What is the official website of Novartis România ?

The official website of Novartis România is http://www.novartis.com.ro.

What is Novartis România's cybersecurity risk score?

Novartis România has an AI-generated cybersecurity risk score of 755 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Novartis România experienced?

According to Rankiteo, Novartis România currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Novartis România been affected by any supply chain cyber incidents ?

According to Rankiteo, Novartis România has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Novartis România have SOC 2 Type 1 certification ?

According to Rankiteo, Novartis România is not certified under SOC 2 Type 1.

Does Novartis România have SOC 2 Type 2 certification ?

According to Rankiteo, Novartis România does not hold a SOC 2 Type 2 certification.

Does Novartis România comply with GDPR ?

According to Rankiteo, Novartis România is not listed as GDPR compliant.

Does Novartis România have PCI DSS certification ?

According to Rankiteo, Novartis România does not currently maintain PCI DSS compliance.

Does Novartis România comply with HIPAA ?

According to Rankiteo, Novartis România is not compliant with HIPAA regulations.

Does Novartis România have ISO 27001 certification ?

According to Rankiteo,Novartis România is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Novartis România operate in ?

Novartis România operates primarily in the Pharmaceutical Manufacturing industry.

How many employees does Novartis România have ?

Novartis România employs approximately 94 people worldwide.

Does Novartis România own any subsidiaries ?

Novartis România presently has no subsidiaries across any sectors.

How many LinkedIn followers does Novartis România have ?

Novartis România's official LinkedIn profile has approximately 211,127 followers.

What is the NAICS classification code for Novartis România ?

Novartis România is classified under the NAICS code 3254, which corresponds to Pharmaceutical and Medicine Manufacturing.

Does Novartis România have a Crunchbase profile ?

No, Novartis România does not have a profile on Crunchbase.

Does Novartis România have a LinkedIn profile ?

Yes, Novartis România maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/novartis-romania.

How many cybersecurity incidents has Novartis România experienced ?

As of August 16, 2026, Rankiteo reports that Novartis România has experienced 2 cybersecurity incidents.

How many peer or competitor companies does Novartis România have ?

Novartis România has an estimated 5,727 peer or competitor companies worldwide.

What types of cybersecurity incidents has Novartis România faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack and Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Novartis România

Boost Score +25 with badge (5 left)

755

/1000

Fair

780

/1000

Fair

Novartis România Vendor Cyber Rating & Cyber Score

novartis.com.ro

Add Your Compliance Badge

La Novartis, scopul nostru este să reimaginăm medicina pentru a îmbunătăți și prelungi viața oamenilor. Folosim știința inovatoare și tehnologiile digitale, pentru a aborda unele dintre cele mai provocatoare probleme de sănătate ale societății. Descoperim și dezvoltăm tratamente revoluționare și găsim noi modalități de a le pune la dispozitia a cât mai multor oameni posibil. Novartis este locul unde știința întâlnește speranța. Descoperim misterele biologiei și dezvoltăm noi tehnologii pentru combaterea bolilor și, ascultându-vă perspectivele și experiențele, creăm medicamente care contează pentru pacienții din întreaga lume. În România, suntem peste 650 de angajați dedicați susținerii pacientilor și sistemului de sănătate. Pentru noi,

Novartis România A.I CyberSecurity Scoring

Scoring History

Novartis România

Novartis România CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Novartis

Breach

2/2026

NOV1774449180

Novartis România

Cyber Attack

100

06/2022

NOV21267722

Loading…

A.I.

Novartis România Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Novartis România

Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)

No incidents recorded for Novartis România in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Novartis România in 2026.

Incident Types Novartis România vs Pharmaceutical Manufacturing Industry Avg (This Year)

No incidents recorded for Novartis România in 2026.

Incident History - Novartis România (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Novartis România Subsidiaries

Novartis România

Pharmaceutical Manufacturing

Website: http://www.novartis.com.ro

Company Size: 94

NovartisPharmaceutical Manufacturing

Novartis IndiaPharmaceutical Manufacturing

Novartis SciencePharmaceutical Manufacturing

Novartis Gene TherapiesBiotechnology Research

Novartis SlovakiaPharmaceutical Manufacturing

Novartis NederlandPharmaceutical Manufacturing

Novartis Nederland - NeurologieGeneesmiddelenproductie

Novartis Nederland - OncologieGeneesmiddelenproductie

Novartis Nederland - ReumatologieGeneesmiddelenproductie

Novartis Nederland - HematologieGeneesmiddelenproductie

Novartis Nederland - DermatologieGeneesmiddelenproductie

Novartis Nederland - Cardiovascular, Renal & Metabolism Geneesmiddelenproductie

Novartis ItaliaPharmaceutical Manufacturing

Novartis DanmarkPharmaceutical Manufacturing

Novartis SverigePharmaceutical Manufacturing

Novartis SlovakiaPharmaceutical Manufacturing

Novartis FinlandPharmaceutical Manufacturing

Novartis MagyarországPharmaceutical Manufacturing

Novartis CanadaPharmaceutical Manufacturing

Novartis SlovakiaPharmaceutical Manufacturing

Novartis BrasilPharmaceutical Manufacturing

Novartis USPharmaceutical Manufacturing

Novartis SlovakiaPharmaceutical Manufacturing

Novartis SerbiaPharmaceutical Manufacturing

Novartis IsraelPharmaceutical Manufacturing

Novartis Ireland Pharmaceutical Manufacturing

Novartis Hong KongPharmaceutical Manufacturing

Novartis MedicalPharmaceutical Manufacturing

Novartis SlovakiaPharmaceutical Manufacturing

Novartis SingaporePharmaceutical Manufacturing

Novartis NorgePharmaceutical Manufacturing

Novartis BeluxPharmaceutical Manufacturing

Novartis EspañaPharmaceutical Manufacturing

Novartis DeutschlandPharmaceutical Manufacturing

Novartis PortugalPharmaceutical Manufacturing

Novartis ColombiaPharmaceutical Manufacturing

Novartis, Australia & New ZealandPharmaceutical Manufacturing

Novartis ArgentinaPharmaceutical Manufacturing

Novartis US MedicalPharmaceutical Manufacturing

Novartis SlovakiaPharmaceutical Manufacturing

Novartis in SloveniaPharmaceutical Manufacturing

Novartis Gulf | نوفارتس الخليجPharmaceutical Manufacturing

Novartis MéxicoPharmaceutical Manufacturing

Loading…

Novartis România Similar Companies

Zoetis

zoetis.com

The world’s leading animal health company. We’ve been innovating ways to predict, prevent, detect, and treat animal illness for over 70 years, and we continue to stand by those raising and caring for animals worldwide – from veterinarians and pet owners to livestock farmers. Our leading portfolio and pipeline makes a difference in over 100 countries. Community Guidelines: This page is intended to share how Zoetis is advancing care for animals. We aspire to create a supportive community, but there are guidelines to which posts and comments on this page must adhere. If your post references a side effect related to any Zoetis product, we may contact you for more information. To monitor the safety of Zoetis products, we advise you to call our Veterinary Medical Information and Product Support Team at 1-888-963-8471; Support Team is available Mon-Fri 9am to 6:30pm ET. We reserve the right to remove any post/comment that violates LinkedIn Guidelines. As a last resort, we reserve the right to block users that demonstrate a repeated pattern of violating LinkedIn’s spirit of constructive, professional discourse. We respectfully request that you refrain from posting comments including: Unsolicited and/or unverified medical advice Vulgarity and/or profanity Discriminatory and/or derogatory comments, hate speech Politics and religion Personal attacks and/or threats Promotion of illegal activity Copyright/trademark infringements Topics that may be considered spam/advertising Our regular business hours are Mon-Fri 9am to 5pm ET. Zoetis does not endorse and is not responsible for information and opinions shared by community members. The information shared is provided for educational purposes only and is not intended to replace discussions with an animal healthcare professional. Testimonials represent individual experience only and the experiences and opinions of community members may be unique to the speaker. Terms of Use: https://www.zoetis.com/terms-of-use

UCB

cb ucb.com

At UCB, we believe everyone deserves to live the best life they can - as free as possible from the challenges and uncertainty of disease. Our purpose is to support people living with severe central nervous system and immunological conditions by delivering meaningful solutions that go beyond medicine. We are driven by the experiences of patients and caregivers, and inspired to pursue innovations that create real value - not just in clinical outcomes, but in everyday moments, dreams pursued, and simple pleasures enjoyed. Our ambition is to unlock transformative science and technologies that respond to unmet needs and elevate lives. From our headquarters in Belgium to nearly 40 countries around the world, we nurture a culture of respect and care. By listening deeply and collaborating across borders and disciplines, we enable cutting-edge research shaped by patients’ needs. Through strong connections with healthcare professionals, partners, and communities, we strive to make a lasting impact - today and into the future. We're inspired by patients, driven by science.

MSD

msd.com

At MSD, known as Merck & Co., Inc., Rahway, NJ, USA in the United States and Canada, we are unified around our purpose: We use the power of leading-edge science to save and improve lives around the world. For more than 130 years, we have brought hope to humanity through the development of important medicines and vaccines. We aspire to be the premier research-intensive biopharmaceutical company in the world – and today, we are at the forefront of research to deliver innovative health solutions that advance the prevention and treatment of diseases in people and animals. We foster a diverse and inclusive global workforce and operate responsibly every day to enable a safe, sustainable and healthy future for all people and communities. For more information, visit www.msd.com and connect with us on Facebook, Instagram, Twitter, and YouTube.

Bristol Myers Squibb

cb bms.com

At Bristol Myers Squibb, we work every day to transform patients’ lives through science. That work inspires some of the most interesting, meaningful, and life-changing careers you’ll experience. Join us and pursue innovative ideas alongside some of the brightest minds in biopharma, collaborating with a team rich in diversity of experiences, and perspectives. We have built a sustainable pipeline of potential therapies and are leveraging translational medicine and data analytics to understand how we can deliver the right medicine to the right patient, at the right time, to achieve the best outcome. Whether in a scientific, business or supporting function, a career at BMS means you’ll be inspired every day to grow and thrive through opportunities that are uncommon in scale and scope. Here, you’ll be on the cutting edge of powerful innovation in oncology, hematology, immunology, cardiovascular disease, and fibrosis, with colleagues united in the mission to help patients. Through the Bristol Myers Squibb Foundation, we also promote health equity and seek to improve health outcomes of populations disproportionately affected by serious diseases and conditions. Our mission is to give new hope to help patients prevail over serious disease – it drives everything we do. Review our Social Media Community Guidelines at: https://www.bms.com/social-media-community-guidelines.html

Viatris

viatris.com

Viatris Inc. (NASDAQ: VTRS) is a global healthcare company uniquely positioned to bridge the traditional divide between generics and brands, combining the best of both to more holistically address healthcare needs globally. With a mission to empower people worldwide to live healthier at every stage of life, we provide access at scale. In 2022 alone, we supplied high-quality medicines to approximately 1 billion patients around the world. With our exceptionally extensive and diverse portfolio of medicines, a one-of-a-kind global supply chain designed to reach more people when and where they need them, and the scientific expertise to address some of the world’s most enduring health challenges, access takes on deep meaning at Viatris. We have the ability to touch all of life’s moments, from birth to end of life, acute conditions to chronic diseases. We are headquartered in the U.S., with global centers in Pittsburgh, Shanghai and Hyderabad, India Social Media Guidelines: https://newsroom.viatris.com/social-media-community-guidelines Investors: https://investor.viatris.com Corporate Social Responsibility: https://www.viatris.com/sustainability Connect with Viatris Instagram: https://www.instagram.com/viatrisinc X: https://www.x.com/viatrisinc Viatris and our recruiting firms will not ask for sensitive personal information, such as your social security number, date of birth or bank account details via text, email or social media. Additionally, Viatris representatives do not request payment or personal bank information nor send payment to purchase hardware on your own. Viatris.com is the primary source of all company job postings and authorized third-party career websites.

SUN PHARMA

sunpharma.com

Sun Pharma is the world's fourth-largest speciality generic pharmaceutical company and No. 1 in India. We provide high-quality, affordable medicines trusted by customers and patients in over 100 countries. Sun Pharma's global presence is supported by more than 40 manufacturing facilities spread across 5 continents, R&D centres across the globe, and a multicultural workforce comprising over 50 nationalities. Sun Pharma fosters excellence through innovation supported by strong R&D capabilities comprising around 3,000 scientists and R&D investments of over 6-8% of annual revenues. At Sun, our people are our greatest asset. Ours has never been a story of individual brilliance but of cultivating a culture of realising collective potential. In our journey, everyone is enabled to take charge in an environment that offers limitless growth opportunities. We are with you every step of the way, so you can shine for years to come. With the launch of our Employee Value Proposition (EVP), we define our promise to ‘Create Your Own Sunshine'—driven by the three pillars of Better Every Day, Take Charge, and Thrive Together. These pillars drive progress at Sun so that people can achieve what they would have thought impossible. Learn more about our EVP here: https://sunpharma.com/careers/

Merck Group

merckgroup.com

This channel is not intended for U.S. and Canadian visitors. Merck operates in the U.S. and Canada as EMD Serono in Healthcare, MilliporeSigma in Life Science and EMD Electronics in Electronics. An unaffiliated and unrelated company, Merck & Co., Inc., Kenilworth, NJ, US holds the rights in the trademark MERCK in the U.S. and Canada. _______________________________ We are Merck, a leading global science and technology company headquartered in Germany. We are curious explorers, courageous pioneers, and ingenious inventors. Our colleagues across the globe love innovating with science and technology to enrich people’s lives with our solutions in Life Science, Healthcare, and Electronics. Together, we dream big and are passionate about caring for our rich mix of people, customers, patients, and the planet. We believe in the positive power of science and technology. It has determined our actions since 1668 and inspires us to continue researching for a future worth living. As a family-owned company with over 350 years of experience, we stand for sustainability, responsibility, and innovative strength. We take pride in being a diverse and inclusive company that values and fosters the talents and abilities of our employees. That's why we are always looking for curious minds that see themselves imagining the unimaginable with us. Work your Magic and join Merck. Legal Disclaimer: www.merckgroup.com/en/legal-disclaimer.html Data Privacy Declaration: www.merckgroup.com/en/privacy-statement

EMS

cb ems.com.br

Fundada há mais de 60 anos e com capital 100% nacional, a EMS é a líder do mercado farmacêutico brasileiro há 19 anos consecutivos, pertencente ao Grupo NC, um dos maiores conglomerados brasileiros. A empresa ocupa também a liderança no segmento de genéricos desde 2013 (IQVIA 2019) e está entre os maiores laboratórios em preferência prescritiva no Brasil. Tem forte presença em PDVs de todo o país e atuação nas áreas de Prescrição Médica, Genéricos, Marcas, OTC e Hospitalar, fabricando medicamentos para praticamente todas as especialidades da Medicina. Possui fábricas em Hortolândia (SP), Manaus (AM), Brasília (DF) e Jaguariúna (SP). A EMS apoia ações de responsabilidade social dentro e fora do Brasil. Em 2017, por exemplo, o laboratório fechou parceria com a Organização Mundial da Saúde (OMS) para doar 100% do medicamento para erradicar, nos próximos anos, em todo o planeta, a bouba, doença negligenciada. A EMS é a única farmacêutica no mundo a ter abraçado essa causa. O Centro de Pesquisa & Desenvolvimento da EMS no Brasil é o mais moderno da América Latina. Na Itália, a EMS tem o laboratório de pesquisas MonteResearch. O foco de atuação do laboratório é a inovação nas seguintes frentes: inovação incremental; genéricos de alta complexidade; medicamentos biotecnológicos, por meio da empresa Bionovis; e inovação disruptiva, por meio da Brace Pharma, empresa da EMS instalada em 2013 nos Estados Unidos. Ainda, nos EUA, por meio de sua controlada Vero Biotech, localizada em Atlanta, Geórgia, a EMS, recentemente, obteve a aprovação de seu primeiro produto revolucionário submetido à FDA (Food and Drug Administration), posicionando o laboratório como uma empresa de inovação no mercado global. Com aportes frequentes em infraestrutura fabril e em pesquisa de ponta para desenvolver produtos inovadores, eficazes e seguros, a EMS, que já exporta para mais de 40 países, está preparada para continuar cuidando das pessoas que querem viver cada vez mais e melhor.

Alembic Pharmaceuticals Limited

alembic-india.com

Established in 1907, Alembic Pharmaceuticals Limited is a leading pharmaceutical company in India. The Company is vertically integrated with the ability to develop, manufacture and market pharmaceutical products, pharmaceutical substances and Intermediates. Alembic is the market leader in the Macrolides segment of anti-infective drugs in India. Alembic's manufacturing facilities are located in Vadodara and Baddi in Himachal Pradesh. The plant at Vadodara has the largest fermentation capacity in India. The Panelav facility houses the API and formulation manufacturing (both US FDA approved) plants. The plant at Baddi, Himachal Pradesh manufactures formulations for the domestic and non-regulated export market. The company has a state of the art Research Centre at Vadodara.

Loading…

NEWS

Novartis România CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 11, 2019 12:21 AM

Novartis Romania appoints new general manager

Novartis Romania, the local subsidiary of Swiss pharma group Novartis and the third-biggest player on the pharmaceutical market in Romania, appointed the Dutch...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19917

SUMMARY

A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file delete_food_items1.php. Executing a manipulation of the argument checkbox can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-74767

SUMMARY

Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress() without enforcing a limit on the resulting uncompressed data. An attacker able to submit a crafted DAA file containing highly compressed data could cause Pandora to decompress a relatively small input into a very large amount of data in memory. Because the decompressed chunks are accumulated to construct the internal ISO image, this could result in excessive memory consumption and potentially CPU exhaustion, causing the extraction worker to become unresponsive, terminate, or affect the availability of the Pandora service. The patch introduces bounded decompression using decompressobj().decompress() with max_extracted_filesize, verifies the cumulative size of decompressed chunks, and raises a dedicated ZipBomb exception when the configured limit is exceeded. Pandora then aborts extraction and reports the file as too large.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/f4294a873f86fbf2569c289e329fff2f52ca50c9

CVE-2026-74764

SUMMARY

Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract() without applying an extraction filter. An attacker able to submit a specially crafted TAR archive containing malicious member paths, such as paths using ../ sequences or absolute paths, could cause extracted files to be written outside the intended extraction directory. This may allow the attacker to overwrite files accessible to the Pandora worker process and could potentially result in application compromise, arbitrary code execution, or denial of service depending on the files targeted and the privileges of the Pandora process. The vulnerability is corrected by using Python's filter='data' extraction filter, which rejects or sanitizes dangerous TAR members, including paths that escape the destination directory and unsafe link targets. The weakness corresponds to MITRE's general path traversal category, which includes archive extraction cases where attacker-controlled filenames cause files to be written outside the intended directory.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 10.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/186b58d41e04248a154d274fffb5813e7fa2012e

CVE-2026-73055

SUMMARY

Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed to a command, an attacker can inject a tilde payload to disclose the user's home directory location and, depending on usage, alter the location on which a command operates.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 4.8)

cvss3

Base Score: 4.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.2

REFERENCES

CVE-2026-73054

SUMMARY

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocket URI with duplicated query parameters to bypass access auth code validation and receive the live kernel event stream including document identifiers, titles, and operation logs.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…