What is the official website of Microsoft Dynamics 365 ?

The official website of Microsoft Dynamics 365 is http://www.dynamics.com.

What is Microsoft Dynamics 365's cybersecurity risk score?

Microsoft Dynamics 365 has an AI-generated cybersecurity risk score of 560 out of 1000, indicating a Very Poor security posture according to Rankiteo's assessment.

How many security incidents has Microsoft Dynamics 365 experienced?

According to Rankiteo, Microsoft Dynamics 365 currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Microsoft Dynamics 365 been affected by any supply chain cyber incidents ?

According to Rankiteo, Microsoft Dynamics 365 has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Resecurity (Incident ID: CISRESMICAMASERSALGIT1786868753) Microsoft (Incident ID: HCLTAT1786448292) Microsoft Power Platform (Incident ID: MICATL1786962683) Microsoft Dynamics 365 (Incident ID: ALL1785522998) Microsoft Security Response Center (Incident ID: POL1785356870) OpenAI (Incident ID: CHE1784787889) AsyncAPI Initiative (Incident ID: CISSONMICORAASYKNX1784341544) AsyncAPI Initiative (Incident ID: ASYMIC1785327908) Packagist Conductors (Incident ID: WHMPACGITCPA1784816835) ShapedPlugin LLC (Incident ID: FORSHATANMICJAMIRHTEX1782147825) PRODAFT (Incident ID: MICSENKASESECRO1782073479) npm, Inc. (Incident ID: GITEXONPM1780604646) GitHub (Incident ID: GIT1780453444) npm, Inc. (Incident ID: NPMGIT1779963893) npm, Inc. (Incident ID: ELAGITAMAOPENPM1780050263) ANTV INC (Incident ID: ANTGIT1779395279) Google (Incident ID: OPEMICBRAGOOVIVBRO1779395125) NXP Semiconductors (Incident ID: NPMGITNXPMIC1779193496) GitHub (Incident ID: GIT1779459975) Microsoft Security (Incident ID: PUTWEBANYMIC1779215753) TanStack (Incident ID: GRA1779006227) GitHub (Incident ID: GIT1779251025) GitHub (Incident ID: PHPGIT1778747372) GitHub (Incident ID: GOO1778567308) Anthropic (Incident ID: ANT1778581440) TanStack (Incident ID: MIS1778869722) Google AI (Incident ID: GITGOO1780431903) PyPI (Incident ID: PYPGIT1PA1778761827)

Does Microsoft Dynamics 365 have SOC 2 Type 1 certification ?

According to Rankiteo, Microsoft Dynamics 365 is not certified under SOC 2 Type 1.

Does Microsoft Dynamics 365 have SOC 2 Type 2 certification ?

According to Rankiteo, Microsoft Dynamics 365 does not hold a SOC 2 Type 2 certification.

Does Microsoft Dynamics 365 comply with GDPR ?

According to Rankiteo, Microsoft Dynamics 365 is not listed as GDPR compliant.

Does Microsoft Dynamics 365 have PCI DSS certification ?

According to Rankiteo, Microsoft Dynamics 365 does not currently maintain PCI DSS compliance.

Does Microsoft Dynamics 365 comply with HIPAA ?

According to Rankiteo, Microsoft Dynamics 365 is not compliant with HIPAA regulations.

Does Microsoft Dynamics 365 have ISO 27001 certification ?

According to Rankiteo,Microsoft Dynamics 365 is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Microsoft Dynamics 365 operate in ?

Microsoft Dynamics 365 operates primarily in the Software Development industry.

How many employees does Microsoft Dynamics 365 have ?

Microsoft Dynamics 365 employs approximately 3 people worldwide.

Does Microsoft Dynamics 365 own any subsidiaries ?

Microsoft Dynamics 365 presently has no subsidiaries across any sectors.

How many LinkedIn followers does Microsoft Dynamics 365 have ?

Microsoft Dynamics 365's official LinkedIn profile has approximately 242,389 followers.

What is the NAICS classification code for Microsoft Dynamics 365 ?

Microsoft Dynamics 365 is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does Microsoft Dynamics 365 have a Crunchbase profile ?

No, Microsoft Dynamics 365 does not have a profile on Crunchbase.

Does Microsoft Dynamics 365 have a LinkedIn profile ?

Yes, Microsoft Dynamics 365 maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/microsoft-dynamics.

How many cybersecurity incidents has Microsoft Dynamics 365 experienced ?

As of August 19, 2026, Rankiteo reports that Microsoft Dynamics 365 has experienced 100 cybersecurity incidents.

How many peer or competitor companies does Microsoft Dynamics 365 have ?

Microsoft Dynamics 365 has an estimated 30,663 peer or competitor companies worldwide.

What types of cybersecurity incidents has Microsoft Dynamics 365 faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack, Breach, Ransomware and Vulnerability.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Boost Score +25 with badge (5 left)

560

/1000

Very Poor

585

/1000

Very Poor

Microsoft Dynamics 365 Vendor Cyber Rating & Cyber Score

dynamics.com

Add Your Compliance Badge

Keep up on the latest news and events for Microsoft Dynamics 365, the only portfolio of intelligent business applications that gives you the agility to deliver operational excellence and delight every customer.

MD A.I CyberSecurity Scoring

Scoring History

Microsoft Dynamics 365 CyberSecurity News & History

Past Incidents

100

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Microsoft Copilot

Vulnerability

8/2026

GOOMIC178711351...

Microsoft Security ...

Vulnerability

100

8/2026

MIC1787034406

GitHub

Cyber Attack

8/2026

GIT1786969496

Microsoft Security

Breach

8/2026

Resecurity

CISRESMICAMASER...

Microsoft

Vulnerability

100

8/2026

MICSAP178649758...

Microsoft Security

Vulnerability

8/2026

MIC1786631229

Microsoft Threat In...

Cyber Attack

100

8/2026

MIC1786568300

Microsoft Security

Vulnerability

8/2026

MIC1786525732

Microsoft Security ...

Vulnerability

8/2026

MIC1786620445

Microsoft

Breach

8/2026

Microsoft

HCLTAT178644829...

Microsoft Power Pla...

Vulnerability

100

8/2026

Microsoft Power...

MICATL178696268...

GitHub

Cyber Attack

8/2026

GIT1785839378

Microsoft Security ...

Vulnerability

100

7/2026

MIC1785392682

Microsoft Dynamics ...

Ransomware

100

7/2026

Microsoft Dynam...

ALL1785522998

Microsoft Security ...

Breach

7/2026

Microsoft Secur...

POL1785356870

Microsoft Security

Vulnerability

7/2026

MIC1786107729

Microsoft Security

Cyber Attack

7/2026

MIC1784881741

Microsoft Security ...

Vulnerability

100

7/2026

OpenAI

CHE1784787889

Microsoft Security

Vulnerability

7/2026

MIC1784744777

Microsoft Security

Cyber Attack

7/2026

MIC1784658331

Microsoft Threat In...

Vulnerability

7/2026

MICNOVBRU178442...

Microsoft Security

Vulnerability

7/2026

MIC1784096635

Microsoft Security

Vulnerability

7/2026

AsyncAPI Initia...

CISSONMICORAASY...

Microsoft

Vulnerability

100

7/2026

MIC1784125827

Microsoft Security

Vulnerability

100

7/2026

MIC1784141218

Microsoft

Vulnerability

7/2026

MIC1784089434

Microsoft Security ...

Vulnerability

7/2026

MIC1784298242

Microsoft Threat In...

Cyber Attack

100

7/2026

AsyncAPI Initia...

ASYMIC178532790...

Microsoft

Vulnerability

7/2026

MIC1784816949

Microsoft Security

Vulnerability

7/2026

MIC1784096831

GitHub

Cyber Attack

100

7/2026

Packagist Condu...

WHMPACGITCPA178...

Microsoft Threat In...

Cyber Attack

100

7/2026

MIC1783680524

Microsoft Security ...

Vulnerability

100

7/2026

MIC1783441514

GitHub

Vulnerability

7/2026

GIT1783441439

Microsoft Security ...

Vulnerability

7/2026

MIC1783067043

Microsoft Security

Vulnerability

7/2026

MIC1786379301

Microsoft Security

Ransomware

100

7/2026

MIC1787041566

Microsoft

Vulnerability

6/2026

MIC1782721445

Microsoft Security

Cyber Attack

6/2026

MIC1782483842

Microsoft Security

Vulnerability

6/2026

MIC1782375843

Microsoft Security

Cyber Attack

6/2026

MIC1782404840

Microsoft

Breach

6/2026

ANAMIC178542315...

Microsoft Security

Cyber Attack

6/2026

ShapedPlugin LL...

FORSHATANMICJAM...

Microsoft Security ...

Ransomware

100

6/2026

MIC1782204242

Microsoft Security

Cyber Attack

6/2026

PRODAFT

MICSENKASESECRO...

Microsoft Security

Vulnerability

6/2026

MIC1781785861

GitHub

Cyber Attack

6/2026

GIT1781778547

Microsoft Threat In...

Cyber Attack

6/2026

MIC1781713463

Microsoft Security ...

Vulnerability

6/2026

MIC1781238231

Microsoft Security

Cyber Attack

6/2026

SPOMICADO178120...

Microsoft Security ...

Vulnerability

6/2026

MIC1781101475

Microsoft Security ...

Vulnerability

6/2026

MIC1781785666

Microsoft Security ...

Vulnerability

6/2026

MIC1781072633

Microsoft Security

Vulnerability

6/2026

MIC1782296659

Microsoft Security ...

Breach

6/2026

MIC1780986305

Microsoft

Cyber Attack

6/2026

MIC1780900177

Microsoft Security ...

Vulnerability

6/2026

MIC1780640667

GitHub Security Lab

Cyber Attack

6/2026

npm, Inc.

GITEXONPM178060...

Microsoft 365

Vulnerability

6/2026

LINMIC178053984...

Microsoft Threat In...

Cyber Attack

6/2026

MICISR178456517...

GitHub

Vulnerability

100

6/2026

GitHub

GIT1780453444

Microsoft Security

Vulnerability

6/2026

MIC1781591215

Microsoft Visual St...

Vulnerability

6/2026

MIC1782398423

Microsoft Security ...

Vulnerability

6/2026

MIC1781540872

Microsoft

Vulnerability

6/2026

MIC1781541072

Microsoft Security ...

Vulnerability

100

6/2026

MIC1780287882

Microsoft Security ...

Vulnerability

100

6/2026

MIC1784910234

Microsoft Security

Cyber Attack

100

5/2026

OKTMICATTNVI178...

GitHub

Cyber Attack

5/2026

npm, Inc.

NPMGIT177996389...

GitHub

Cyber Attack

5/2026

npm, Inc.

ELAGITAMAOPENPM...

Microsoft Threat In...

Cyber Attack

5/2026

MIC1784291489

Microsoft Threat In...

Cyber Attack

100

5/2026

MIC1779704661

Microsoft Security

Vulnerability

100

5/2026

MIC1786969594

GitHub

Cyber Attack

100

5/2026

ANTV INC

ANTGIT177939527...

Microsoft Security ...

Vulnerability

5/2026

Google

OPEMICBRAGOOVIV...

Microsoft Security

Vulnerability

5/2026

MIC1779272687

Microsoft Security

Cyber Attack

5/2026

MIC1779258738

GitHub

Cyber Attack

5/2026

GIT1779179198

GitHub

Cyber Attack

5/2026

NXP Semiconduct...

NPMGITNXPMIC177...

GitHub

Cyber Attack

100

5/2026

GitHub

GIT1779459975

Microsoft Threat In...

Cyber Attack

100

5/2026

MIC1779164698

Microsoft Security

Cyber Attack

5/2026

Microsoft Secur...

PUTWEBANYMIC177...

GitHub

Breach

5/2026

TanStack

GRA1779006227

Microsoft Security ...

Vulnerability

5/2026

MIC1778833438

GitHub

Breach

5/2026

GitHub

GIT1779251025

Microsoft Security ...

Vulnerability

100

5/2026

MIC1778732772

Microsoft Security

Vulnerability

5/2026

MIC1778682772

GitHub

Vulnerability

5/2026

GitHub

PHPGIT177874737...

Microsoft Security ...

Vulnerability

5/2026

MIC1780511463

Microsoft Security

Vulnerability

5/2026

MIC1778646305

Microsoft Security ...

Vulnerability

100

5/2026

MIC1778747112

Microsoft Security

Vulnerability

5/2026

MIC1780475036

GitHub

Cyber Attack

100

5/2026

GitHub

GOO1778567308

Microsoft

Vulnerability

100

5/2026

MIC1778229035

GitHub

Vulnerability

5/2026

Anthropic

ANT1778581440

GitHub

Cyber Attack

5/2026

GIT1781001050

GitHub

Vulnerability

100

5/2026

ANTFOX7-ECARGIT...

GitHub

Breach

5/2026

TanStack

MIS1778869722

GitHub

Cyber Attack

5/2026

Google AI

GITGOO178043190...

GitHub

Cyber Attack

100

5/2026

PyPI

PYPGIT1PA177876...

Loading…

A.I.

MD Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for MD

Incidents vs Software Development Industry Avg (This Year)

Microsoft Dynamics 365 has 86.92% more incidents than the average of same-industry companies with at least one recorded incident.

Incidents vs All-Companies Average (This Year)

Microsoft Dynamics 365 has 94.17% more incidents than the average of all companies with at least one recorded incident.

Incident Types MD vs Software Development Industry Avg (This Year)

Microsoft Dynamics 365 reported 2 incidents this year: 0 cyber attacks, 1 ransomware, 0 vulnerabilities, 1 data breaches, compared to industry peers with at least 1 incident.

Incident History - MD (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Microsoft Dynamics 365 Subsidiaries

MD

Software Development

Website: http://www.dynamics.com

Company Size: 10,001+ employees

MicrosoftSoftware Development

Microsoft AI Cloud Partner ProgramInformation Technology & Services

Microsoft On the IssuesTechnology, Information and Internet

Microsoft SurfaceComputer Hardware

Microsoft LearnIT Services and IT Consulting

Loading…

Microsoft Dynamics 365 Similar Companies

Shopify

cb shopify.com

Shopify is a leading global commerce company, providing trusted tools to start, grow, market, and manage a retail business of any size. Shopify makes commerce better for everyone with a platform and services that are engineered for reliability, while delivering a better shopping experience for consumers everywhere. Shopify powers millions of businesses in more than 175 countries and is trusted by brands such as Allbirds, Gymshark, PepsiCo, Staples, and many more. Find all our jobs here: www.shopify.com/careers

Bolt

bolt.eu

At Bolt, we're building a future where people don’t need to own personal cars to move around safely and conveniently. A future where people have the freedom to use transport on demand, choosing whatever vehicle's best for each occasion — be it a car, scooter, or e-bike. We're helping over 200 million customers move around in more than 600 cities globally while also supporting more than 4.5 million drivers and couriers to earn a living. The best bit? We're only just getting started. Read more at bolt.eu

Synopsys Inc

cb synopsys.com

Synopsys is the leader in engineering solutions from silicon to systems, enabling customers to rapidly innovate AI-powered products. We deliver industry-leading silicon design, IP, simulation and analysis solutions, and design services. We partner closely with our customers across a wide range of industries to maximize their R&D capability and productivity, powering innovation today that ignites the ingenuity of tomorrow.

Cadence

cadence.com

Cadence is a market leader in AI and digital twins, pioneering the application of computational software to accelerate innovation in the engineering design of silicon to systems. Our design solutions, based on Cadence’s Intelligent System Design™ strategy, are essential for the world’s leading semiconductor and systems companies to build their next-generation products from chips to full electromechanical systems that serve a wide range of markets, including hyperscale computing, mobile communications, automotive, aerospace, industrial, life sciences and robotics. In 2024, Cadence was recognized by the Wall Street Journal as one of the world’s top 100 best-managed companies. Cadence solutions offer limitless opportunities—learn more at www.cadence.com.

Tencent

tencent.com

Tencent is a world-leading internet and technology company that develops innovative products and services to improve the quality of life of people around the world. Founded in 1998 with its headquarters in Shenzhen, China, Tencent's guiding principle is to use technology for good. Our communication and social services connect more than one billion people around the world, helping them to keep in touch with friends and family, access transportation, pay for daily necessities, and even be entertained. Tencent also publishes some of the world's most popular video games and other high-quality digital content, enriching interactive entertainment experiences for people around the globe. Tencent also offers a range of services such as cloud computing, advertising, FinTech, and other enterprise services to support our clients' digital transformation and business growth. Tencent has been listed on the Stock Exchange of Hong Kong since 2004.

Baidu, Inc.

baidu.com

Baidu is a leading AI company with strong Internet foundation, driven by our mission to “make the complicated world simpler through technology”. Founded in 2000 as a search engine platform, we were an early adopter of artificial intelligence in 2010. Since then, we have established a full AI stack, from deep learning frameworks to models and applications, with industry-leading self-developed technology at every level. Over the past two decades, we have built a diversified portfolio of products and services, spanning an ecosystem of hundreds of millions of users, millions of developers, and hundreds of thousands of enterprises. We have now integrated our leading AI capabilities into our offerings, driving innovative use cases. Join us to shape the future of AI and technology. For media inquiries, contact us at [email protected]. For career opportunities, visit https://talent.baidu.com/static/index.html

VMware

broadcom.com

Broadcom's VMware software manages cloud complexity so customers can modernize infrastructure, accelerate app development, and protect workloads, wherever these reside. Our flagship cloud solutions provide the security and performance of private cloud combined with the scale and agility of public cloud. Modern app, edge infrastructure, and private AI products extend these capabilities, while security and disaster recovery help ensure that customers’ operations continue uninterrupted. From the data center to the cloud and apps to the edge, we help enterprises around the globe become more innovative, connected, resilient and secure.

GoTo Group

cb gotocompany.com

GoTo is the largest technology group in Indonesia, combining on-demand and financial services through the Gojek and GoTo Financial brands. It is the first platform in Southeast Asia to host these two essential use cases in one ecosystem, capturing a majority of Indonesian consumer household expenditure. GoTo’s mission is to “Empower Progress” by offering an unparalleled selection of goods and services through a comprehensive merchant and partner network and promoting financial inclusion through its leading payments and financial services business.

Airbnb

airbnb.com

Airbnb was born in 2007 when two hosts welcomed three guests to their San Francisco home, and has since grown to over 5 million hosts who have welcomed over 2 billion guest arrivals in almost every country across the globe. Every day, hosts offer unique stays, experiences and services that make it possible for guests to connect with communities in a more authentic way.

Loading…

NEWS

Microsoft Dynamics 365 CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 25, 2026 12:31 PM

AI Is Not the End of Cybersecurity: It May Be Its Next Opportunity

Over the past year, a common narrative has spread throughout the technology industry: artificial intelligence is coming for everyone's jobs.

Read Article

March 05, 2026 08:00 AM

Women’s History Month: Encouraging women in cybersecurity at every career stage

This Women's History Month, Microsoft explores ways to support the next generation of female defenders at every career stage.

Read Article

February 18, 2026 08:00 AM

2026 Microsoft Conference Calendar: For Partners, IT Pros and Developers

Here's your guide to all the IT training sessions, partner meet-ups and annual Microsoft conferences you won't want to miss.

Read Article

June 05, 2025 07:00 AM

Meet the Deputy CISOs who help shape Microsoft’s approach to cybersecurity: Part 3

This third installment in our Deputy Chief Information Security Officer (CISO) series highlights Kumar Srinivasamurthy, Geoff Belknap, and Ann Johnson.

Read Article

April 24, 2025 07:00 AM

McGees Property secures its future with Microsoft 365 after ransomware attack

McGees Property, one of Australia's largest privately owned commercial real estate agencies were hit by a ransomware attack on their 40th anniversary in 2022.

Read Article

March 14, 2025 01:05 PM

Dell Strengthens Cybersecurity for Microsoft Customers

Dell Technologies and Microsoft are enhancing AI adoption to protect data and improve cybersecurity for multicloud environments.

Read Article

March 07, 2025 08:00 AM

Mitsui began using Security Copilot to streamline operations of the zero-trust security system protecting its network

Amidst a shortage of highly skilled security specialists, Mitsui & Co. has been focusing on leveraging generative AI to enhance the...

Read Article

March 06, 2025 08:00 AM

Women’s History Month: Why different perspectives in cybersecurity and AI matter more than ever before

This Women's History Month, learn how Microsoft is helping to grow a more diverse and inclusive cybersecurity workforce.

Read Article

February 17, 2025 08:00 AM

Microsoft announces a PLN 2.8 billion investment in cloud and AI infrastructure, skilling and cybersecurity in Poland

Microsoft today announces it intends to spend PLN 2.8 billion by June, 2026 to expand its hyperscale cloud and artificial intelligence (AI) infrastructure in...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66591

SUMMARY

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant allows Stored XSS. This issue affects Media LIbrary Assistant: from n/a through 3.39.

Published

Date2026-08-18

Updated

Date2026-08-18

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Impact Score

3.7

Exploitability

2.3

REFERENCES

https://patchstack.com/database/wordpress/plugin/media-library-assistant/vulnerability/wordpress-media-library-assistant-plugin-3-39-cross-site-scripting-xss-vulnerability?_s_id=cve

CVE-2026-66589

SUMMARY

Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B2BKing: from n/a through 5.2.30.

Published

Date2026-08-18

Updated

Date2026-08-18

RISK INFORMATION (Score: 5.4)

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

2.8

REFERENCES

https://patchstack.com/database/wordpress/plugin/b2bking-wholesale-for-woocommerce/vulnerability/wordpress-b2bking-plugin-5-2-30-broken-access-control-vulnerability?_s_id=cve

CVE-2026-27365

SUMMARY

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress PublishPress Series allows Stored XSS. This issue affects PublishPress Series: from n/a through 2.17.0.

Published

Date2026-08-18

Updated

Date2026-08-18

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Impact Score

3.7

Exploitability

1.7

REFERENCES

https://patchstack.com/database/wordpress/plugin/organize-series/vulnerability/wordpress-publishpress-series-plugin-2-17-0-cross-site-scripting-xss-vulnerability?_s_id=cve

CVE-2026-73974

SUMMARY

linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses its shared testing helper across check plugins. Prior to linuxfabrik-lib 6.1.0 and Linuxfabrik Monitoring Plugins 7.0.0, lib.lftest.test() treated the first or second element of a --test CSV argument as a filesystem path and returned the file contents as simulated standard output or standard error without path confinement. The hidden but production-accessible --test argument was accepted by sudo-authorized plugins, so an attacker controlling the nagios or icinga account could use check-plugins/deb-updates/deb-updates with its default QUERY=1 to disclose every line of a root-readable file. Approximately 22 other plugins exposed filtered content or a root file existence and readability oracle through the same helper, while check-plugins/network-bonding/network-bonding and check-plugins/openstack-swift-stat/openstack-swift-stat had direct read paths that bypassed the helper. The library fix confines fixture reads to the invoking plugin's unit-test directory and refuses unsafe anchors, and the plugin fix routes the two bypasses through that helper. These issues are fixed in linuxfabrik-lib 6.1.0 and Linuxfabrik Monitoring Plugins 7.0.0.

Published

Date2026-08-18

Updated

Date2026-08-18

RISK INFORMATION (Score: 5.5)

cvss3

Base Score: 5.5

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

1.8

REFERENCES

CVE-2026-73973

SUMMARY

Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 7.0.0, check-plugins/logfile/logfile accepted a free-form --filename path and opened it as root when invoked through the shipped nagios or icinga sudoers allowlist, without confining the resolved path to /var/log. An attacker who controls the monitoring account can select a root-readable file such as /etc/shadow and use --warning-regex . while leaving SUPPRESS_OUTPUT false, causing each nonempty line to be collected in warn_matches and returned through lib.base.oao(). The vulnerable flow passes the expanded scan_path directly to open(), and neither real-path containment nor an allowlist protects the sink. The same fix also confines mysql-logfile and openvpn-client-list paths, allows only documented log roots, and resolves symlinks and parent-directory traversal before checking containment. This issue is fixed in version 7.0.0.

Published

Date2026-08-18

Updated

Date2026-08-18

RISK INFORMATION (Score: 5.5)

cvss3

Base Score: 5.5

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

1.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…