What is the official website of Narrative Projects ?

The official website of Narrative Projects is https://narrativeprojects.co/.

What is Narrative Projects's cybersecurity risk score?

Narrative Projects has an AI-generated cybersecurity risk score of 754 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Narrative Projects experienced?

According to Rankiteo, Narrative Projects currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Narrative Projects been affected by any supply chain cyber incidents ?

According to Rankiteo, Narrative Projects has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Narrative Projects have SOC 2 Type 1 certification ?

According to Rankiteo, Narrative Projects is not certified under SOC 2 Type 1.

Does Narrative Projects have SOC 2 Type 2 certification ?

According to Rankiteo, Narrative Projects does not hold a SOC 2 Type 2 certification.

Does Narrative Projects comply with GDPR ?

According to Rankiteo, Narrative Projects is not listed as GDPR compliant.

Does Narrative Projects have PCI DSS certification ?

According to Rankiteo, Narrative Projects does not currently maintain PCI DSS compliance.

Does Narrative Projects comply with HIPAA ?

According to Rankiteo, Narrative Projects is not compliant with HIPAA regulations.

Does Narrative Projects have ISO 27001 certification ?

According to Rankiteo,Narrative Projects is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Narrative Projects operate in ?

Narrative Projects operates primarily in the Technology, Information and Internet industry.

How many employees does Narrative Projects have ?

Narrative Projects employs approximately 2 people worldwide.

Does Narrative Projects own any subsidiaries ?

Narrative Projects presently has no subsidiaries across any sectors.

How many LinkedIn followers does Narrative Projects have ?

Narrative Projects's official LinkedIn profile has approximately 45 followers.

Does Narrative Projects have a Crunchbase profile ?

No, Narrative Projects does not have a profile on Crunchbase.

Does Narrative Projects have a LinkedIn profile ?

Yes, Narrative Projects maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/narrativeprojects.

How many cybersecurity incidents has Narrative Projects experienced ?

As of August 9, 2026, Rankiteo reports that Narrative Projects has not experienced any cybersecurity incidents.

How many peer or competitor companies does Narrative Projects have ?

Narrative Projects has an estimated 15,143 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Narrative Projects

Boost Score +25 with badge (5 left)

754

/1000

Fair

779

/1000

Fair

Narrative Projects Vendor Cyber Rating & Cyber Score

narrativeprojects.co

Add Your Compliance Badge

Narrative is your workflow copilot to help you say goodbye to tedious tasks, predict fashion trends, hand over better technical documents, and match with suppliers. We are here to help you bring your ideas to market faster than ever before.

Narrative Projects A.I CyberSecurity Scoring

Scoring History

Narrative Projects

Narrative Projects CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Narrative Projects Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Narrative Projects

Incidents vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for Narrative Projects in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Narrative Projects in 2026.

Incident Types Narrative Projects vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for Narrative Projects in 2026.

Incident History - Narrative Projects (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Narrative Projects Subsidiaries

Narrative Projects

Technology, Information and Internet

Website: https://narrativeprojects.co/

Company Size: 2

HKSTP - Hong Kong Science and Technology Parks CorporationIT Services and IT Consulting

Fano (Fano Labs)Technology, Information and Internet

LalamoveSoftware Development

Well Being Digital Limited (WBD101)Semiconductor Manufacturing

PanopticAISoftware Development

FreightAmigoIT Services and IT Consulting

NovoheartBiotechnology Research

Sycra Technologies LimitedAppliances, Electrical, and Electronics Manufacturing

Centre for Immunology & Infection - C2iResearch Services

Belun Technology Company LimitedMedical Equipment Manufacturing

ArbeleBiotechnology Research

SquareDog RoboticsIndustrial Automation

Multi-Scale Medical Robotics Center LtdMedical Equipment Manufacturing

ClusterTech LimitedInformation Technology & Services

HKCeND - Hong Kong Center for Neurodegenerative Diseases (香港神經退行性疾病中心)Research Services

Centre for Advances in Reliability and SafetyAppliances, Electrical, and Electronics Manufacturing

PuraPharm Corporation LimitedPharmaceutical Manufacturing

Aura LabsIT Services and IT Consulting

Studio AOEAdvertising Services

ALiA BioTechMedical Equipment Manufacturing

CredoSemiconductor Manufacturing

HKRITA - The Hong Kong Research Institute of Textiles and Apparel LimitedResearch Services

Atom Semiconductor Technologies Ltd.Semiconductors

PerksBarSoftware Development

Integrated Solutions LimitedSoftware Development

GoByBus.hkIT Services and IT Consulting

Imsight TechnologySoftware Development

Imsight – Health CornerSoftware Development

BeeInventor 點子建IT Services and IT Consulting

n-hop technologies LimitedTelecommunications

eNano Health LimitedBiotechnology Research

Profiled Group LimitedAppliances, Electrical, and Electronics Manufacturing

QBS System LimitedIT Services and IT Consulting

Growgreen LimitedComputers and Electronics Manufacturing

JSAB Technologies LimitedSemiconductor Manufacturing

Zensis LimitedIT Services and IT Consulting

uHey LimitedSpectator Sports

Homie Living | 靈感+購物香港線上家居平台Furniture and Home Furnishings Manufacturing

Life Code LimitedBiotechnology Research

Datago Technology LimitedFinancial Services

Sebit Company LimitedIT Services and IT Consulting

2GoTradeFinancial Services

HSK GeneTech | ProbioLifeBiotechnology Research

AIVISoftware Development

LaSense Technology LimitedIndustrial Machinery Manufacturing

AppoTech LimitedSemiconductors

Centre for Oncology and ImmunologyResearch Services

The GrindTechnology, Information and Internet

BrainNow Medical Technology LimitedMedical Device

Motive Force Technology LimitedSoftware Development

Hong Kong Academy of EngineeringNon-profit Organizations

AppciderIT Services and IT Consulting

Add Care LimitedBiotechnology

Hessner TechnologiesResearch Services

ReflectionBio – By Patients, For PatientsBiotechnology Research

XOOCITY Hong Kong Metaverse 数宇城香港Technology, Information and Internet

Propagation Systems LimitedAppliances, Electrical, and Electronics Manufacturing

Stellerus Technology LimitedInformation Services

LinkedTech Solutions LimitedInformation Technology & Services

Insight Robotics Ltd.IT Services and IT Consulting

BioMapBiotechnology Research

August RoboticsComputers and Electronics Manufacturing

Buy&ShipInternet Marketplace Platforms

Dayta AIIT Services and IT Consulting

CryptoBLKBlockchain Services

ApoideaTechnology, Information and Media

Blockchain Solutions LimitedIT Services and IT Consulting

CerTrazeInformation Technology & Services

RaSpectSoftware Development

Singular GlobalBlockchain Services

Pantheon Lab LimitedSoftware Development

MadheadInformation Technology & Services

Hong Kong Industrial Artificial Intelligence and Robotics Centre (FLAIR)Appliances, Electrical, and Electronics Manufacturing

HKSTP CapitalVenture Capital and Private Equity Principals

Loading…

Narrative Projects Similar Companies

Fanatics

fanaticsinc.com

Fanatics is a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.

NetEase

cb netease.com

As a leading internet technology company based in China, NetEase, Inc. (NASDAQ: NTES and HKEX:9999, "NetEase") provides premium online services centered around content creation. With extensive offerings across its expanding gaming ecosystem, NetEase develops and operates some of China's most popular and longest running mobile and PC games. Powered by industry-leading inhouse R&D capabilities in China and globally, NetEase creates superior gaming experiences, inspires players and passionately delivers value for its thriving community worldwide. Beyond games, NetEase service offerings include its majority-controlled subsidiaries Youdao (NYSE:DAO), China's leading technology-focused intelligent learning company, and Cloud Music (HKEX:9899), China's leading online music content community, as well as Yanxuan, NetEase's private label consumer lifestyle brand.

Times Internet

timesinternet.in

At Times Internet, we create premium digital products that simplify and enhance the lives of millions. As India’s largest digital products company, we have a significant presence across a wide range of categories, including News, Sports, Fintech, and Enterprise solutions. Our portfolio features market-leading and iconic brands such as TOI, ET, NBT, Cricbuzz, Times Prime, Times Card, Indiatimes, Whatshot, Abound, Willow TV, Techgig and Times Mobile among many more. Each of these products is crafted to enrich your experiences and bring you closer to your interests and aspirations. As an equal opportunity employer, Times Internet strongly promotes inclusivity and diversity. We are proud to have achieved overall gender pay parity in 2018, verified by an independent audit conducted by Aon Hewitt. We are driven by the excitement of new possibilities and are committed to bringing innovative products, ideas, and technologies to help people make the most of every day. Join us and take us to the next level!

Myntra

myntra.com

At Myntra, we don’t just follow fashion - we define it. As India's leading fashion, lifestyle, and beauty destination, we bring together the best of style, technology, and innovation to create a seamless shopping experience for our customers. With a commitment to empowering self-expression, we curate over 13,000+ brands and labels, blending global trends with India’s unique fashion pulse. Our people are at the heart of everything we do. We thrive on innovation and impact, where data-driven insights and cutting-edge technology shape the future of fashion. We encourage out-of-the-box thinking, collaboration with leaders and experts, and driving meaningful change. Myntraites have a passion for fashion - we take pride in being India's voice in fashion and in the brand we stand for. Our non-hierarchical, inclusive culture values ownership, meritocracy, and self-driven individuals who challenge the status quo and grow with every opportunity. We believe in empowering every Myntraite by providing the freedom to shape their career, fostering an environment where creativity thrives, and ensuring well-being and self-expression for all. If you thrive in a fast-paced, result-driven environment and share our passion for fashion, Myntra is the place for you. Explore opportunities: https://jobs.myntra.com/home Be The Trend. Be Myntra.

Mynet

mynet.com

Türk internet kullanıcılarının en çok tercih ettiği dijital platform olan Mynet, 1999 yılından bugüne liderliğini koruyor. Kendi alanında sayısız ilki gerçekleştiren öncü internet devi Mynet, Türkiye'nin dijital ekosisteminin kalkınmasına ve gelişmesine destek olmayı sürdürüyor. Her ay ortalama 42 milyon internet kullanıcısına erişen Mynet'in sosyal ağlardaki toplam kitlesi ise 10 milyonu geride bırakmış bulunuyor. Mynet, ziyaretçilerine her ay 100 milyondan fazla video izletiyor. 1 milyonun üzerinde kullanıcısı olan Türkiye’nin en büyük online video eğitim platformu Vidobu ile Türkçe bilen tüm coğrafyanın ihtiyacı olan eğitimleri, alanında uzman eğitmenler ile veriyor. Böylece yüksek kalitedeki eğitimlerin herkes tarafından, her yerden ve düşük maliyetle erişilebilir olmasını sağlıyor. Ayrıca Vidobu, eğitim sektöründeki Global SAAS projesi olan Corviq ile kurumların kendi özel video öğrenme platformlarını oluşturmasını sağlayan bir altyapı da sunuyor. En büyük oyun stüdyolarından biri olan Mynet Games adı altında yayınladığı oyunlarla 10 milyondan fazla oyuncuyla buluşuyor. Kelime Savaşı oyunu Apple tarafından PubG ve Subway Surfers ile birlikte 2019’un en çok indirilen 3 oyunundan biri olarak açıklandı. ABD pazarına sunduğumuz Homer City, HR Master ve Racing Wheels adlı oyunlarımız dünya sıralamasında zirvede yer almıştır. ABD pazarına hybrid-casual’dan mid-core oyunlara kadar oyun geliştiren CASUAL MONSTER ve RARE FORGE şirketlerimiz ile de oyun sektöründe büyümeye devam ediyoruz.

Swiggy

swiggy.com

Swiggy is India’s pioneering on-demand convenience platform, catering to millions of consumers each month. Founded in 2014, its mission is to elevate the quality of life for the urban consumer by offering unparalleled convenience. With an extensive footprint in food delivery, Swiggy Food collaborates with nearly 2 lakh restaurants across 600+ cities. Swiggy Instamart, its quick commerce platform operating in 120+ cities, delivers groceries and other essentials across 40+ categories in 10 minutes. Fueled by a commitment to innovation, Swiggy continually incubates and integrates new services like Swiggy Dineout and Swiggy Genie into its multi-service app. Leveraging cutting-edge technology and Swiggy One, the country’s only membership program offering benefits across food, quick commerce, dining out, and pick-up and drop services, Swiggy aims to provide a superior experience to its consumers. For more information, visit www.swiggy.com

Zomato

cb zomato.com

Zomato’s mission statement is “better food for more people.” Since our inception in 2010, we have grown tremendously, both in scope and scale - and emerged as India’s most trusted brand during the pandemic, along with being one of the largest hyperlocal delivery networks in the country. Today, Zomato represents a wide range of cultures through its diversified 5000+ team members, 3.5 lakh+ delivery partners, and our biggest collective of the finest restaurant partners. We are grateful that our business is able to provide upward social and economic movement for millions of households – of our delivery partners, as well as restaurant staff. We think of all of us as one big family! Our passion is driven by purpose and we take immense pride in our initiative ‘Feeding India’, one of India’s largest not-for-profits working to ensure that nobody in India goes to bed hungry. As of now, Feeding India provides over 150,000 nutritious meals to the underprivileged every day. In April 2020, Feeding India ran one of the largest food distribution drives in the world during the first wave of COVID, and distributed 78 million meals to daily wagers across the length and breadth of the country. During the second wave of COVID-19, Feeding India was again the first to act. We were able to source over 9,000 oxygen concentrators and distributed them for free to government hospitals across the country. This helped save millions of lives during one of the worst humanitarian crises faced by India in the recent times. We’re innovating hard to make last-mile delivery carbon neutral, to eliminate the use of plastic packaging, create meaningful opportunities in the gig economy, and to feed our country’s ever-growing appetite for high-quality, affordable, and hygienic food, one delivery at a time!

Primary School

primaryschool.com.au

www.primaryschool.com.au is a directory of sites for students and lesson plans and reference material for teachers and parents. It is currently averaging up to 350,000 unique visitors a month and has over 44,000 subscribers to its free weekly newsletter which showcases the latest internet based resources. The site ranks first in results for primary school related searches in Google. It is popular because it is simple, safe and relevant.

Synechron

synechron.com

At Synechron, we believe in the power of digital to transform businesses for the better. Our global consulting firm combines creativity and innovative technology to deliver industry-leading digital solutions. Synechron’s progressive technologies and optimization strategies span end-to-end Artificial Intelligence, Consulting, Digital, Cloud & DevOps, Data, and Software Engineering, servicing an array of noteworthy financial services and technology firms. Through research and development initiatives in our FinLabs we develop solutions for modernization, from Artificial Intelligence and Blockchain to Data Science models, Digital Underwriting, mobile-first applications and more. Over the last 20+ years, our company has been honored with multiple employer awards, recognizing our commitment to our talented teams. With top clients to boast about, Synechron has a global workforce of 14,000+, and has 55 offices in 20 countries within key global markets. For more information on the company, please visit our website:www.synechron.com.

Loading…

NEWS

Narrative Projects CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

December 03, 2025 01:53 PM

Will Booz Allen’s US$99 Million Navy NextG Contract Win Change Booz Allen Hamilton Holding's (BAH) Narrative

In November 2025, Booz Allen Hamilton announced it had secured a US$99 million contract from the U.S. Navy's Military Sealift Command to...

Read Article

December 03, 2025 02:31 AM

Did New Climb and TERAGO Deals Just Reframe Fortinet's (FTNT) Integrated Security Platform Narrative?

In late November and early December 2025, Climb and TERAGO each announced new partnerships with Fortinet to bring its enterprise-grade...

Read Article

December 02, 2025 07:18 AM

Why Accenture (ACN) Is Up 5.7% After Major AI and Cybersecurity Partnership Announcements

On December 1, 2025, CrowdStrike announced new security integrations with AWS, naming Accenture as the inaugural launch partner for Falcon...

Read Article

November 25, 2025 03:24 PM

Is Increased Legal Scrutiny Reshaping the Investment Narrative for Fortinet (FTNT)?

In the past week, multiple law firms announced class action lawsuits against Fortinet, alleging the company overstated its business...

Read Article

November 23, 2025 06:38 PM

The Bull Case For F5 (FFIV) Could Change Following Major Cybersecurity Breach and Shareholder Probe

F5, Inc. recently disclosed it had experienced a significant cybersecurity breach involving a nation-state actor, leading to long-term...

Read Article

November 22, 2025 11:33 PM

Could Palo Alto Networks' (PANW) Bet on AI and Quantum Cybersecurity Redefine Its Competitive Edge?

Palo Alto Networks recently reported fiscal first-quarter results that exceeded analyst expectations, announced plans to acquire...

Read Article

November 22, 2025 08:00 AM

Can TELUS (TSX:T) Balance Innovation in Cybersecurity and Real Estate to Drive Long-Term Value?

Earlier this month, TELUS announced a Quantum-Safe VPN service offering commercial Post-Quantum Cryptography protection and celebrated the...

Read Article

November 18, 2025 08:00 AM

The Complete List of Hacker And Cybersecurity Movies

Hacker's Movie Guide” with Foreword by Steve Wozniak, co-founder of Apple.

Read Article

November 15, 2025 08:00 AM

How Investors May Respond To SentinelOne (S) AI-Powered Cybersecurity Suite and Expanded AWS Partnerships

Earlier this month, SentinelOne unveiled a suite of AI-powered cybersecurity advancements at its OneCon 2025 conference, including deep...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-71983

SUMMARY

MSI Radix AXE6600 router firmware version v781521 contains a command injection vulnerability in the wps.cgi interface that allows remote attackers to execute arbitrary commands by injecting malicious input through the pin2g, pin5g, or pin6g parameters. Attackers can exploit these unsanitized parameters to execute arbitrary commands on the affected device and obtain root privileges.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71502

SUMMARY

CTI-Transmute contains a stored cross-site scripting vulnerability caused by insufficient neutralization of Vue template expression delimiters in server-rendered user-controlled data. An unauthenticated attacker can create a public conversion whose name or description contains a malicious Vue expression using the application's configured [[ ... ]] delimiters. User profile names may provide an additional injection vector. Although Jinja HTML escaping is applied, the resulting value is subsequently included in a DOM region compiled by Vue. Vue interprets the attacker-controlled value as a template expression rather than ordinary text. By accessing the JavaScript Function constructor from within the expression, an attacker can execute arbitrary JavaScript in the security context of the CTI-Transmute origin. The application's nonce-based Content Security Policy does not prevent exploitation because the Vue runtime compiler requires the unsafe-eval policy exception. The malicious payload is stored by the application and executed whenever another user opens an affected page, such as the public conversion detail page. The victim may be a normal user or an administrator. Successful exploitation could allow the attacker to: * Access data available to the victim through the application. * Extract API keys, tokens, or other sensitive information exposed to the page. * Perform authenticated actions using the victim's session. * Modify conversions or other application data. * Escalate the impact by targeting an administrator. A demonstrated payload can use [].constructor.constructor(...) to obtain the JavaScript Function constructor and execute arbitrary code. The regression tests also show that a short first-stage payload could retrieve an uncapped conversion description and evaluate a larger second-stage payload. The patch addresses the vulnerability by registering a global Jinja finalize hook that inserts a zero-width Unicode word joiner inside every Vue delimiter found in server-rendered values. This prevents Vue from recognizing the values as template expressions while preserving their visible representation.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: )

cvss4

Base Score: 5.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:L/VI:L/VA:N/SC:L/SI:L/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-71958

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the quicksetup.cgi interface. A remote attacker can write overly long strings to the test4, ssid2, and username fields and execute arbitrary commands by crafting a specific payload, or cause the device to crash.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71957

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a buffer overflow vulnerability in the app.cgi interface. A remote attacker can write an overly long string to the netAcc.addlist[].name field and execute arbitrary commands by crafting a specific payload, or cause the device to crash.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-71956

SUMMARY

D-Link DWR-M961 devices with hardware version C1 and software version 1.1.2_C1_202602110044 contain a command injection vulnerability in the app.cgi interface. A remote attacker can inject arbitrary malicious commands into the netDig.ping.dst field, resulting in command execution with root privileges.

Published

Date2026-08-08

Updated

Date2026-08-08

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…