everyone. Legrand reported sales of €8.3 billion in 2022. The company is listed on Euronext Paris and is notably a component stock of the CAC 40, CAC 40 ESG and CAC SBT 1.5 indexes. (code ISIN FR0010307819).

Loading…

NEWS

J & P Richardson Manufacturing CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 19, 2025 05:17 AM

Rebecca J. Tropf 1950-2025

THE VILLAGES, Fla. — Rebecca J. “Becky” McAllister Tropf, 75, entered into eternal rest on Friday, Nov. 28, 2025. She is now at peace,...

Read Article

December 19, 2025 05:07 AM

John J. ‘Jack’ Conrad

John J. “Jack” Conrad, 94, of Loretto, died Wednesday at home surrounded by his loving family. He was born in Ashville, son of the late...

Read Article

December 19, 2025 05:00 AM

Why 50 years of fish tanks is the real story of Sarasota

Celebration of Seascape Aquarium's 50th anniversary — more than a longstanding local business.

Read Article

December 19, 2025 05:00 AM

ZOLAND·Emei, Resort / Studio J. Bridgland

Text description provided by the architects. ZOLAND·Emei Resort is a boutique mountain retreat in Emeishan, designed by Studio J.

Read Article

December 19, 2025 04:04 AM

Jorge J. Castillo, MD discusses results from a multicenter phase 2 Study

Jorge J. Castillo, MD discusses results from a multicenter phase 2 Study. High VGPR/CR rates with pirtobrutinib plus venetoclax in...

Read Article

December 19, 2025 04:00 AM

Fallen Vietnam Veteran honored during dedication ceremony

A Stroud native and war hero is memorialized at Tinker Air Force Base. The family of Chief Master Sergeant Donald J. Hall dedicated his...

Read Article

December 19, 2025 03:24 AM

Two Millbrook teens arrested following multiple vehicle break-ins

The Millbrook Police Department launched an investigation on December 15 after officers responded to a report of multiple vehicle break ins...

Read Article

December 19, 2025 03:00 AM

J Balvin Shares His Thoughts on Bad Bunny Rivalry

J Balvin says he has moved on from the rivalry talk with Bad Bunny. In a recent interview, he shared that his priorities have shifted toward...

Read Article

December 19, 2025 02:13 AM

Obituary for Paul J. DeWitt

Obituary for Paul J. DeWitt | Paul J. DeWitt, 73, husband of the late Brenda (Ackell) DeWitt and father of Daniel P. DeWitt, died on Friday,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-90603

SUMMARY

A vulnerability was identified in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this issue is some unknown functionality of the file /api/upload-binary of the component S3 Upload. Such manipulation of the argument x-proxy-target-url leads to unrestricted upload. The attack may be launched remotely. The name of the patch is f013270957f75e439eaf97eb2a93decb32a4543e. Applying a patch is advised to resolve this issue.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90602

SUMMARY

A vulnerability was determined in Anil-matcha Open-Generative-AI up to 1.0.11/2.0.0. Affected by this vulnerability is the function renderHistory of the file ImageStudio.js of the component Studio Components. This manipulation causes cross site scripting. The attack may be initiated remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 3.5)

cvss2

Base Score: 4.0

Complexity: LOW

AV:N/AC:L/Au:S/C:N/I:P/A:N

cvss3

Base Score: 3.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:N/I:L/A:N

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:P/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

1.4

Exploitability

2.1

REFERENCES

CVE-2026-90601

SUMMARY

A vulnerability was found in getzep graphiti up to 0.30.2. Affected is an unknown function of the file server/graph_service/main.py of the component REST API. The manipulation results in improper authentication. The attack can be launched remotely. The pull request to fix this issue awaits acceptance.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 7.3)

cvss2

Base Score: 7.5

Complexity: LOW

AV:N/AC:L/Au:N/C:P/I:P/A:P

cvss3

Base Score: 7.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

3.9

REFERENCES

CVE-2026-90600

SUMMARY

A vulnerability has been found in itsourcecode Sales and Inventory System 1.0. This impacts an unknown function of the file /pages/inv_edit1.php. The manipulation of the argument ID leads to sql injection. The attack can be initiated remotely. The exploit has been disclosed to the public and may be used.

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-15892

SUMMARY

The mcumgr SMP settings-management group handlers settings_mgmt_read(), settings_mgmt_write(), and settings_mgmt_delete() in subsys/mgmt/mcumgr/grp/settings_mgmt/src/settings_mgmt.c allocate a key_name buffer (and, for read, a data buffer) via k_malloc() when CONFIG_MCUMGR_GRP_SETTINGS_BUFFER_TYPE_HEAP is enabled, relying on the end: label to k_free() them. When CONFIG_MCUMGR_GRP_SETTINGS_ACCESS_HOOK is also enabled and the application access hook rejects a request by returning status MGMT_CB_ERROR_RC, the handler executed return ret_rc; directly, bypassing end: and leaking the heap allocation on every rejected request. The settings handlers are reachable over the unauthenticated SMP transport (Bluetooth LE, UART, or UDP, depending on product configuration). The access hook is the mechanism applications use to deny unauthorized settings access, and MGMT_CB_ERROR_RC is a common rejection style, so an attacker who can send settings read/write/delete commands that the hook rejects triggers a heap leak on each attempt. Because the leaked memory is never reclaimed until reboot, a sustained stream of rejected requests monotonically exhausts the kernel heap until k_malloc() fails, denying mcumgr service and impacting any other heap consumer on the device — a denial of service. The impact is availability-only; there is no memory corruption or information disclosure. Only configurations that select the heap buffer type, enable the access hook, and register a hook that returns MGMT_CB_ERROR_RC are affected (the default stack buffer type cannot leak).

Published

Date2026-09-13

Updated

Date2026-09-13

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…

Badge your company to reduce your risk score and your cyber insurance costs!

Trusted by insurers. Chosen by leaders.

J & P Richardson Manufacturing Vendor Cyber Rating & Cyber Score

JPRM A.I CyberSecurity Scoring

J & P Richardson Manufacturing CyberSecurity News & History

JPRM Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for JPRM

Incidents vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types JPRM vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

Incident History - JPRM (X = Date, Y = Severity)

J & P Richardson Manufacturing Subsidiaries

JPRM

J & P Richardson Manufacturing Similar Companies

Bharat Heavy Electricals Limited

Havells India Ltd

Delta Electronics

Foxconn

Keysight Technologies

Vertiv

Molex

WEG

Legrand

J & P Richardson Manufacturing CyberSecurity News

Rebecca J. Tropf 1950-2025

John J. ‘Jack’ Conrad

Why 50 years of fish tanks is the real story of Sarasota

ZOLAND·Emei, Resort / Studio J. Bridgland

Jorge J. Castillo, MD discusses results from a multicenter phase 2 Study

Fallen Vietnam Veteran honored during dedication ceremony

Two Millbrook teens arrested following multiple vehicle break-ins

J Balvin Shares His Thoughts on Bad Bunny Rivalry

Obituary for Paul J. DeWitt

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo

J & P Richardson Manufacturing CyberSecurity News & History

JPRM Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Incident Predictions locked

A.I Risk Score Likelihood 3 - 6 - 9 months

A.I. Risk Score Predictions locked

Underwriter Stats for JPRM

Incidents vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

Incidents vs All-Companies Average (This Year)

Incident Types JPRM vs Appliances, Electrical, and Electronics Manufacturing Industry Avg (This Year)

Incident History - JPRM (X = Date, Y = Severity)

J & P Richardson Manufacturing Subsidiaries

JPRM

J & P Richardson Manufacturing Similar Companies

Bharat Heavy Electricals Limited

Havells India Ltd

Delta Electronics

Foxconn

Keysight Technologies

Vertiv

Molex

WEG

Legrand

J & P Richardson Manufacturing CyberSecurity News

Rebecca J. Tropf 1950-2025

John J. ‘Jack’ Conrad

Why 50 years of fish tanks is the real story of Sarasota

ZOLAND·Emei, Resort / Studio J. Bridgland

Jorge J. Castillo, MD discusses results from a multicenter phase 2 Study

Fallen Vietnam Veteran honored during dedication ceremony

Two Millbrook teens arrested following multiple vehicle break-ins

J Balvin Shares His Thoughts on Bad Bunny Rivalry

Obituary for Paul J. DeWitt

Global CVEs (Not Company-Specific)

Access Data Using Our API

What Do We Measure ?

These are some of the factors we use to calculate the overall score:

Rankiteo