What is the official website of NVIDIA Omniverse ?

The official website of NVIDIA Omniverse is https://www.nvidia.com/omniverse.

What is NVIDIA Omniverse's cybersecurity risk score?

NVIDIA Omniverse has an AI-generated cybersecurity risk score of 767 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has NVIDIA Omniverse experienced?

According to Rankiteo, NVIDIA Omniverse currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has NVIDIA Omniverse been affected by any supply chain cyber incidents ?

According to Rankiteo, NVIDIA Omniverse has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: ServiceNow (Incident ID: SER1781072827) GFN Cloud Internet Servies (Incident ID: NVI1777818242) LiteLLM (Incident ID: AQU1774671948) GFN Cloud Internet Servies (Incident ID: GFN1778300632) LUXSHARE-ICT (Incident ID: GEENVILUX1769153015) LUXSHARE-ICT (Incident ID: NVILUX1768977485) LUXSHARE-ICT Taiwan (Incident ID: LUX1769023968) LUXSHARE-ICT Taiwan (Incident ID: LUXNVITES1769024668) LUXSHARE-ICT Taiwan (Incident ID: LUXNVI1769024063)

Does NVIDIA Omniverse have SOC 2 Type 1 certification ?

According to Rankiteo, NVIDIA Omniverse is not certified under SOC 2 Type 1.

Does NVIDIA Omniverse have SOC 2 Type 2 certification ?

According to Rankiteo, NVIDIA Omniverse does not hold a SOC 2 Type 2 certification.

Does NVIDIA Omniverse comply with GDPR ?

According to Rankiteo, NVIDIA Omniverse is not listed as GDPR compliant.

Does NVIDIA Omniverse have PCI DSS certification ?

According to Rankiteo, NVIDIA Omniverse does not currently maintain PCI DSS compliance.

Does NVIDIA Omniverse comply with HIPAA ?

According to Rankiteo, NVIDIA Omniverse is not compliant with HIPAA regulations.

Does NVIDIA Omniverse have ISO 27001 certification ?

According to Rankiteo,NVIDIA Omniverse is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does NVIDIA Omniverse operate in ?

NVIDIA Omniverse operates primarily in the Software Development industry.

How many employees does NVIDIA Omniverse have ?

NVIDIA Omniverse employs approximately None employees people worldwide.

Does NVIDIA Omniverse own any subsidiaries ?

NVIDIA Omniverse presently has no subsidiaries across any sectors.

How many LinkedIn followers does NVIDIA Omniverse have ?

NVIDIA Omniverse's official LinkedIn profile has approximately 89,238 followers.

What is the NAICS classification code for NVIDIA Omniverse ?

NVIDIA Omniverse is classified under the NAICS code 5112, which corresponds to Software Publishers.

Does NVIDIA Omniverse have a Crunchbase profile ?

No, NVIDIA Omniverse does not have a profile on Crunchbase.

Does NVIDIA Omniverse have a LinkedIn profile ?

Yes, NVIDIA Omniverse maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/nvidia-omniverse.

How many cybersecurity incidents has NVIDIA Omniverse experienced ?

As of August 11, 2026, Rankiteo reports that NVIDIA Omniverse has experienced 24 cybersecurity incidents.

How many peer or competitor companies does NVIDIA Omniverse have ?

NVIDIA Omniverse has an estimated 30,602 peer or competitor companies worldwide.

What types of cybersecurity incidents has NVIDIA Omniverse faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach, Ransomware, Vulnerability and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

NVIDIA Omniverse

Boost Score +25 with badge (5 left)

767

/1000

Fair

792

/1000

Fair

NVIDIA Omniverse Vendor Cyber Rating & Cyber Score

nvidia.com

Add Your Compliance Badge

NVIDIA Omniverse™ is a platform of APIs, SDKs, and services that enable developers to easily integrate Universal Scene Description (OpenUSD) and NVIDIA RTX™ rendering technologies into existing software tools and simulation workflows for building AI systems.

NVIDIA Omniverse A.I CyberSecurity Scoring

Scoring History

NVIDIA Omniverse

NVIDIA Omniverse CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

NVIDIA

Vulnerability

100

7/2026

NVI1785342276

NVIDIA

Vulnerability

6/2026

NVI1781685010

NVIDIA

Vulnerability

6/2026

ServiceNow

SER1781072827

NVIDIA

Cyber Attack

100

5/2026

OKTMICATTNVI178...

NVIDIA

Vulnerability

5/2026

NVI1779301531

NVIDIA

Breach

5/2026

GFN Cloud Inter...

NVI1777818242

NVIDIA

Vulnerability

100

3/2026

LiteLLM

AQU1774671948

NVIDIA

Breach

3/2026

GFN Cloud Inter...

GFN1778300632

NVIDIA

Vulnerability

1/2026

NVI1769776911

NVIDIA

Cyber Attack

100

12/2025

KUBNVITENALIAMA...

NVIDIA Omniverse

Vulnerability

7/2025

NVI556071425

NVIDIA

Vulnerability

6/2025

NVI1769009245

NVIDIA

Vulnerability

6/2025

NVI1769095320

NVIDIA Omniverse

Vulnerability

100

6/2025

NVI251080925

NVIDIA

Vulnerability

1/2025

NVI1769023427

NVIDIA Omniverse

Vulnerability

100

6/2024

NVI108041225

NVIDIA

Cyber Attack

100

10/2022

SAMNVI177578132...

NVIDIA Omniverse

Cyber Attack

02/2022

NVI202626222

NVIDIA

Cyber Attack

6/2019

LUXSHARE-ICT

GEENVILUX176915...

NVIDIA

Cyber Attack

6/2019

LUXSHARE-ICT

NVILUX176897748...

NVIDIA

Ransomware

100

6/2019

LUXSHARE-ICT Ta...

LUX1769023968

NVIDIA

Ransomware

100

6/2019

LUXSHARE-ICT Ta...

LUXNVITES176902...

NVIDIA

Ransomware

100

6/2019

LUXSHARE-ICT Ta...

LUXNVI176902406...

NVIDIA Omniverse

Breach

10/2014

NVI431072925

Loading…

A.I.

NVIDIA Omniverse Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for NVIDIA Omniverse

Incidents vs Software Development Industry Avg (This Year)

No incidents recorded for NVIDIA Omniverse in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for NVIDIA Omniverse in 2026.

Incident Types NVIDIA Omniverse vs Software Development Industry Avg (This Year)

No incidents recorded for NVIDIA Omniverse in 2026.

Incident History - NVIDIA Omniverse (X = Date, Y = Severity)

Loading…

SUBSIDIARY

NVIDIA Omniverse Subsidiaries

NVIDIA Omniverse

Software Development

Website: https://www.nvidia.com/omniverse

Company Size: 10,001+ employees

NVIDIAComputer Hardware Manufacturing

NVIDIA WorkstationDesktop Computing Software Products

NVIDIA for StartupsTechnology, Information and Internet

NVIDIA Data CenterComputer Hardware Manufacturing

NVIDIA RoboticsComputer Hardware Manufacturing

NVIDIA Design and VisualizationDesign Services

NVIDIA AIComputer Hardware Manufacturing

Loading…

NVIDIA Omniverse Similar Companies

PhonePe

cb phonepe.com

PhonePe Group is India’s leading fintech company, proudly recognized as India’s #1 Trusted Digital Payments* Brand for three consecutive years. Our flagship product, the PhonePe app was launched in August 2016, has rapidly become the preferred consumer payments app in India. In just eight years, PhonePe has gained over 57 crore + registered users and established a digital payments acceptance network of over 4 crore+ merchants spread across Tier 2,3 cites and beyond, covering 99% of the postal codes in the country. Building on our leadership in digital payments, PhonePe Group has expanded into financial services—including insurance, lending, and wealth management—along with new consumer tech ventures such as Pincode, a hyperlocal ecommerce platform, Indus App Store - India’s first localized app store, and Share.Market- A wealth and investment platform (app & website), catering to investors and traders needs. Headquartered in India, PhonePe Group aligns its diverse portfolio of businesses with our vision We're committed to empowering every Indian by unlocking the flow of money and providing equal access to easy & secure payments and financial services.

Amdocs

cb amdocs.com

Who are we? Amdocs helps those who build the future to make it amazing. With our market-leading portfolio of software products and services, we unlock our customers’ innovative potential, empowering them to provide next-generation communication and media experiences for both the individual end user and enterprise customers. Our employees around the globe are here to accelerate service providers’ migration to the cloud, enable them to differentiate in the 5G era, and digitalize and automate their operations. Listed on the NASDAQ Global Select Market, Amdocs had revenue of $5.00 billion in fiscal 2024. For more information, visit http://www.amdocs.com/ At Amdocs, our mission is to empower our employees to 'Live Amazing, Do Amazing' every day. We believe in creating a workplace where you not only excel professionally but also thrive personally. Through our culture of making a real impact, fostering growth, embracing flexibility, and building connections, we enable them to live meaningful lives while making a difference in the world.

bigbasket

cb bigbasket.com

Starting our journey in 2011, today, bigbasket - a Tata Enterprise is India’s largest online supermarket with over 13 million customers and a presence in 60+ cities & towns. With our presence spanning the entire spectrum of consumer needs, we operate through a range of business lines - bigbasket, bbnow, bbinstant, bbdaily, fresho, bbmandi, and bbsaathi. We offer convenience by making grocery shopping easy for customers while enhancing their experience. With more than 47,000 employees, we are a proud & growing bigbasket family. With our businesses scaling, we are keen on working with the best talent in the industry. Every bigbasketeer embodies the ‘Spirit of bb’ that defines our work ethos. We believe in nurturing a people-first environment where the health and well-being of our employees are always prioritised. Fostering bigbasket’s value system, we encourage humility, transparency, integrity, and respect amongst each other to create an elevated work culture. At bigbasket, we empower every bigbasketeer with responsibility and ownership in everything they do. Being a customer-centric organisation, we operate with a maniacal focus on customers ensuring we always deliver our best. bigbasket has been proudly certified as a Great Place to Work, and Great Place to Work for Women. Our business model is designed to create opportunities for our country’s gig economy. We have achieved the highest ranking in the Fairwork India Ratings for Gig Workers. Through our DEI initiative – Aarambh, we foster Diversity, Equity, & Inclusion driving a workplace where everybody feels welcomed. Alongside this, we take conscious and proactive measures towards curtailing our impact on the environment. Our electric vehicles delivery fleet and solar panel equipped warehouses help us minimize carbon emissions. By promoting organic farming, we encourage fresh farm produce contributing to good land and soil health. #JoinTheSquad and be a part of our growth story!

Red Hat

redhat.com

Red Hat is the world’s leading provider of enterprise open source solutions, using a community-powered approach to deliver high-performing Linux, hybrid cloud, edge, and Kubernetes technologies. We hire creative, passionate people who are ready to contribute their ideas, help solve complex problems, and make an impact. Opportunities are open. Join us.

Bosch USA

bosch.us

The Bosch Group’s strategic objective is to create solutions for a connected life. Bosch improves quality of life worldwide with innovative products and services that are "Invented for life" and spark enthusiasm. Podcast: http://bit.ly/beyondbosch Imprint: https://www.bosch.us/corporate-information/ Privacy statement: https://bit.ly/binaprv Terms of use: We strive to provide a friendly space for all social media users. Please note that comments on the BoschUSA page are not necessarily representative of the opinions of BoschUSA, nor do we confirm their accuracy. Therefore, at its discretion, BoschUSA reserves the right to remove any comment that is: - Indecent, obscene, pornographic, threatening, violent, discriminatory, political, religious, racist, abusive, derogatory, misleading, off-topic - Violating the rights of others (especially personal, copyright and performance protection rights) - Any contribution in the form of links, text and/or images that are advertisements of third parties - Actions that adversely affect the proper functioning of BoschUSA channels, as well as documents that contain harmful viruses or Like invites.

IDEMIA

cb idemia.com

IDEMIA Secure Transactions (IST) is a leading provider of payment, connectivity, and cybersecurity solutions, serving billions of people worldwide. With decades of expertise in cryptography and credential issuance, IST is trusted by over 2000 financial institutions, mobile operators, automotive manufacturers, and IoT providers worldwide. IST is a division of IDEMIA Group. IDEMIA Public Security, another division of IDEMIA Group, is the premium provider of convenient and trusted biometric-based solutions, transforming public and private organizations across the globe. Follow them here: https://www.linkedin.com/company/idemia-public-security/

Alibaba Group

alibabagroup.com

🌍Alibaba Group is on a mission to make it easy to do business anywhere! Guided by our passion and imagination, we’re leading the way in AI, cloud computing and e-commerce. We aim to build the future infrastructure of commerce, and we aspire to be a good company that lasts for 102 years.

Wolt

wolt.com

Wolt is a Helsinki-based technology company with a mission to bring joy, simplicity and earnings to the neighborhoods of the world. Wolt develops a local commerce platform that connects people looking to order food, groceries, and other goods with people interested in selling and delivering them. Wolt was founded in 2014 and joined forces with DoorDash (NASDAQ: DASH) in 2022. Together, we operate in more than 30 countries today.

PayPal

paypal.com

We're championing possibilities for all by making money fast, easy, and more enjoyable. Our hope is to unlock opportunities for people in their everyday lives and empower the millions of people and businesses around the world who trust, rely, and use PayPal every day. For support, visit the PayPal Help Center. https://payp.al/help For employment opportunities, check out our job openings in the 'Jobs' tab. We're an equal opportunity employer that welcomes diversity, and offer generous benefits to help you thrive at work and in your free time. NMLS#910457: https://nmlsconsumeraccess.org/

Loading…

NEWS

NVIDIA Omniverse CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 17, 2026 07:40 AM

51WORLD Becomes NVIDIA's Global L4 Simulation Partner

51WORLD, a leading player in China's L3+ simulation sector, has achieved a 53.5% market share and has now partnered with NVIDIA to further...

Read Article

March 17, 2026 05:50 AM

Delta Unveils AI Digital Twins Built on NVIDIA Omniverse

Delta, a global leader in power management and smart green solutions, unveiled a range of innovative AI-based digital twin applications...

Read Article

March 17, 2026 05:12 AM

Switch Integrates NVIDIA Omniverse DSX Blueprint into Switch's EVO AI Factories

Switch announced that they have integrated the NVIDIA Omniverse DSX Blueprint into their EVO AI Factory architecture and LDC EVO operating...

Read Article

March 16, 2026 08:51 PM

NVIDIA Releases AI Factory Reference Design and Digital Twin Blueprint

NVIDIA has announced the release of the NVIDIA Vera Rubin DSX AI Factory reference design, a guide for building codesigned AI infrastructure...

Read Article

March 16, 2026 11:34 AM

L&T Technology Services Launches NVIDIA-Powered AI Lung Digital Twin Platform for Advanced Respiratory Diagnostics

L&T Technology Services Limited, a global leader in AI, Digital & R&D Consulting Services, has announced its next-generation, AI-powered...

Read Article

March 15, 2026 12:10 PM

NVIDIA & Dassault Systèmes: Accelerating Industrial AI with Digital Twins & Omniverse

Industrial AI, digital twins, and advanced simulation technologies are rapidly transforming how companies design, optimize,...

Read Article

March 14, 2026 04:10 PM

Nvidia and Alphabet Emerge as Leaders in Agentic AI

Nvidia CEO Jensen Huang recently declared that the "agentic AI inflection point has arrived," referring to AI programs capable of acting on...

Read Article

March 02, 2026 08:00 AM

Smart Spatial Showcases Enterprise Digital Twin Deployments at NVIDIA GTC 2026

Smart Spatial, a provider of a Digital Twin OS platform, announced that enterprise digital twin deployments built on Unreal Engine and...

Read Article

February 23, 2026 08:00 AM

Nvidia Advances OT Cybersecurity with AI and Accelerated Computing

Partnerships**: Nvidia is collaborating with leading cybersecurity firms including Akamai, Palo Alto Networks, Forescout, Xage Security,...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-8718

SUMMARY

tls_opt_dtls_peer_connection_id_value_get() in subsys/net/lib/sockets/sockets_tls.c, which handles getsockopt(SOL_TLS, TLS_DTLS_PEER_CID_VALUE), passed the caller-supplied optval directly to mbedtls_ssl_get_peer_cid() without verifying the buffer was at least MBEDTLS_SSL_CID_OUT_LEN_MAX (default 32) bytes. mbedtls_ssl_get_peer_cid() copies the peer-negotiated DTLS Connection ID (length 1..MBEDTLS_SSL_CID_OUT_LEN_MAX) into that buffer without a destination-size parameter, so a caller-supplied optlen smaller than the CID causes a write of up to 31 bytes past the buffer end. In CONFIG_USERSPACE builds the getsockopt syscall verifier (z_vrfy_zsock_getsockopt) bounce-buffers the user's optval into a kernel allocation of exactly optlen bytes (k_usermode_alloc_from_copy -> z_thread_malloc), so an unprivileged user thread that passes a small optlen on a connected DTLS socket with Connection ID enabled induces a kernel-heap buffer overflow, with the overflowing content being the remote peer's CID. The defect requires CONFIG_MBEDTLS_SSL_DTLS_CONNECTION_ID, an established DTLS session with a negotiated peer CID, and (for the kernel-crossing case) CONFIG_USERSPACE. Introduced when the TLS_DTLS_CID option was added (v3.5.0). The fix rejects callers whose optlen is below MBEDTLS_SSL_CID_OUT_LEN_MAX with -EINVAL.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 8.4)

cvss3

Base Score: 8.4

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:H

Impact Score

5.8

Exploitability

REFERENCES

CVE-2026-48161

SUMMARY

react18-use is a React 19 use hook shim. Between 2026-05-19 01:07:01 and 2026-05-19 15:20:43, the default branch contained malicious commits 7b79148d1495a2505f9277da295a98cf176f4496 through 7b79148d1495a2505f9277da295a98cf176f4496 that executed remote attacker-controlled code on developer machines during `npm install`. The commits were removed by force-push, but local clones, forks, and direct-SHA URLs may still contain them, and `npm install` against an affected checkout will still execute the code today. The package was not published to npm. `src/install.js` was added and wired into the `postinstall` script. It fetched a JavaScript payload from an attacker-controlled HTTPS endpoint (configurable via an environment variable), disabled TLS verification, and evaluated the response as code with `require` available. Execution was deliberately skipped on CI and cloud/serverless environments, targeting developer workstations. The second-stage payload was attacker-hosted and cannot be reconstructed. Assume full compromise of anything reachable from a Node process with the user's permissions. Those who ran `npm install` against an affected checkout on a developer machine on or after 2026-05-19 01:07:01 should treat the machine as compromised, rotate every credential the machine could reach, audit account activity since 2026-05-19 01:07:01, and clean local clones.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: )

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/dai-shi/react18-use/security/advisories/GHSA-32xh-vg5f-64fm

CVE-2026-11812

SUMMARY

The UpdateHub management subsystem (subsys/mgmt/updatehub/updatehub.c) drives every update operation through a single file-scope ctx structure that holds the CoAP block context, payload buffer, status code, socket, and a one-element poll-fd array fds[1]. Access to ctx was not serialized, and prepare_fds() wrote ctx.fds[ctx.nfds] and incremented ctx.nfds with no bounds check. Two independent paths mutate ctx concurrently: the background autohandler running on the system workqueue, and user-triggered operations reached through the updatehub run shell command, direct API calls, or — since the operations are exposed as syscalls — userspace threads. When a second flow enters prepare_fds() while ctx.nfds is already 1, the write lands one element past the array; by struct layout it overlaps the adjacent ctx.sock/ctx.nfds members. More broadly, the unsynchronized sharing lets two flows interleave connection setup and teardown, double-closing a socket descriptor or scribbling the shared buffers. The result is corruption of the update subsystem's internal state and denial of service of the firmware-update path; the out-of-bounds write is contained within the ctx structure and there is no demonstrated path to memory outside it or to code execution. Triggering requires a local actor able to invoke update operations (or, with CONFIG_USERSPACE, an unprivileged userspace thread) and to win a timing race against the background handler; remote peers cannot control the race timing. The fix serializes the entry points with a mutex and adds a bounds check to prepare_fds().

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 2.5)

cvss3

Base Score: 2.5

Complexity: HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

REFERENCES

CVE-2026-11811

SUMMARY

The UpdateHub over-the-air update client's start_coap_client() in subsys/mgmt/updatehub/updatehub.c leaks the CoAP/DTLS socket descriptor on its connection-setup failure paths. The shared error: cleanup gated socket closing on a ret > 0 flag, but ret was set to -1 immediately after the socket was created, so when zsock_setsockopt() (DTLS) or zsock_connect() subsequently failed the gate was false and cleanup_connection() was never called. The open descriptor in the global ctx.sock was then overwritten by the next attempt, permanently leaking it from the socket / net_context pool until reboot. The failing setup path is reached every time the OTA client tries to contact the UpdateHub server and the connection cannot be established — driven automatically by the periodic autohandler() poll (and on demand via the updatehub_probe()/updatehub_update() API or the updatehub run shell command). The DTLS handshake/connect outcome is influenceable by a network or on-path attacker who drops, resets, or otherwise disrupts traffic to the server, and also fails naturally whenever the server is unreachable. Each failed attempt permanently leaks one descriptor; once the shared socket pool is exhausted, networking degrades device-wide until the device is rebooted, a denial-of-service condition. Severity is low because the leak rate is bounded by the configured OTA poll interval (default once per 24 hours), the effect is gradual and recovered by reboot, and only builds with the UpdateHub client enabled are affected. There is no memory-corruption, information-disclosure, or authentication impact.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: 3.7)

cvss3

Base Score: 3.7

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

2.2

REFERENCES

CVE-2025-30241

SUMMARY

Certain web interface components in affected TP-Link Aginet devices do not validate and sanitize user-supplied input properly before passing it to system-level command execution functions. An authenticated adjacent attacker may inject specially crafted input to execute arbitrary operation system commands with elevated privileges. Successful exploitation may allow execution of arbitrary system commands, potentially leading to full device compromise.

Published

Date2026-08-10

Updated

Date2026-08-10

RISK INFORMATION (Score: )

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://www.tp-link.com/us/support/faq/5239/

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…