What is the official website of Kreissparkasse Saarpfalz ?

The official website of Kreissparkasse Saarpfalz is http://www.ksk-saarpfalz.de.

What is Kreissparkasse Saarpfalz's cybersecurity risk score?

Kreissparkasse Saarpfalz has an AI-generated cybersecurity risk score of 754 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Kreissparkasse Saarpfalz experienced?

According to Rankiteo, Kreissparkasse Saarpfalz currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Kreissparkasse Saarpfalz been affected by any supply chain cyber incidents ?

According to Rankiteo, Kreissparkasse Saarpfalz has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Kreissparkasse Saarpfalz have SOC 2 Type 1 certification ?

According to Rankiteo, Kreissparkasse Saarpfalz is not certified under SOC 2 Type 1.

Does Kreissparkasse Saarpfalz have SOC 2 Type 2 certification ?

According to Rankiteo, Kreissparkasse Saarpfalz does not hold a SOC 2 Type 2 certification.

Does Kreissparkasse Saarpfalz comply with GDPR ?

According to Rankiteo, Kreissparkasse Saarpfalz is not listed as GDPR compliant.

Does Kreissparkasse Saarpfalz have PCI DSS certification ?

According to Rankiteo, Kreissparkasse Saarpfalz does not currently maintain PCI DSS compliance.

Does Kreissparkasse Saarpfalz comply with HIPAA ?

According to Rankiteo, Kreissparkasse Saarpfalz is not compliant with HIPAA regulations.

Does Kreissparkasse Saarpfalz have ISO 27001 certification ?

According to Rankiteo,Kreissparkasse Saarpfalz is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Kreissparkasse Saarpfalz operate in ?

Kreissparkasse Saarpfalz operates primarily in the Banking industry.

How many employees does Kreissparkasse Saarpfalz have ?

Kreissparkasse Saarpfalz employs approximately 115 people worldwide.

Does Kreissparkasse Saarpfalz own any subsidiaries ?

Kreissparkasse Saarpfalz presently has no subsidiaries across any sectors.

How many LinkedIn followers does Kreissparkasse Saarpfalz have ?

Kreissparkasse Saarpfalz's official LinkedIn profile has approximately 1,534 followers.

What is the NAICS classification code for Kreissparkasse Saarpfalz ?

Kreissparkasse Saarpfalz is classified under the NAICS code 52211, which corresponds to Commercial Banking.

Does Kreissparkasse Saarpfalz have a Crunchbase profile ?

No, Kreissparkasse Saarpfalz does not have a profile on Crunchbase.

Does Kreissparkasse Saarpfalz have a LinkedIn profile ?

Yes, Kreissparkasse Saarpfalz maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ksksaarpfalz.

How many cybersecurity incidents has Kreissparkasse Saarpfalz experienced ?

As of August 3, 2026, Rankiteo reports that Kreissparkasse Saarpfalz has not experienced any cybersecurity incidents.

How many peer or competitor companies does Kreissparkasse Saarpfalz have ?

Kreissparkasse Saarpfalz has an estimated 7,449 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Kreissparkasse Saarpfalz

Boost Score +25 with badge (5 left)

754

/1000

Fair

779

/1000

Fair

Kreissparkasse Saarpfalz Vendor Cyber Rating & Cyber Score

ksk-saarpfalz.de

Add Your Compliance Badge

Wir gestalten Zukunft – gemeinsam! ❤️ Als größtes Kreditinstitut im Saarpfalz-Kreis tragen wir eine besondere Verantwortung – für die Menschen, die regionale Wirtschaft und die Zukunft unserer Heimat. 🤝 „Weil’s um mehr als Geld geht“ – und das leben wir Tag für Tag: ✅ Mehr für unsere Kundinnen & Kunden 👉 Nähe & Vertrauen 👉 Veranstaltungen zu aktuellen Themen 👉 Präsenz vor Ort & exklusive Angebote ✅ Mehr für unsere Region 👉 Engagement – auch in herausfordernden Zeiten 👉 Unterstützung von Kunst, Kultur & Sport ✅ Mehr für unser Team 👉 Sicherer Arbeitsplatz & flexible Arbeitsmodelle 👉 Mobiles Arbeiten & attraktive Mitarbeiterevents Wir gestalten Zukunft – gemeinsam! ❤️

Kreissparkasse Saarpfalz A.I CyberSecurity Scoring

Scoring History

Kreissparkasse Saarpfalz

Kreissparkasse Saarpfalz CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Kreissparkasse Saarpfalz Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Kreissparkasse Saarpfalz

Incidents vs Banking Industry Avg (This Year)

No incidents recorded for Kreissparkasse Saarpfalz in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Kreissparkasse Saarpfalz in 2026.

Incident Types Kreissparkasse Saarpfalz vs Banking Industry Avg (This Year)

No incidents recorded for Kreissparkasse Saarpfalz in 2026.

Incident History - Kreissparkasse Saarpfalz (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Kreissparkasse Saarpfalz Subsidiaries

Kreissparkasse Saarpfalz

Banking

Website: http://www.ksk-saarpfalz.de

Company Size: 115

SparkasseFinancial Services

S-Communication Services GmbHTechnology, Information and Internet

Sparkasse Schwaben-BodenseeFinancial Services

Sparkasse KarlsruheBanking

Sparkasse Rhein Neckar NordBanking

Sparkasse Pforzheim CalwFinancial Services

Die Sparkasse Bremen AGFinancial Services

Rheinhessen SparkasseFinancial Services

Stadtsparkasse MönchengladbachFinancial Services

Nassauische SparkasseBanking

Landessparkasse zu OldenburgBanking

Sparkasse SüdholsteinBanking

Mittelbrandenburgische SparkasseFinancial Services

Sparkasse Langen-SeligenstadtFinancial Services

Kreissparkasse BiberachBanking

studio rot BiberachTechnology, Information and Internet

Sparkasse HochschwarzwaldFinancial Services

Sparkasse SiegenBanking

Sparkasse RegensburgFinancial Services

Kreissparkasse ReutlingenBanking

Sparkasse Hellweg-LippeFinancial Services

Sparkasse WestholsteinBanking

Sparkasse FürthBanking

Kreissparkasse Halle-WiedenbrückBanking

Kreissparkasse RavensburgBanking

Kreissparkasse Herzogtum LauenburgBanking

SGVSH - Sparkassen- und Giroverband für Schleswig-HolsteinBanking

Sparkasse ZollernalbBanking

Sparkasse Neumarkt-ParsbergBanking

Sparkasse FürstenfeldbruckBanking

Sparkasse ForchheimBanking

Sparkasse BochumBanking

Sparkasse BambergBanking

Sparkasse LemgoBanking

Sparkasse am NiederrheinBanking

Stadtsparkasse RemscheidBanking

Sparkasse BodenseeBanking

Sparkasse Hildesheim Goslar PeineFinancial Services

Sparkassenverband Rheinland-PfalzBanking

Sparkasse Mittelmosel - Eifel Mosel HunsrückFinancial Services

Kreissparkasse Traunstein-TrostbergFinancial Services

Kreissparkasse WalsrodeFinancial Services

Sparkasse Coburg - LichtenfelsBanking

Sparkasse Erding - DorfenFinancial Services

Sparkasse Bad Hersfeld - RotenburgBanking

Sparkasse EmdenFinancial Services

Sparkasse VogtlandFinancial Services

Sparkasse UckermarkFinancial Services

Kreissparkasse BautzenBanking

Sparkasse im Landkreis Neustadt a. d. Aisch - Bad WindsheimBanking

Sparkasse Hameln-WeserberglandBanking

Stadtsparkasse WedelFinancial Services

Sparkasse Arnsberg-SundernBanking

Stadtsparkasse CuxhavenBanking

Sparkasse im Landkreis ChamFinancial Services

Sparkasse Engen-GottmadingenBanking

Sparkasse HattingenBanking

Sparkasse HochsauerlandBanking

Vereinigte Sparkassen GunzenhausenBanking

Sparkasse Bad Neustadt a. d. SaaleBanking

Hohenzollerische Landesbank Kreissparkasse SigmaringenFinancial Services

Sparkasse Kierspe-MeinerzhagenBanking

Bezirkssparkasse ReichenauFinancial Services

Loading…

Kreissparkasse Saarpfalz Similar Companies

Crédit Mutuel

creditmutuel.com

Un modèle mutualiste au service des clients et des salariés. Réseau bancaire mutualiste constitué de 2124 Caisses locales le Crédit Mutuel se compose de 18 fédérations régionales, couvrant tout le territoire français. Société de personnes et non de capitaux, le Crédit Mutuel n’est pas coté en Bourse. Sa stratégie est ainsi dégagée de la recherche de la seule rentabilité à court terme, au profit d’un développement pensé sur le long terme. Son objectif central : rendre un service de qualité au coût le plus juste à tous ses sociétaires. Son organisation décentralisée favorise ainsi la qualité de service aux clients et la réactivité, par des circuits de décision courts. Reconnu à la fois par ses clients et les professionnels de la finance, le Crédit Mutuel décroche régulièrement des titres qui confortent son modèle mutualiste et ses valeurs de solidarité, responsabilité, égalité, proximité et responsabilité sociale portées par les salariés et les clients- sociétaires. Au-delà de son réseau, le Crédit Mutuel constitue un Groupe qui comprend également plusieurs filiales dont certaines sont implantées à l’étranger. Les nouveaux collaborateurs du Crédit Mutuel apprécient tout particulièrement : - un circuit de recrutement court, axé sur des entretiens évaluant notamment la personnalité et la motivation ; - un parcours d’intégration précis, suivi par la fonction Ressources Humaines. Les salariés apprécient tout particulièrement : - le Système d’Information au service du développement commercial ; - un management au travers d’objectifs collectifs ; - des démarches et outils de gestion des carrières et des compétences facilitant la progression dans l’entreprise ; - la qualité des formations de préparation ou d’accompagnement des changements d’emploi ; - la diversité des opportunités d’évolution, principalement commerciale, sur tous les marchés, dans toutes les entités du Groupe.

QNB Türkiye

qnb.com.tr

Finansbank A.Ş. 26 Ekim 1987 tarihinde iş insanı Hüsnü Özyeğin liderliğinde 100 ortakla Bankalar Kanunu ve Türk Ticaret Kanunu hükümleri uyarınca kuruldu. Sektörde hızlı büyeme ile ilk 5 büyük özel banka arasına giren QNB Finansbank, 2006 yılında Yunanistan'ın en büyük bankası National Bank of Greece (NBG) tarafından satın alındı. Bu birleşme sonucunda NBG'nin Güneydoğu Avrupa'da sahip olduğu lider konumu ile bankanın Türkiye'deki yüksek büyüme potansiyeli bir araya geldi. 2006 yılından itibaren bireysel bankacılıkta da hızla büyüyen Finansbank; kredi kartı, dijitalleşme, teknoloji alanındaki yatırımları ve yarattığı çözümleri ile sektörde ilklere imza atan banka konumuna geldi. Ekim 2012'de tüm hizmetlerini sadece dijital kanallar üzerinden sunan ve Türkiye'nin ilk şubesiz dijital bankası olan Enpara.com'u kuran Finansbank, bu alanda Türkiye'de sektörde yeni bir dönemin kapılarını açtı. 2016 yılının haziran ayında Orta Doğu ve Afrika bölgesinin lider finansal kuruluşu olan Katar'ın en büyük bankası Qatar National Bank S.A.Q (QNB Group) tarafından satın alınan QNB Finansbank, uluslararası bir yapının parçası haline geldi. Böylelikle bankanın yeni ismi Ekim 2016 itibarıyla QNB Finansbank oldu. QNB Group'un, global bir marka olma vizyonu doğrultusunda ismini 2024 yılının Ekim ayı itibarıyla QNB Türkiye olarak yeniledi. QNB Türkiye, kurum kültürünü geleceğe taşıyan dinamik ve yenilikçi bir yapıya sahip. "Önce İnsan'' anlayışıyla çalışanların gelişimine öncelik veren banka, "Güven'' ile güçlü bir iş birliği ortamı kuruyor. Bankanın değerleri arasında yer alan "Adaptasyon'' ile değişimlere hızla uyum sağlarken, "Öncü Olmak'' vizyonuyla sektörde fark yaratıyor, "Birlikte Gelişim'' ilkesiyle de başarıya hep birlikte ulaşıyor. QNB Türkiye, çatısı altındaki iştirakleri QNB Leasing, QNB Invest, QNB Portföy, QNB Faktoring, QNB Sağlık, IBTech ve QNB eSolutions ile müşterilerinin tüm finansal ihtiyaçlarına yaratıcı, hızlı ve kolay çözümler sunmaya devam ediyor.

Türkiye İş Bankası

cb isbank.com.tr

In the nearly 100 years since its founding by the Great Leader Mustafa Kemal Atatürk on August 26, 1924, İşbank has undertaken various roles and made significant contributions to the development of our country in many fields, especially in industry and trade. İşbank offers products and services to its customers in corporate, commercial, SME, retail and private banking areas with its around 22 thousand employees, nearly 1,200 domestic branches and approximately 6,400 ATMs by the end of 2021, together with its advanced digital banking channels. İşbank also operates abroad with its branches abroad located in the Turkish Republic of Northern Cyprus, England, Kosovo, Iraq and Bahrain; 100% owned subsidiaries in Germany, Russia and Georgia; and with its representative offices in China and Egypt. The Bank is the largest private bank in Turkey in terms of total assets, loans, deposits and shareholders’equity; number of branches and ATMs. The largest share of the Bank's capital is held by the İşbank Pension Fund, which was founded by its employees. İşbank, an organization synonymous with trust, consistency and dignity, works for an inclusive and environment-friendly economy with its sense of responsibility stemming from its history. For further deteails, you can visit https://www.isbank.com.tr/en/about-us page.

Security Bank Corporation

cb securitybank.com

Security Bank is one of the Philippines’ best-capitalized private domestic universal banks. Established in 1951 and publicly listed with the Philippine Stock Exchange (PSE: SECB) in 1995, our major businesses cover retail, corporate, commercial, and business (MSME) banking. We’re recognized as an Employer of Choice in Philippine banking by various award-giving bodies for our values-based culture, industry-leading engagement and benefits, and commitment to work-life balance. Most recently, we ranked #2 best employer in the Philippines and #54 globally on the prestigious Forbes’ World’s Best Employers 2023 list. At Security Bank, our approach to Human Capital Management (HCM) is embodied by our Employee Value Proposition (EVP): “YOU matter.” Start your BetterBankingcareer with us today. For the complete list of Security Bank's awards, you may visit: https://www.securitybank.com/about-us/awards/

CIMB Niaga

cimbniaga.co.id

CIMB Niaga was established as Bank Niaga in 1955. CIMB Group holds around 97.9% of the stakes in CIMB Niaga (including PT Commerce Kapital 1.02%). The Bank offers a comprehensive suite of both conventional and Islamic banking products and services, through an expanding delivery channel network of 919 network channels all over Indonesia as at 30 June 2015, including 563 branches, 271 Mikro Laju units (excluding 18 co-located), 65 cash/payment points (including 21 Digital Lounges) and 20 mobile branches. CIMB Niaga has 15,078 employees as at 30 June 2015. CIMB Niaga consistently continue to innovate in the midst of competitive market. CIMB Niaga put customer centric approach to strengthen its positioning in Indonesia banking industry. And for that reason, CIMB Niaga introduced the new brand positioning ‘Inovasi dari Hati’ at the beginning of the year 2015. The new brand positioning also encourages people to share high growth and take advantage of all the potential that the South-East Asia regions bring – in line with CIMB Group’s brand positioning: “ASEAN for You”. CIMB Group is Malaysia’s second largest financial services provider and one of ASEAN’s leading universal banking groups. It offers consumer banking, investment banking, Islamic banking, asset management and insurance products and services. Headquartered in Kuala Lumpur, the Group is now present in 9 out of 10 ASEAN nations (Malaysia, Indonesia, Thailand, Singapore, Cambodia, Brunei, Vietnam, Myanmar and Laos). Beyond ASEAN, the Group has market presence in China, Hong Kong, Bahrain, India, Sri Lanka, Taiwan, the US, UK and Korea. CIMB Group is listed on the Malaysian stock exchange via CIMB Group Holdings Berhad. As at 30 June 2015, the Group had a market capitalization of USD46.4 billion and about 44,000 employees located in 17 countries.

Capitec

capitecbank.co.za

Imagine simple, affordable banking solutions that work for you – just like it does for over 25 million South Africans. They’re banking smart, paying less and getting more value every day with us. As the country’s leading digital bank, we’re proud to have been voted the Coolest Bank by the youth in the 2024 Sunday Times GenNext Awards. With 880 branches and a team of over 16,900, we’re here to grow with you.

First Citizens Bank

cb firstcitizens.com

First Citizens Bank helps personal, business, commercial and wealth clients build financial strength that lasts. Headquartered in Raleigh, N.C., First Citizens has built a unique legacy of strength, stability and long-term thinking that has spanned generations. First Citizens offers an array of general banking services including a network of more than 500 branches and offices in 30 states; commercial banking expertise delivering best-in-class lending, leasing and other financial services coast to coast; innovation banking serving businesses at every stage; and a nationwide direct bank. Parent company First Citizens BancShares, Inc. (NASDAQ: FCNCA) is a top 20 U.S. financial institution with more than $200 billion in assets. Visit firstcitizens.com or call toll-free 1.888.FC DIRECT (1.888.323.4732). First Citizens Bank. Forever First®. Member FDIC. Equal Housing Lender. Social Media Terms of Use: https://www.firstcitizens.com/socialterms

BMO U.S.

bmo.com

We’re a bank, but there’s more to it than that. We're a top ten bank in North America and have been serving our customers since 1817. BMO provides personal and commercial banking, global markets and investment banking services to 13 million customers and clients.  And with over 54,000 employees, we take caring for our people seriously. When you join BMO, it opens a world of opportunities. This is a team that's committed to helping you succeed – personally and professionally. Because at BMO, when you grow, we grow. You know your worth and so do we. That’s why we offer the right mix of learning programs, on-the-job experiences, and opportunities to build personal and professional connections – so you can build a meaningful career and thrive as a part of a winning culture.   Sound like your kind of place? Then we should be co-workers.

Yapı Kredi

yapikredi.com.tr

Yapı Kredi has been sustainably strengthening its market positioning in the sector since its establishment in 1944 through a customer-centric approach and focus on innovation. Yapı Kredi is the 3rd largest private bank in Turkey with total assets worth TL 411 billion as of the end of 2019. Constantly seeking to increase its contribution to the financing of the Turkish economy with its customer-centric approach, Yapı Kredi enlarged the volume of its total cash and non-cash loans by 4% in 2019 to TL 319 billion. Thus, Yapı Kredi maintained its position in 2nd place among private banks in this respect. The Bank serves its customers with its 846 branches covering all regions of Turkey and 16,631 employees. Yapı Kredi delivers its products and services via its advanced Alternative Delivery Channels (ADCs) that comprise 4,330 ATMs, innovative internet banking, leading mobile banking, 3 call centers and approximately 709 thousand POS terminals. 94% of the Bank’s transactions went through non-branch channels as at year-end 2019. Yapı Kredi is a fully integrated financial services group supported by its domestic and international subsidiaries. Yapı Kredi serves its customers through retail banking (comprising of individual banking, Small and Medium Size Enterprises (SME) banking and card payment systems, private banking and wealth management), as well as corporate and commercial banking. The Bank’s operations are supported by domestic subsidiaries in asset management, brokerage, leasing and factoring as well as international banking subsidiaries in the Netherlands, Malta and Azerbaijan. Yapı Kredi has a strong shareholding structure which ensures sustainable and profitable growth. 40.95% of the Bank’s shares are owned by Koç Financial Services, 9.02% of the shares are owned by Koç Holding A.Ş. The total direct and indirect shares of Koç Group amount to 49.99%. 20.00% of Bank’s shares are owned by UniCredit S.P.A. The remaining 30.03% is publicly traded on Borsa Istanbul

Loading…

NEWS

Kreissparkasse Saarpfalz CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18577

SUMMARY

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-10848

SUMMARY

The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that copied the message's uid and action fields with strncpy(out_buf, token + 1, outlen - 1) and then scanned the result with strchr(out_buf, '"'). Because strncpy does not NUL-terminate the destination when the source is at least outlen - 1 (127) bytes long, the subsequent strchr reads past the 128-byte destination buffer into adjacent stack memory; if a " byte is found beyond the buffer, a one-byte out-of-bounds NUL write also occurs. A related defect in extract_payload() runs strchr/strrchr over the receive buffer, which may not be NUL-terminated when a maximal-length frame fills it. The parsed bytes come directly from the OCPP central-system server over a websocket: the reader thread fills recv_buf via websocket_recv_msg() and calls parse_rpc_msg() on each inbound DATA frame (subsys/net/lib/ocpp/ocpp.c). A malicious or compromised central server, or an on-path attacker (OCPP is commonly deployed over plain ws://), can send an RPC frame whose uid or action field is 127+ bytes with no closing quote, triggering the out-of-bounds access. The primary impact is a remotely triggerable denial of service: the unbounded scan can fault on an unmapped page, and the stray NUL write can corrupt adjacent stack state. The over-read data is not reflected to the peer, so disclosure is limited. The feature is EXPERIMENTAL and must be explicitly enabled (CONFIG_OCPP). The fix replaces the manual parser with the bounds-respecting json_mixed_arr_parse() and copies the extracted uid with an explicitly NUL-terminated buffer, eliminating both over-reads.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7)

cvss3

Base Score: 7.0

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Impact Score

4.7

Exploitability

2.2

REFERENCES

CVE-2026-9856

SUMMARY

A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where keys from the `chat_template` dictionary are used directly as filenames without proper validation. An attacker can exploit this by publishing a malicious Hugging Face Hub repository with a crafted `tokenizer_config.json` file. When a victim downloads and saves the tokenizer or processor, the attacker-controlled keys can escape the intended save directory, enabling arbitrary file writes with attacker-controlled content. This vulnerability affects multiple processors inheriting from `ProcessorMixin`, including Idefics, Florence, Gemma, Phi, and Qwen-VL.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-65321

SUMMARY

PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied input such as a single quote followed by SQL syntax causes the parser to terminate the string literal prematurely, enabling data exfiltration via UNION SELECT, execution of destructive statements, and attacker-controlled CTAS destination and content.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-10774

SUMMARY

Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private Beacon Key into a PSA key slot under CONFIG_BT_MESH_PRIV_BEACONS (enabled by default), but subnet_keys_destroy() guarded the matching psa_destroy_key() with CONFIG_BT_MESH_V1d1. That Kconfig symbol was removed when explicit Mesh 1.0.1 support was dropped, so the destroy branch became permanently dead code and the import is never balanced by a destroy. The imbalanced teardown is reached every time subnet keys are destroyed: deleting a subnet (Config Server NetKey Delete), completing a Key Refresh Procedure (which retires the old key set), and resetting/re-provisioning the node. The over-the-air triggers are processed only under the node's device key, so they are exercisable by the provisioner or network administrator that owns the node, reachable over the Bluetooth Mesh network. With the default CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT of 16, repeated add/delete or key-refresh cycles exhaust the shared PSA key-slot pool after roughly a dozen rounds. Once exhausted, bt_mesh_private_beacon_key() and thus subnet creation fail: the node can no longer add subnets or complete key refresh, and other PSA crypto consumers on the device may be starved, until the device is rebooted. The fix aligns the destroy guard with the import guard (CONFIG_BT_MESH_PRIV_BEACONS) so each slot is freed.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 2.4)

cvss3

Base Score: 2.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

0.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…