What is the official website of Mercedes-Benz Indonesia ?

The official website of Mercedes-Benz Indonesia is http://www.mercedes-benz.co.id.

What is Mercedes-Benz Indonesia's cybersecurity risk score?

Mercedes-Benz Indonesia has an AI-generated cybersecurity risk score of 749 out of 1000, indicating a Moderate security posture according to Rankiteo's assessment.

How many security incidents has Mercedes-Benz Indonesia experienced?

According to Rankiteo, Mercedes-Benz Indonesia currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Mercedes-Benz Indonesia been affected by any supply chain cyber incidents ?

According to Rankiteo, Mercedes-Benz Indonesia has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Mercedes-Benz Indonesia have SOC 2 Type 1 certification ?

According to Rankiteo, Mercedes-Benz Indonesia is not certified under SOC 2 Type 1.

Does Mercedes-Benz Indonesia have SOC 2 Type 2 certification ?

According to Rankiteo, Mercedes-Benz Indonesia does not hold a SOC 2 Type 2 certification.

Does Mercedes-Benz Indonesia comply with GDPR ?

According to Rankiteo, Mercedes-Benz Indonesia is not listed as GDPR compliant.

Does Mercedes-Benz Indonesia have PCI DSS certification ?

According to Rankiteo, Mercedes-Benz Indonesia does not currently maintain PCI DSS compliance.

Does Mercedes-Benz Indonesia comply with HIPAA ?

According to Rankiteo, Mercedes-Benz Indonesia is not compliant with HIPAA regulations.

Does Mercedes-Benz Indonesia have ISO 27001 certification ?

According to Rankiteo,Mercedes-Benz Indonesia is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Mercedes-Benz Indonesia operate in ?

Mercedes-Benz Indonesia operates primarily in the Motor Vehicle Manufacturing industry.

How many employees does Mercedes-Benz Indonesia have ?

Mercedes-Benz Indonesia employs approximately 391 people worldwide.

Does Mercedes-Benz Indonesia own any subsidiaries ?

Mercedes-Benz Indonesia presently has no subsidiaries across any sectors.

How many LinkedIn followers does Mercedes-Benz Indonesia have ?

Mercedes-Benz Indonesia's official LinkedIn profile has approximately 29,178 followers.

What is the NAICS classification code for Mercedes-Benz Indonesia ?

Mercedes-Benz Indonesia is classified under the NAICS code 3361, which corresponds to Motor Vehicle Manufacturing.

Does Mercedes-Benz Indonesia have a Crunchbase profile ?

No, Mercedes-Benz Indonesia does not have a profile on Crunchbase.

Does Mercedes-Benz Indonesia have a LinkedIn profile ?

Yes, Mercedes-Benz Indonesia maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/mercedes-benz-indonesia.

How many cybersecurity incidents has Mercedes-Benz Indonesia experienced ?

As of July 8, 2026, Rankiteo reports that Mercedes-Benz Indonesia has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Mercedes-Benz Indonesia have ?

Mercedes-Benz Indonesia has an estimated 13,012 peer or competitor companies worldwide.

What types of cybersecurity incidents has Mercedes-Benz Indonesia faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Data Leak and Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Mercedes-Benz Indonesia

Boost Score +25 with badge (5 left)

749

/1000

Moderate

774

/1000

Fair

Mercedes-Benz Indonesia Vendor Cyber Rating & Cyber Score

mercedes-benz.co.id

Add Your Compliance Badge

Mercedes-Benz is a leading German automobile manufacturer, and a multinational division of Mercedes-Benz Group AG. The brand is well known for high-quality and advanced technology automobiles. Mercedes-Benz is headquartered in Stuttgart, Baden-Württemberg, Germany. Mercedes-Benz was established in Indonesia in 1970; however, the first ever vehicle in Indonesia - named Benz Victoria Phaeton - originated from Mercedes-Benz, arriving in 1894. Mercedes-Benz Indonesia consists of two companies, namely PT Mercedes-Benz Indonesia and PT Mercedes-Benz Distribution Indonesia. Mercedes-Benz locally assembles its vehicles – the A-Class, C-Class, E-Class, S-Class sedans, GLA, GLC, GLE and GLS SUVs, as well as AMG A 35 Sedan and AMG GLA 35 models at

Mercedes-Benz Indonesia A.I CyberSecurity Scoring

Scoring History

Mercedes-Benz Indonesia

Mercedes-Benz Indonesia CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Mercedes-Benz Group...

Vulnerability

12/2025

MER1766433596

Mercedes-Benz Indon...

Data Leak

10/2019

MER71318423

Loading…

A.I.

Mercedes-Benz Indonesia Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Mercedes-Benz Indonesia

Incidents vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Mercedes-Benz Indonesia in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Mercedes-Benz Indonesia in 2026.

Incident Types Mercedes-Benz Indonesia vs Motor Vehicle Manufacturing Industry Avg (This Year)

No incidents recorded for Mercedes-Benz Indonesia in 2026.

Incident History - Mercedes-Benz Indonesia (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Mercedes-Benz Indonesia Subsidiaries

Mercedes-Benz Indonesia

Motor Vehicle Manufacturing

Website: http://www.mercedes-benz.co.id

Company Size: 391

Mercedes-Benz Careers InternationalMotor Vehicle Manufacturing

Mercedes-Benz AGMotor Vehicle Manufacturing

Mercedes-Benz Research & Development North America, Inc.Motor Vehicle Manufacturing

Mercedes-Benz South AfricaAutomotive

Mercedes-Benz AustraliaAutomotive

Mercedes-Benz SverigeMotor Vehicle Manufacturing

Mercedes-Benz MalmöMotor Vehicle Manufacturing

Tjänstebilar från Mercedes-BenzMotor Vehicle Manufacturing

Mercedes-Benz Group AGMotor Vehicle Manufacturing

Mercedes-Benz FurgonetasMotor Vehicle Manufacturing

Mercedes-Benz VansFahrzeugbau

Daimler Truck AGMotor Vehicle Manufacturing

Mercedes-Benz Vans, LLC (Charleston, SC)Motor Vehicle Manufacturing

Mercedes-Benz Automotive Mobility GmbHTravel Arrangements

Mercedes-Benz New ZealandMotor Vehicle Manufacturing

Mercedes-Benz Research and Development IndiaMotor Vehicle Manufacturing

Mercedes-Benz IndiaMotor Vehicle Manufacturing

Mercedes-Benz EgyptMotor Vehicle Manufacturing

Mercedes-Benz MalaysiaAutomotive

Mercedes-Benz RomaniaMotor Vehicle Manufacturing

Mercedes-Benz (Thailand) Ltd.Automotive

Mercedes-Benz SingaporeMotor Vehicle Manufacturing

Mercedes-Benz VietnamMotor Vehicle Manufacturing

Mercedes-Benz Group Services Philippines, Inc.Financial Services

Mercedes-Benz KoreaWholesale Motor Vehicles and Parts

Mercedes-Benz Hungária Kft.Motor Vehicle Manufacturing

Loading…

Mercedes-Benz Indonesia Similar Companies

Bridgestone Americas

cb bridgestoneamericas.com

Bridgestone Americas, Inc. (BSAM), headquartered in Nashville, Tennessee, and Bridgestone Europe, Middle East and Africa (BSEMEA), headquartered in Brussels, Belgium, operate collectively as a “Bridgestone West” strategic region. This region services the strategic business needs of teams across the Americas, Europe, Middle East and Africa. BSAM and BSEMEA are subsidiaries of Bridgestone Corporation, globally headquartered in Japan. Bridgestone and its subsidiaries develop, manufactures and markets a diverse portfolio of original equipment and replacement tires, tire-centric solutions, mobility solutions and other rubber-associated and diversified products that deliver social and customer value. These best-in-class offerings are sold to consumers and fleet customers around the world under the trusted Bridgestone and Firestone brand names. With more than 50 production facilities and 55,000 employees, the Bridgestone Americas (BSAM) enterprise spans from Canada to Argentina. Business units of Bridgestone Americas include Bridgestone Retail Operations, the world’s largest network of company-owned retail tire and automotive service centers; Bandag, a leader in commercial tire retreading worldwide and Firestone Industrial Products, a leading provider of technologically advanced air springs for commercial and passenger vehicle applications. At Bridgestone, you are Free to Be We believe people can only provide superior service and quality to others when they bring their whole self to work. We believe in championing all perspectives, individuals and teams because we understand the importance of seeing the world and our business through many different lenses. We are building a team as diverse as the world we serve. So, show us what you are made of, because who you are is what we need. To view our terms of use, visit https://www.bridgestoneamericas.com/en/terms-of-use.

Volvo Group

volvogroup.com

The Volvo Group is one of the world’s leading manufacturers of trucks, buses, construction equipment and marine and industrial engines. The Group also provides complete solutions for financing and service. The Volvo Group, with its headquarters in Gothenburg, employs about 100,000 people, has production facilities in 18 countries and sells its products in more than 190 markets.

BMW Group

bmwgroup.com

With its four brands BMW, MINI, Rolls-Royce and BMW Motorrad, the BMW Group is the world’s leading premium manufacturer of automobiles and motorcycles and also provides premium financial services. The BMW Group production network comprises over 30 production sites worldwide; the company has a global sales network in more than 140 countries. In 2024, the BMW Group sold over 2.45 million passenger vehicles and more than 210,000 motorcycles worldwide. The profit before tax in the financial year 2024 was € 11.0 billion on revenues amounting to € 142.4 billion. As of 31 December 2024, the BMW Group had a workforce of 159,104 employees. The economic success of the BMW Group has always been based on long-term thinking and responsible action. Sustainability is a key element of the BMW Group’s corporate strategy and covers all products from the supply chain and production to the end of their useful life.

JLR

cb jlr.com

At JLR, we create exceptional experiences through our brands: Range Rover, Defender, Discovery and Jaguar. As the corporate home of these iconic British brands, we bring together world-class design, pioneering innovation and the creative ambition that drives our business forward. Our heritage matters, but it's our future that excites us. We're transforming at pace, shaping new technologies, electrifying our products and reimagining how people move through the world. None of this happens by accident. It happens because of our people – creators, problem-solvers and pioneers who bring bold ideas to life every day. Everyone at JLR plays a role in building an enterprise that is as exceptional as the experiences we deliver. Here, you'll find the scale of a global organisation and the opportunity to make a meaningful impact from day one. We are proud of the brands we steward, but even prouder of the culture we're building – one where curiosity is encouraged, craftsmanship is celebrated and every colleague is supported to grow. If you would like to be part of our journey, you can explore our business areas and current opportunities right here on LinkedIn. You can also connect with our teams, ask questions and hear from the people who make JLR what it is. The future is exciting. We hope you will help us create it.

Motherson Group

motherson.com

Motherson is a diversified global design, engineering, manufacturing and assembly (DEMA) specialist, delivering full-system solutions to customers across a wide range of industries. With a robust network of 425 state-of-the-art facilities across 44 countries, and a dedicated workforce of more than 200,000 professionals, Motherson is continually working toward its vision of being a globally preferred sustainable solutions provider for its stakeholders. The group recorded revenues of USD 21.2 billion in 2024-25 and is ranked among the top 15 automotive suppliers worldwide. As a trusted partner to OEM customers, Motherson offers an extensive, versatile product portfolio spanning the entire spectrum of the mobility industry. This includes passenger and commercial vehicles, two- and three-wheelers, rolling stock, off-highway vehicles, earthmoving, material-handling and agricultural machinery. Its product range encompasses electrical distribution systems, fully assembled vehicle interior and exterior modules, rear vision systems, moulded plastic parts and assemblies, injection moulding tools, rubber components, lighting systems, and machined metal products. Beyond the automotive sector, Motherson has strategically diversified into industries such as health and medical, aerospace, consumer electronics, logistics, and industrial IT solutions. This expansion reflects the group’s adaptability and unwavering commitment to meeting its customers' evolving needs. Motherson believes its employees are its partners in progress, its biggest asset. The organisation nurtures an environment where employees thrive as dynamic professionals and individuals. The organisation is responsive to its employees' professional aspirations and provides a range of growth opportunities, enabling them to advance professionally and to take on strategic roles within the organisation.

Volkswagen do Brasil

vw.com.br

A gente sabe que o nome “Volkswagen” com certeza deve fazer parte da sua história. Porque a gente também sabe que não é à toa que estamos na vida, no coração e na garagem dos brasileiros. O segredo? Construímos os carros mais inovadores, tornamos as tecnologias acessíveis e dizemos sempre que estamos em constante desenvolvimento. Nunca paramos. Nunca nos damos por satisfeitos. Estamos construindo uma Nova Volkswagen, uma nova empresa para um novo mundo. Estamos focados em produtos, soluções de mobilidade e novos negócios que definam tendências, sempre discutindo e liderando o futuro da indústria. A ideia é usar as inovações tecnológicas não só a favor dos negócios, mas também das pessoas. Elas são a nossa inspiração para criarmos os carros mais seguros, modernos e eficientes. Sabemos que ao falar em inovação, as pessoas têm sempre que vir em primeiro lugar. Justamente por isso, fomos a única montadora a receber, em 2019, a certificação Top Employer, o mais importante reconhecimento internacional da excelência de uma empresa na gestão de pessoas, além de também sermos eleitos entre as 10 empresas mais desejadas para se trabalhar na pesquisa Valor Carreira – As Melhores na Gestão de Pessoas. Motivo de orgulho para cada um de nós. Fique de olho nas novidades da Volkswagen do Brasil aqui no LinkedIn e também em nossas outras redes sociais. Vai que você não é a pessoa que estamos procurando para fazer parte deste futuro com a gente? ;) Facebook: facebook.com/volkswagendobrasil Instagram: instagram.com/vwbrasil Twitter: twitter.com/vwbrasil YouTube: youtube.com/volkswagendobrasil

Discount Tire

discounttire.com

With more than 1,200 stores in the United States, Discount Tire has grown to become the leading independent retailer of tires and wheels. The company was founded in 1960 when founder Bruce T. Halle rented a building on Stadium Boulevard in Ann Arbor, MI. Although the inventory consisted of only six tires and the showroom was not quite the showroom we see today, faith, vision and hard work were then, and still remain, the foundation on which this company has grown and prospered. As with any new start up, Bruce Halle's venture faced numerous challenges - perhaps one of the biggest being that he didn't own an air compressor. Having only six tires and a portable air tank, Halle would race back and forth to a nearby gas station, filling the tires with air as he sold them. Day by day, tire by tire, this one-man operation slowly grew into what is now one of the most recognized names in the industry. Discount Tire has a vision that not only lives but thrives in the hearts of its employees each and every day. From part-time to full-time employees at the store, regional or corporate level our employees work to be the best in the business. One common thread running through the hearts of everyone within the organization remains the same - treat customers and fellow employees with respect and fairness. Care for those in need, always do what is right, work hard, be responsible and have fun. The employees of Discount Tire represent our philosophy and its brand by remaining knowledgeable, friendly and honest. By offering the highest level of customer service, more product choices and the lowest prices, they have earned the right to be considered trusted experts. Building customer relationships has allowed Discount Tire to become a leader in the industry. Our continual growth not only provides opportunities for employee advancement, but allows more customers to remain confident when choosing us for all of their tire and wheel needs.

Ashok Leyland

ashokleyland.com

Ashok Leyland vehicles have built a reputation for reliability and ruggedness. The 5,00,000 vehicles we have put on the roads have considerably eased the additional pressure placed on road transportation in independent India. In the populous Indian metros, four out of the five State Transport Undertaking (STU) buses come from Ashok Leyland. Some of them like the double-decker and vestibule buses are unique models from Ashok Leyland, tailor-made for high-density routes. The blueprint prepared for the future reflected the global ambitions of the company, captured in four words: Global Standards, Global Markets. This was at a time when liberalisation and globalisation were not yet in the air. Ashok Leyland embarked on a major product and process upgradation to match world-class standards of technology. In the journey towards global standards of quality, Ashok Leyland reached a major milestone in 1993 when it became the first in India's automobile history to win the ISO 9002 certification. The more comprehensive ISO 9001 certification came in 1994, QS 9000 in 1998 and ISO 14001 certification for all vehicle manufacturing units in 2002. It has also become the first Indian auto company to receive the latest ISO/TS 16949 Corporate Certification (in July 2006) which is specific to the auto industry.

Lear Corporation

lear.com

Lear Corporation (NYSE: LEA) is a global automotive leader in Seating and E-Systems. The company designs, manufactures, and delivers advanced technologies to the world’s major automakers. Building on more than 100 years of heritage, Lear is the largest U.S.-based automotive supplier, headquartered in Southfield, Michigan. Driven by a commitment to innovation, operational excellence, and sustainability, Lear’s global team of talented employees is shaping the future of mobility by developing solutions that enhance comfort, safety, and efficiency. More information is available at Lear.com.

Loading…

NEWS

Mercedes-Benz Indonesia CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

November 13, 2025 08:00 AM

L.G. Balakrishnan & Bros Appoints Suresh Sivalingam as Vice President for Strategic Business Development

LG Balakrishnan & Bros Limited has appointed Mr. Suresh Sivalingam as Vice President (Strategic Business Development - Metal Forming...

Read Article

August 01, 2025 07:00 AM

Automotive distributor Cycle & Carriage Singapore suffers data breach; 147,000 records stolen

Some personal information leaked, but not banking or credit card details.

Read Article

July 12, 2025 07:00 AM

WARNING: Millions of Cars Exposed To Remote Hacking Via Critical Vulnerability

Read Article

June 16, 2025 07:00 AM

Daimler Truck introduces new manufacturing facility in Indonesia

Daimler New Manufacturing Facility: The 15-hectare facility in Cikarang, with an annual production capacity of 5000 Mercedes-Benz trucks and...

Read Article

March 24, 2025 07:00 AM

RANKINGS: ALB Super 50 TMT 2025

In its fifth edition, ALB recognises the top lawyers in the technology, media, and telecommunications sectors across Asia in the Asia Super...

Read Article

January 21, 2025 08:00 AM

Mercedes-Benz Owners Warned Of Hacking Danger—13 Security Issues Found

Car hackers could gain access to your Mercedes-Benz, a new report from Kaspersky has confirmed—here's what you need to know.

Read Article

November 15, 2024 08:00 AM

Mercedes-Benz SWOT Analysis (2026)

The Mercedes-Benz SWOT analysis examines the company's strengths, weaknesses, opportunities, and threats.

Read Article

August 21, 2024 07:00 AM

Toyota, Hitachi join Japan's automotive cybersecurity push

TOKYO -- Dozens of Japanese companies including Toyota Motor and Hitachi are collaborating in an industrywide initiative to improve...

Read Article

December 07, 2018 08:00 AM

Daimler launches new two bus models

German car and truck manufacturer Daimler launched two new models of buses -- the Mercedes-Benz OF 1623 RF and O500RS 1836 in Tangerang, Banten on Dec. 6.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-59705

SUMMARY

mem0's openmemory/api component contains an unauthenticated access vulnerability that allows unauthenticated attackers to read, write, and delete arbitrary user memories by accessing API routers registered without authentication middleware. Attackers can supply arbitrary user_id parameters or directly access memory retrieval endpoints to expose private memory content, or invoke pause endpoints with global_pause=true to cause denial-of-service across all users.

Published

Date2026-07-07

Updated

Date2026-07-07

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-59704

SUMMARY

Cap's GET /api/video/ai endpoint fails to validate user ownership or membership before returning private video AI metadata including titles, summaries, and chapters. Authenticated attackers can supply arbitrary video IDs to read sensitive AI-generated content and trigger unauthorized AI generation that consumes the video owner's credits without consent.

Published

Date2026-07-07

Updated

Date2026-07-07

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:L/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-55078

SUMMARY

Coder allows organizations to provision remote development environments via Terraform. Starting in version 2.17.0 and prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, `POST /api/v2/files` converts zip uploads to tar in memory via `CreateTarFromZip`, which enforced a per-entry size limit but no aggregate limit on total decompressed output, writing to an unbounded in-memory buffer. Exploitation requires authenticated file-upload access and the impact is limited to availability (denial of service). The fix in versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2 adds a metadata preflight check that sums projected entry sizes and a streaming writer that enforces the aggregate limit during decompression. As a workaround, restrict file-upload permissions to trusted users or place a reverse proxy with request-body size limits in front of `coderd`.

Published

Date2026-07-07

Updated

Date2026-07-07

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-55077

SUMMARY

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, the `PUT /api/v2/users/{user}/password` endpoint authorized only `ActionUpdatePersonal` and did not prevent a `user-admin` from resetting an `owner` account's password. It also did not require the current password when an admin reset another user's password. Exploitation requires the privileged `user-admin` role so practical risk is limited to deployments that grant `user-admin` to less trusted operators. The fix in versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2 prevents non-owner users from resetting the password of an account that holds the `owner` role. As a workaround, restrict the `user-admin` role to trusted administrators.

Published

Date2026-07-07

Updated

Date2026-07-07

RISK INFORMATION (Score: 7.2)

cvss3

Base Score: 7.2

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

1.2

REFERENCES

CVE-2026-55076

SUMMARY

Coder allows organizations to provision remote development environments via Terraform. Prior to versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2, Coder's OIDC callback checked `email_verified` with a direct Go `bool` type assertion. When an IdP returned the claim as a non-boolean (for example the string `"false"`) or omitted it, the assertion failed open and the email was treated as verified. Combined with an unconditional email-based account fallback, this enabled account takeover. The fix in versions 2.29.7, 2.32.7, 2.33.8, and 2.34.2 coerces `email_verified` across bool, string and numeric types (fail-closed) and blocks the email fallback when the matched user already has a different linked IdP subject. As a workaround, ensure the IdP returns `email_verified` as a native JSON boolean. The email-fallback linking issue has no configuration workaround; upgrading is required.

Published

Date2026-07-07

Updated

Date2026-07-07

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:H/A:N

Impact Score

5.2

Exploitability

2.2

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…