Comparison Overview
Vision Financial Group

Vision Financial Group
300 Corporate Parkway, Suite 216N, Amherst, NY, 14226, US
Last Update: 20/01/2026
At Vision Financial Group, we listen to you and strive to understand you and your family, your business and your dreams for the future. We can help you achieve your long-term financial goals by sharing our wisdom, advice and guidance. We currently serve over thousands ...

Fannie Mae
1100 15th St NW, Washington, District of Columbia, US, 20005
Last Update: 19/06/2026
Fannie Mae creates opportunities for people to buy, refinance, or rent a home. We are a leading source of mortgage financing in all markets and at all times. We ensure the availability of affordable mortgage loans. The financing solutions we develop make homeownership a...
Compliance Ranges Comparison

Vision Financial Group







Fannie Mae






Benchmark & Cyber Underwriting Signals
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for Vision Financial Group in 2026.
Incidents vs Financial Services Industry Avg (This Year)
No incidents recorded for Fannie Mae in 2026.
Incident History - Vision Financial Group (X = Date, Y = Severity)
Vision Financial Group cyber incidents detection timeline including parent company and subsidiaries.
Incident History - Fannie Mae (X = Date, Y = Severity)
Fannie Mae cyber incidents detection timeline including parent company and subsidiaries.
Notable Incidents

Vision Financial Group

Fannie Mae
FAQ
Latest Global CVEs
Spinnaker is an open source, multi-cloud continuous delivery platform. Prior to versions 2026.1.1, 2026.0.3, 2025.4.4, and 2025.3.4 on their respective release lines, Kustomize bake operations allow unsafe YAML tag processing in rosco manifests. This can lead to remote code execution on rosco pods when performing Kustomize bakes. This issue is fixed in versions 2026.1.1, 2026.0.3, 2025.4.4, and 2025.3.4.
- https://github.com/spinnaker/spinnaker/commit/2d75818b85cc4c35144d5e5ed45e7340fcab5dfe
- https://github.com/spinnaker/spinnaker/commit/bbc30c9b9034a056e95f012fa1b34e9fd703cae7
- https://github.com/spinnaker/spinnaker/commit/de5a7a05af35aee19eb71d289cd0b77f67509009
- https://github.com/spinnaker/spinnaker/commit/df32d568e82519d9f3896fc9007baba0077c87fd
- https://github.com/spinnaker/spinnaker/commit/f5cec213f8cf207843ed5a6929395960a1ca094f
- https://github.com/spinnaker/spinnaker/releases/tag/rosco-2025.3.4
- https://github.com/spinnaker/spinnaker/releases/tag/rosco-2025.4.4
- https://github.com/spinnaker/spinnaker/releases/tag/rosco-2026.0.3
- https://github.com/spinnaker/spinnaker/releases/tag/rosco-2026.1.1
- https://github.com/spinnaker/spinnaker/releases/tag/rosco-2026.2.0
- https://github.com/spinnaker/spinnaker/security/advisories/GHSA-p68j-q7hf-3qcp
Multiple connections to the backend using the same charging station ID are allowed, which could allow an attacker to deploy multiple instances of malicious OCPP clients to overwhelm the backend.
Previously, there was no throttling on repeated authentication attempts to the charging station backend, which could allow an attacker to execute a denial-of-service attack.
The charging station websocket endpoint accepts connections without proper authentication, which could lead to privilege escalation.
vulnerability in Drupal Commerce guest registration allows . This issue affects Commerce guest registration versions: *.*.