Comparison Overview
K-12 by Elior

K-12 by Elior
6000 Town Center Blvd, Canonsburg, Pennsylvania 15317, US
Last Update: 05/05/2026
Providing great meals to students and being a trusted member of our partner communities will always be our commitment, and the K-12 by Elior team is evolving every day so we can do that even BETTER. We’re rolling up our sleeves to search for new ingredients and exciting...

Coca-Cola HBC
Turmstrasse 30, Zug, 6300, CH
Last Update: 20/05/2026
We bottle and sell the beverages of The Coca-Cola Company exclusively in our 29 markets and partner with other beverage businesses to also sell their brands. With over 100 brands covering eight categories – sparkling, water, juices, ready-to-drink tea, energy, plant-bas...
Compliance Ranges Comparison

K-12 by Elior







Coca-Cola HBC






Benchmark & Cyber Underwriting Signals
Incidents vs Food and Beverage Services Industry Avg (This Year)
No incidents recorded for K-12 by Elior in 2026.
Incidents vs Food and Beverage Services Industry Avg (This Year)
No incidents recorded for Coca-Cola HBC in 2026.
Incident History - K-12 by Elior (X = Date, Y = Severity)
K-12 by Elior cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Coca-Cola HBC (X = Date, Y = Severity)
Coca-Cola HBC cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

K-12 by Elior

Coca-Cola HBC
FAQ
Latest Global CVEs
An authenticated user with the read role may read limited amounts of uninitialized stack memory via specially-crafted issuances of the filemd5 command
The $_internalApplyOplogUpdate aggregation pipeline stage can be used to execute a document diff containing a malformed binary diff to return memory out-of-bounds or crash the server. $_internalApplyOplogUpdate can be executed by any authenticated user with access to the aggregate command.
An authorized user could trigger a server crash by running a query with a 2dsphere index on a field that stores a GeoJSON GeometryCollection containing a Polygon with a strict-winding CRS. Strict-winding polygons are intentionally unsupported for indexing, but the guard that rejects them does not inspect members of a GeometryCollection, allowing the unsafe path to be reached which ends with an ensuing null-pointer dereference.
The ldapQueryPassword parameter, when set through the runtime setParameter command, will log the new password to the mongod.log file in plain text.
An authenticated user can cause a MongoDB server to crash or return incorrect results by creating documents that interfere with internal metadata processing during query execution. This stems from insufficient separation between user-controlled document fields and internal metadata in certain execution paths.