What is the official website of Jaguar ?

The official website of Jaguar is https://www.jaguar.com/copy-nothing.

What is Jaguar's cybersecurity risk score?

Jaguar has an AI-generated cybersecurity risk score of 583 out of 1000, indicating a Very Poor security posture according to Rankiteo's assessment.

How many security incidents has Jaguar experienced?

According to Rankiteo, Jaguar currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Jaguar been affected by any supply chain cyber incidents ?

According to Rankiteo, Jaguar has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Oracle (Incident ID: ADIHEAHARMARTHEJAG1767017696) CARIAD (Incident ID: NISSCATOYVOLKAWAVIJAG1775680268) JLR (Incident ID: JAG0132201110725) Renault Group (Incident ID: REN2632226100625) SAP (Incident ID: SAPJAG1773959105) Collins Aerospace (Incident ID: BRU0093500092025) Jaguar (Incident ID: JAG1593115111725) Oracle (Incident ID: JAG2592025111525) Salesforce (Incident ID: THEINGSALJAGORASYNDAV1769095448)

Does Jaguar have SOC 2 Type 1 certification ?

According to Rankiteo, Jaguar is not certified under SOC 2 Type 1.

Does Jaguar have SOC 2 Type 2 certification ?

According to Rankiteo, Jaguar does not hold a SOC 2 Type 2 certification.

Does Jaguar comply with GDPR ?

According to Rankiteo, Jaguar is not listed as GDPR compliant.

Does Jaguar have PCI DSS certification ?

According to Rankiteo, Jaguar does not currently maintain PCI DSS compliance.

Does Jaguar comply with HIPAA ?

According to Rankiteo, Jaguar is not compliant with HIPAA regulations.

Does Jaguar have ISO 27001 certification ?

According to Rankiteo,Jaguar is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Jaguar operate in ?

Jaguar operates primarily in the Motor Vehicle Manufacturing industry.

How many employees does Jaguar have ?

Jaguar employs approximately None employees people worldwide.

Does Jaguar own any subsidiaries ?

Jaguar presently has no subsidiaries across any sectors.

How many LinkedIn followers does Jaguar have ?

Jaguar's official LinkedIn profile has approximately 115,003 followers.

What is the NAICS classification code for Jaguar ?

Jaguar is classified under the NAICS code 3361, which corresponds to Motor Vehicle Manufacturing.

Does Jaguar have a Crunchbase profile ?

No, Jaguar does not have a profile on Crunchbase.

Does Jaguar have a LinkedIn profile ?

Yes, Jaguar maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/jaguar.

How many cybersecurity incidents has Jaguar experienced ?

As of June 23, 2026, Rankiteo reports that Jaguar has experienced 34 cybersecurity incidents.

How many peer or competitor companies does Jaguar have ?

Jaguar has an estimated 12,983 peer or competitor companies worldwide.

What types of cybersecurity incidents has Jaguar faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware, Breach and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Jaguar

Boost Score +25 with badge (5 left)

583

/1000

Very Poor

608

/1000

Poor

Jaguar Vendor Cyber Rating & Cyber Score

jaguar.com

Add Your Compliance Badge

Copy nothing.

Jaguar A.I CyberSecurity Scoring

Scoring History

Jaguar

Jaguar CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

JLR

Cyber Attack

1/2026

AFLJAGNUC176838...

Jaguar

Cyber Attack

12/2025

Oracle

ADIHEAHARMARTHE...

JLR

Cyber Attack

100

11/2025

JAG1770374528

JLR North America

Ransomware

100

11/2025

CARIAD

NISSCATOYVOLKAW...

JLR

Cyber Attack

100

11/2025

JLR

JAG013220111072...

Jaguar

Cyber Attack

100

10/2025

JAG293282910242...

Jaguar

Cyber Attack

100

10/2025

MARCO-JAG177115...

JLR

Cyber Attack

10/2025

Renault Group

REN263222610062...

JLR

Cyber Attack

100

9/2025

SAP

SAPJAG177395910...

JLR

Cyber Attack

100

9/2025

Collins Aerospa...

BRU009350009202...

Jaguar

Cyber Attack

100

9/2025

Jaguar

JAG159311511172...

Jaguar

Cyber Attack

100

8/2025

JAG593205909272...

Jaguar

Ransomware

100

8/2025

JAG376253709302...

Jaguar

Cyber Attack

100

7/2025

Oracle

JAG259202511152...

Jaguar

Cyber Attack

100

6/2025

JAG319203110062...

JLR

Cyber Attack

4/2025

THEJAGMAR177757...

JLR

Cyber Attack

100

4/2025

JAG1775032266

JLR

Cyber Attack

100

3/2025

HASJAG177506088...

Jaguar

Ransomware

100

1/2025

MARASAJAG177133...

JLR

Ransomware

100

1/2025

JAG1776704080

JLR

Ransomware

100

1/2025

Salesforce

THEINGSALJAGORA...

Jaguar

Cyber Attack

100

10/2024

JAG293232909252...

Jaguar

Cyber Attack

100

9/2024

JAG123221209292...

JLR

Cyber Attack

8/2024

THELONJAG177281...

Jaguar

Cyber Attack

100

8/2024

JAG413204110232...

Jaguar

Ransomware

100

6/2024

JAG249212411172...

Jaguar

Cyber Attack

100

3/2024

JAG013290110072...

Jaguar

Cyber Attack

100

9/2023

JAG563205609292...

Jaguar

Cyber Attack

100

8/2023

JAG006210010232...

Jaguar

Ransomware

100

6/2023

JAG260202610242...

Jaguar

Cyber Attack

100

4/2023

JAG009270011182...

Jaguar

Breach

100

05/2018

JAG19424722

Jaguar

Ransomware

100

6/2017

JAG443264411112...

Jaguar

Cyber Attack

100

6/2015

JAG210202110082...

Loading…

A.I.

Jaguar Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Jaguar

Incidents vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Jaguar in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Jaguar in 2026.

Incident Types Jaguar vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Jaguar in 2026.

Incident History - Jaguar (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Jaguar Subsidiaries

Jaguar

Motor Vehicle Manufacturing

Website: https://www.jaguar.com/copy-nothing

Company Size: 10,001+ employees

JLRMotor Vehicle Manufacturing

JLR North AmericaMotor Vehicle Manufacturing

Jaguar Land Rover BrasilMotor Vehicle Manufacturing

Land Rover DiscoveryMotor Vehicle Manufacturing

Jaguar Land Rover Retail CareersAutomotive

捷豹路虎中国 Jaguar Land Rover ChinaMotor Vehicle Manufacturing

Loading…

Jaguar Similar Companies

Motherson Group

motherson.com

Motherson is a diversified global design, engineering, manufacturing and assembly (DEMA) specialist, delivering full-system solutions to customers across a wide range of industries. With a robust network of 425 state-of-the-art facilities across 44 countries, and a dedicated workforce of more than 200,000 professionals, Motherson is continually working toward its vision of being a globally preferred sustainable solutions provider for its stakeholders. The group recorded revenues of USD 21.2 billion in 2024-25 and is ranked among the top 15 automotive suppliers worldwide. As a trusted partner to OEM customers, Motherson offers an extensive, versatile product portfolio spanning the entire spectrum of the mobility industry. This includes passenger and commercial vehicles, two- and three-wheelers, rolling stock, off-highway vehicles, earthmoving, material-handling and agricultural machinery. Its product range encompasses electrical distribution systems, fully assembled vehicle interior and exterior modules, rear vision systems, moulded plastic parts and assemblies, injection moulding tools, rubber components, lighting systems, and machined metal products. Beyond the automotive sector, Motherson has strategically diversified into industries such as health and medical, aerospace, consumer electronics, logistics, and industrial IT solutions. This expansion reflects the group’s adaptability and unwavering commitment to meeting its customers' evolving needs. Motherson believes its employees are its partners in progress, its biggest asset. The organisation nurtures an environment where employees thrive as dynamic professionals and individuals. The organisation is responsive to its employees' professional aspirations and provides a range of growth opportunities, enabling them to advance professionally and to take on strategic roles within the organisation.

Iveco Group

cb ivecogroup.com

Iveco Group N.V. (MI: IVG) is the home of unique people and brands that power your business and mission to advance a more sustainable society. The seven brands are each a major force in its specific business: IVECO, a pioneering commercial vehicles brand that designs, manufactures, and markets heavy, medium, and light-duty trucks; FPT Industrial, a global leader in a vast array of advanced powertrain technologies in the agriculture, construction, marine, power generation, and commercial vehicles sectors; IVECO BUS and HEULIEZ, mass-transit and premium bus and coach brands; IDV, for highly specialised defence and civil protection equipment; ASTRA, a leader in large-scale heavy-duty quarry and construction vehicles; and IVECO CAPITAL, the financing arm which supports them all. At 31st December 2023, Iveco Group employed more than 36,000 people around the world and had 20 industrial sites and 31 R&D centres.

Harley-Davidson Motor Company

harley-davidson.com

In 1903, out of a small shed in Milwaukee, Wisconsin, four young men lit a cultural wildfire that would grow and spread across geographies and generations. Their innovation and imagination for what was possible on two wheels sparked a transportation revolution and lifestyle that would make Harley-Davidson the most desirable motorcycle brand in the world. • Our Mission: More than building machines, we stand for the timeless pursuit of adventure. Freedom for the soul. • Our Vision: Building our legend and leading our industry through innovation, evolution and emotion. Our Mission and Vision honor our past and help define our future. And what we hope you see in these guiding statements is a consumer-led company that’s driven to win, lead and deliver a Harley-Davidson experience that our riders expect and deserve – one where adventure and “freedom for the soul” are the payoff. To do this, we are redefining our culture to reignite the company’s soul and spirit. We are calling our cultural journey “H-D#1” represented by our recognizable #1 logo, introduced in 1969 to celebrate a National Racing Championship. The #1 logo is uniquely ours - an iconic symbol of winning and the hard work it takes to get there. The Hardwire is Harley-Davidson’s 2021-2025 strategic plan guided by our mission and vision. Our plan is targeting long-term profitable growth through focused efforts that extend and strengthen our brand and drive value for all stakeholders. The Hardwire is designed to enhance the desirability of Harley-Davidson and fuel our unique lifestyle brand. For more information, visit our company site: www.harley-davidson.com or our career site: jobs.harley-davidson.com

Freudenberg Group

freudenberg.com

Freudenberg is a global technology group that strengthens its customers and society long-term through forward-looking innovations. Together with its partners, customers and research institutions, the Freudenberg Group develops leading-edge technologies and excellent products and services for about 40 markets and for thousands of applications: seals, vibration control components, technical textiles, filters, specialty chemicals, medical products and the most modern cleaning products. Strength of innovation, strong customer orientation, diversity, and team spirit are the cornerstones of the Group. The 175-year-old company holds strong to its core values: a commitment to excellence, reliability and pro-active, responsible action. In 2024, the Freudenberg Group employed more than 52,000 people in some 60 countries worldwide and generated sales of more than €11.95 billion. Learn more about us and visit our digital home at freudenberg.com and read the stories that make us Freudenberg. Visit and follow us at www.freudenberg.com https://www.instagram.com/freudenberg.group/ www.youtube.com/FreudenbergGroup *** Netiquette *** We look forward to receiving your comments and posts. On behalf of all users, we ask for constructive contributions, mutual respect, courtesy and tolerance. All contributions will be checked and we reserve the right to delete contributions. This applies in particular to unlawful content, incorrect statements, advertising for third parties, spam or slander. In addition, we reserve the right to remove comments that are otherwise inappropriate or incorrect. Contributions made by external users do not necessarily reflect Freudenberg’s opinion. Please find our data protect information here: https://www.freudenberg.com/fileadmin/downloads/english/Freudenberg_Social-Media-Data-Protection-Information.pdf Legal Notice: https://www.freudenberg.com/legal-notice

Mercedes-Benz USA

mbusa.com

Mercedes-Benz USA, LLC (MBUSA), a Daimler Company, is responsible for the Distribution and Marketing of Mercedes-Benz and smart products in the United States. MBUSA was founded in 1965 and prior to that Mercedes-Benz cars were sold in the United States by Mercedes-Benz Car Sales, Inc., a subsidiary of the Studebaker-Packard corporation. Today MBUSA has over 300 dealerships with more than 1400 employees. For employment opportunities please visit: http://bit.ly/2tFzlOV. For information on how to get the most out of your Mercedes-Benz vehicle, visit the Owners' Support instructional videos section of our site: http://www.mbusa.com/mercedes/owners/videos

TVS Motor Company

tvsmotor.com

TVS Motor Company is a reputed two and three-wheeler manufacturer globally, championing progress through Mobility with a focus on sustainability. Rooted in our 100-year legacy of Trust, Value, and Passion for Customers and Exactness, we take pride in making internationally aspirational products of the highest quality through innovative and sustainable processes. The Company was started in 1979 as the flagship brand of TVS Group, which was founded by T.V. Sundaram lyengar. Under the persistence and diligent leadership of the Chairman Emeritus, Venu Srinivasan, the company has become the largest member of the TVS Group in terms of size and turnover. Prof Sir Ralf Dieter Speth, Chairman, TVS Motor Company and Sudarshan Venu, Managing Director, TVS Motor Company are forging a bright path for the future of the company. Today, TVS Motor is present in 80+ countries and has over 50million happy customers in India. The Company also has strong socially responsible focus and supports the Srinivasan Services Trust to carry out numerous sustainable initiatives to positively contribute to the lives of communities across regions. TVS Motor has four state-of-the-art manufacturing facilities at Hosur in Tamil Nadu, Mysore in Karnataka, Nalagarh in Himachal Pradesh and Karawang in Indonesia and is the first two-wheeler manufacturer in the world to be conferred with the prestigious Deming Prize for excellence in quality. Our products lead in their respective categories in the J.D. Power IQS and APEAL surveys for five years. We have been ranked No. 1 Company in the J.D. Power Customer Service Satisfaction Survey for consecutive four years. Our group company, Norton Motorcycles, based in the United Kingdom, is one of the most emotive motorcycle brands in the world. Our subsidiaries in the personal e-mobility space, Swiss E-Mobility Group (SEMG) and EGO Movement have a leading position in the e-bike market in Switzerland.

Li Auto

liauto.com

Li Auto Inc. is a leader in China's new energy vehicle market. The Company designs, develops, manufactures, and sells premium smart electric vehicles. Its mission is: Create a Mobile Home, Create Happiness (创造移动的家,创造幸福的家). Through innovations in product, technology, and business model, the Company provides families with safe, convenient, and comfortable products and services. Li Auto is a pioneer in successfully commercializing extended-range electric vehicles in China. While firmly advancing along this technological route, it builds platforms for battery electric vehicles in parallel. The Company leverages technology to create value for users. It concentrates its in-house development efforts on proprietary range extension systems, innovative electric vehicle technologies, and smart vehicle solutions. The Company started volume production in November 2019. Its current model lineup includes Li MEGA, a high-tech flagship family MPV, Li L9, a six-seat flagship family SUV, Li L8, a six-seat premium family SUV, Li L7, a five-seat flagship family SUV, and Li L6, a five-seat premium family SUV. The Company will continue to expand its product lineup to target a broader user base.

Magna International

magna.com

We see a future where everyone can live and move without limitations. That’s why we are developing technologies, systems and concepts that make vehicles safer and cleaner, while serving our communities, the planet and, above all, people. Forward. For all. Our common shares trade on the Toronto Stock Exchange (MG) and the New York Stock Exchange (MGA). For further information about Magna, visit www.magna.com.

Porsche AG

porsche.click

“In the beginning I looked around and could not find quite the car I dreamed of. So I decided to build it myself.“ This quote by Ferry Porsche sums up everything that makes Porsche what it is. It has been our guiding star for more than 75 years. Every day, we search for the best solution with commitment, passion and enthusiasm. We courageously tread new and untested paths. Our entrepreneurial pioneering spirit makes unique solutions possible. We love challenges, act quickly and always act respectfully and fairly towards people and the environment. Driven by dreams: At Porsche we believe in the power of dreams. As different as they may be, they have one thing in common: they are what drive us. If you too want to dream and change the world, then you have come to the right place. We invite you to dream with us and together make the world more innovative, more sustainable and more colourful. What could that be like? On our website www.porsche.com/careers you can gain an insight into the Porsche working environment and experience first-hand what makes working at Porsche so fascinating. Make your own dream come true. And the dreams of millions of others. This is where you will find all our job offers based on your preferences. Take your chance and apply online: jobs.porsche.com News, background stories and more about Porsche: www.newsroom.porsche.com Legal notice: http://www.porsche.com/germany/legal-notice/ Social privacy: https://www.porsche.com/germany/social-privacy/

Loading…

NEWS

Jaguar CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 12, 2026 08:00 AM

The Jaguar Land Rover Moment that Exposed Industrial Recovery

It was not a failure of awareness or tooling, but how uncertain recovery becomes in industrial environments.

Read Article

January 29, 2026 08:00 AM

Manufacturers fortify cyber defenses in response to dramatic surge in attacks

IT/OT convergence and other trends are making the manufacturing industry's networks more vulnerable and more frequently targeted, but sector...

Read Article

January 06, 2026 08:00 AM

Jaguar Land Rover reports fiscal Q3 sales slump following cyberattack

Jaguar Land Rover on Monday reported a slump in fiscal third quarter sales as the automaker recovered from a massive cyberattack that disrupted...

Read Article

December 19, 2025 08:00 AM

Tata Consultancy Services (TCS) takes proactive Cybersecurity measures After Cyber Attack on Jaguar Land Rover

Tata Consultancy Services (TCS) takes proactive Cybersecurity measures After Cyber Attack on Jaguar Land Rover ... Tata Consultancy Services (TCS)...

Read Article

December 16, 2025 08:00 AM

Jaguar Land Rover Data Breach Exposes Employee Information After August Cyberattack

Jaguar Land Rover (JLR), the iconic British luxury automaker, has finally disclosed that an August cyberattack compromised sensitive data of...

Read Article

December 15, 2025 08:00 AM

Jaguar Land Rover Confirms Employee Data Stolen in August Cyberattack

Jaguar Land Rover (JLR), the iconic British luxury automaker, has finally disclosed that a cyberattack in August compromised sensitive data...

Read Article

December 02, 2025 08:00 AM

Are the costs of defending cybersecurity starting to outweigh the risks?

Empty shelves in Marks & Spencer. Jaguar Land Rover plants idling as suppliers warn they could go out of business. And perhaps most starkly...

Read Article

November 17, 2025 08:00 AM

Jaguar Land Rover reports major earnings impact from cyberattack

The company reported a loss of $638 million (485 million pounds) before taxes and exceptional items. JLR reported $313 million (238 million...

Read Article

October 29, 2025 07:00 AM

Jaguar Land Rover’s cyberattack holds an ominous lesson for British businesses

Jaguar Land Rover is thought to have been victim to the most economically damaging cyberattack in British history. Edward Lewis of the Cyber...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-54236

SUMMARY

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, the fix for CVE-2026-22778, which introduced a sanitize_message helper that strips object-repr memory addresses from error messages before they reach the client, is incomplete: several response paths echo str(exc) directly to clients without calling sanitize_message. The unsanitized sites include the Anthropic API router in vllm/entrypoints/anthropic/api_router.py (the POST /v1/messages and POST /v1/messages/count_tokens handlers), the Server-Sent Events streaming converter in vllm/entrypoints/anthropic/serving.py, and the realtime speech-to-text WebSocket in vllm/entrypoints/speech_to_text/realtime/connection.py. These paths catch the exception inside the route coroutine and construct the JSONResponse themselves, bypassing the sanitizing global FastAPI exception handler, and WebSocket frames do not traverse that handler chain at all. Using the same primitive as the parent issue, an unauthenticated attacker can send malformed image bytes through the Anthropic Messages API image content parts so that PIL.Image.open raises an UnidentifiedImageError whose message contains the BytesIO object repr, leaking the heap memory address verbatim in the error.message field of the response body. This vulnerability is fixed in 0.23.1rc0.

Published

Date2026-06-22

Updated

Date2026-06-22

RISK INFORMATION (Score: 5.3)

cvss3

Base Score: 5.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Impact Score

1.4

Exploitability

3.9

REFERENCES

CVE-2026-54235

SUMMARY

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, ll temperature validation gates use comparison operators (<, >), which silently evaluate to False for NaN and for positive Infinity in Python's IEEE 754 float semantics. Both values pass every guard and propagate to GPU sampling kernels, where they produce undefined behavior or CUDA errors that can crash the inference worker. This vulnerability is fixed in 0.23.1rc0.

Published

Date2026-06-22

Updated

Date2026-06-22

RISK INFORMATION (Score: )

cvss4

Base Score: 6.9

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:L/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-54233

SUMMARY

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.23.1rc0, vLLM's /v1/audio/transcriptions endpoint limits compressed upload size but not decoded PCM output. A 25MB OPUS file expands to ~14.9GB of float32 PCM at decode time. This vulnerability is fixed in 0.23.1rc0.

Published

Date2026-06-22

Updated

Date2026-06-22

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-54232

SUMMARY

vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.1, the vLLM Dockerfile is vulnerable to a dependency confusion attack through the flashinfer-jit-cache package. The package is installed from a custom index (flashinfer.ai/whl/) using --extra-index-url, but the package name was not registered on PyPI, and UV_INDEX_STRATEGY="unsafe-best-match" is set globally. An attacker who registers flashinfer-jit-cache on PyPI with version 0.6.11.post2 can execute arbitrary code as root during the Docker build and backdoor every resulting container image, enabling exfiltration of all user prompts, API credentials, and model data from production vLLM deployments This vulnerability is fixed in 0.22.1.

Published

Date2026-06-22

Updated

Date2026-06-22

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

2.8

REFERENCES

https://github.com/vllm-project/vllm/security/advisories/GHSA-jrf6-vqxq-pjv2

CVE-2026-53923

SUMMARY

vLLM is an inference and serving engine for large language models (LLMs). From 0.5.5 until 0.23.1rc0, integer truncation of tensor dimensions in vLLM's GGUF dequantize kernels (csrc/quantization/gguf/gguf_kernel.cu) causes partial tensor processing. The output tensor is allocated at full size via torch::empty (uninitialized memory), but the dequantize CUDA kernel processes only a truncated number of elements. The unfilled portion of the output tensor retains whatever was previously in GPU memory. In multi-tenant inference deployments, this residual GPU memory may contain tensor data from other users' inference requests, constituting information disclosure. This vulnerability is fixed in 0.23.1rc0.

Published

Date2026-06-22

Updated

Date2026-06-22

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:P/VC:L/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…