What is the official website of Ofsted ?

The official website of Ofsted is http://www.gov.uk/ofsted.

What is Ofsted's cybersecurity risk score?

Ofsted has an AI-generated cybersecurity risk score of 774 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Ofsted experienced?

According to Rankiteo, Ofsted currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Ofsted been affected by any supply chain cyber incidents ?

According to Rankiteo, Ofsted has been affected by a supply chain cyber incident involving Fortinet, with the incident ID FORGOV1783297461.

Does Ofsted have SOC 2 Type 1 certification ?

According to Rankiteo, Ofsted is not certified under SOC 2 Type 1.

Does Ofsted have SOC 2 Type 2 certification ?

According to Rankiteo, Ofsted does not hold a SOC 2 Type 2 certification.

Does Ofsted comply with GDPR ?

According to Rankiteo, Ofsted is not listed as GDPR compliant.

Does Ofsted have PCI DSS certification ?

According to Rankiteo, Ofsted does not currently maintain PCI DSS compliance.

Does Ofsted comply with HIPAA ?

According to Rankiteo, Ofsted is not compliant with HIPAA regulations.

Does Ofsted have ISO 27001 certification ?

According to Rankiteo,Ofsted is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Ofsted operate in ?

Ofsted operates primarily in the Government Administration industry.

How many employees does Ofsted have ?

Ofsted employs approximately 2,070 people worldwide.

Does Ofsted own any subsidiaries ?

Ofsted presently has no subsidiaries across any sectors.

How many LinkedIn followers does Ofsted have ?

Ofsted's official LinkedIn profile has approximately 239,068 followers.

What is the NAICS classification code for Ofsted ?

Ofsted is classified under the NAICS code 92, which corresponds to Public Administration.

Does Ofsted have a Crunchbase profile ?

No, Ofsted does not have a profile on Crunchbase.

Does Ofsted have a LinkedIn profile ?

Yes, Ofsted maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/ofsted.

How many cybersecurity incidents has Ofsted experienced ?

As of July 31, 2026, Rankiteo reports that Ofsted has experienced 26 cybersecurity incidents.

How many peer or competitor companies does Ofsted have ?

Ofsted has an estimated 13,085 peer or competitor companies worldwide.

What types of cybersecurity incidents has Ofsted faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability, Breach, Ransomware and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Ofsted

Boost Score +25 with badge (5 left)

774

/1000

Fair

799

/1000

Fair

Ofsted Vendor Cyber Rating & Cyber Score

www.gov.uk

Add Your Compliance Badge

Ofsted is the Office for Standards in Education, Children’s Services and Skills. We report directly to Parliament and we are independent and impartial. We inspect services providing education and skills for learners of all ages. We also inspect and regulate services which care for children and young people. Every week, we carry out hundreds of inspections and regulatory visits throughout England.

Ofsted A.I CyberSecurity Scoring

Scoring History

Ofsted

Ofsted CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

UK Ministry of Defe...

Breach

100

7/2026

UK-1785371161

Foreign and Commonw...

Cyber Attack

100

7/2026

Fortinet

FORGOV178329746...

Cabinet Office

Breach

5/2026

CAB1777832879

Ofsted

Vulnerability

12/2025

DCM1765433387

Ofsted

Breach

11/2025

UK-523475211042...

Ofsted

Cyber Attack

100

10/2025

UK-556215510202...

Foreign and Commonw...

Breach

10/2025

FOR1766412101

Ofsted

Ransomware

100

9/2025

DCM1764770468

Ofsted

Breach

100

8/2025

UK-841081625

Ofsted

Breach

6/2025

HMR745060625

UK Home Office

Breach

4/2025

UK-1777581082

Ofsted

Breach

100

7/2024

UK-421016421104...

Ofsted

Breach

100

6/2024

UK-169221610212...

Ofsted

Breach

100

4/2024

UK-493314910132...

Ofsted

Breach

100

8/2023

UK-707072025

Ofsted

Breach

100

7/2023

UK-221002221104...

Ofsted

Cyber Attack

100

01/2023

DEP225811123

Ofsted

Breach

100

6/2022

UK-289342811142...

Ofsted

Breach

100

2/2022

UK-503305010202...

Ofsted

Breach

1/2022

UK-559215509112...

Ofsted

Breach

11/2021

GOV1527121122

Ofsted

Breach

100

10/2021

UK-576295710232...

HM Revenue & Custom...

Cyber Attack

9/2021

HMR1782752907

Ofsted

Breach

100

8/2021

UK-552175511242...

Ofsted

Breach

100

6/2021

UK-089380810032...

Ofsted

Breach

100

6/2010

UK-069420609202...

Loading…

A.I.

Ofsted Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Ofsted

Incidents vs Government Administration Industry Avg (This Year)

No incidents recorded for Ofsted in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Ofsted in 2026.

Incident Types Ofsted vs Government Administration Industry Avg (This Year)

No incidents recorded for Ofsted in 2026.

Incident History - Ofsted (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Ofsted Subsidiaries

Ofsted

Government Administration

Website: http://www.gov.uk/ofsted

Company Size: 1,001-5,000 employees

UK Civil ServiceGovernment Administration

Department for EducationGovernment Administration

Buying for SchoolsGovernment Administration

DfE Digital, Data and TechnologyGovernment Relations Services

TeachingPrimary and Secondary Education

Skills PartnerGovernment Administration

UK Ministry of DefenceDefense and Space Manufacturing

Defence ProcurementDefense & Space

OfgemUtilities

Department for Business and TradeGovernment Administration

Business SupportGovernment Relations

GREAT Trade and InvestmentWholesale Import and Export

UK Business and Trade - North AmericaGovernment Relations Services

UK Export FinanceFinancial Services

Charity Commission for England and WalesGovernment Administration

Office of Rail and Road (ORR)Truck Transportation

Competition and Markets AuthorityGovernment Administration

OfqualGovernment Administration

OfwatUtilities

Regulators’ Alliance for Progressing Infrastructure Development (RAPID)Utilities

HM Revenue & CustomsGovernment Administration

UK Home OfficeGovernment Administration

HM Land RegistryGovernment Administration

National Infrastructure and Service Transformation Authority (NISTA)Government Administration

Attorney General's Office (UK)Government Administration

Wales Office/Swyddfa CymruGovernment Administration

Scotland OfficeGovernment Administration

Valuation Office AgencyGovernment Administration

Northern Ireland OfficeGovernment Administration

NS&IFinancial Services

Government Actuary's DepartmentGovernment Administration

UK Statistics Authority Government Administration

Cabinet OfficeGovernment Administration

HM Government Public AppointmentsGovernment Administration

GOV.UKGovernment Relations Services

Department for Transport (DfT), United KingdomGovernment Administration

Department for Environment, Food and Rural AffairsGovernment Administration

Defra digital, data, technology and securityIT Services and IT Consulting

Defra Public AppointmentsGovernment Administration

HM TreasuryPublic Policy Offices

Office of Financial Sanctions Implementation (OFSI)Government Administration

Food Standards AgencyGovernment Administration

Starting a Food BusinessFood & Beverages

Forestry CommissionGovernment Administration

Crown Prosecution ServiceLaw Practice

Department for Culture, Media and SportGovernment Administration

DCMS Public AppointmentsGovernment Administration

Department for International Development (DFID)Government Administration

UK-Africa Investment Summit 2020Government Administration

Foreign and Commonwealth OfficeGovernment Administration

Government Legal DepartmentLegal Services

DstlDefense and Space Manufacturing

Data Science ChallengeGovernment Administration

Department of Health and Social CareGovernment Relations Services

Office for National StatisticsGovernment Administration

Census2021Government Administration

Government Statistical ServiceGovernment Administration

Department for Science, Innovation and TechnologyGovernment Administration

Careers at the Department for Science, Innovation and TechnologyGovernment Administration

Department for Work and Pensions (DWP)Government Administration

Disability ConfidentGovernment Administration

See PotentialGovernment Administration

Loading…

Ofsted Similar Companies

Swiss Federal Administration

admin.ch

Seven departments, the Federal Chancellery and around 70 administrative units make up the Federal Administration. With around 38,000 employees, we are one of the largest employers in Switzerland. Everyone who works for the Federal Administration actively contributes to Switzerland's well-being and shapes the future of our country. We are as varied as Switzerland itself – we stand for active diversity and inclusion. Our employees come from all over the country and the Federal Administration is present throughout Switzerland. With us, you can expect diverse, challenging and unique tasks in all kinds of subject areas and specialist fields. As a modern employer, the Federal Administration enables its employees to combine work and private life with flexible forms of work and promotes their personal development with practical training and continuing professional development. * Vacancies in the administrative units can be found on their LinkedIn pages or at stelle.admin.ch.

eThekwini Municipality

durban.gov.za

EThekwini Municipality is a Metropolitan Municipality found in the South African province of KwaZulu-Natal. Home to the world-famous city of Durban. EThekwini is the largest City in the province and the third largest city in the country. It is a sophisticated cosmopolitan city of over 3 468 088 people. It is known as the home of Africa's best-managed, busiest port and is also a major centre of tourism because of the city's warm subtropical climate and extensive beaches. The eThekwini Municipality is an employer of choice, with excellent working conditions and competitive salary packages for employees. The Municipality is committed to creating a great place to work by creating development opportunities for employees to grow. Working for eThekwini Municipality will give you a chance to make a difference in people’s lives and become part of our team to make Durban the most caring and liveable city in Africa. Some facts about eThekwini Municipality: 1. Known as South Africa’s Playground – plenty of places to visit and activities to do 2. First African city to host the Commonwealth Games 3. Historically rich with Heritage sites for Nelson Mandela and Mahatma Ghandi 4. Home to the Comrades Marathon – The worlds’ largest ultra-marathon 5. The world’s tallest bungee swing at the Moses Mabhida stadium 6. Durban Aliwal Shoal – a world top diving site 7. Durban harbour - 9th largest harbour in the world - busiest container port in Africa 8. Africa’s first Aerotropolis – Trade Port with direct links globally 9. One of the top surfing destinations in South Africa 10. Ushaka Marine World – Biggest Aquarium in Africa

Government of Alberta

alberta.ca

Work with the Alberta government to build a stronger province for current and future generations. We offer diverse and rewarding employment opportunities in an environment that encourages continuous learning and career growth. We are one of the largest employers in Alberta with over 27,000 employees throughout the province. We are an award winning organization that values respect, accountability, integrity, and excellence. Our employees share a common vision of proudly working together to build a stronger province and make a positive and lasting difference in the lives of Albertans. The people of Alberta enjoy a very high quality of life, including the lowest overall taxes in Canada. www.jobs.alberta.ca Please see our comment policy: https://www.alberta.ca/social-media-comment-policy.aspx

City of Toronto

toronto.ca

The City of Toronto is committed to fostering a positive and progressive workplace culture, and strives to build a workforce that reflects the citizens it serves. We are committed to building a high performing public service, with strong and effective leaders to enable service excellence, through high engagement and healthy and safe workplaces. Toronto is home to more than 2.9 million people whose diversity and experiences make this great city Canada’s leading economic engine and one of the world’s most diverse and livable cities. As the fourth largest city in North America, Toronto is a global leader in technology, finance, film, music, culture, and innovation, and consistently places at the top of international rankings due to investments championed by its government, residents and businesses. Toronto Public Service consists of approximately 35,771 employees, providing programs and services to Toronto residents, businesses and visitors. Additionally, the City of Toronto has a number of agencies and corporations including the Toronto Police Service, Toronto Public Library and the Toronto Transit Commission, which make up the broader municipal organization. There are 44 operating divisions and offices providing an extensive level of programs and services. We offer diverse career opportunities across a wide variety of professional, trade, administrative, managerial and other employment roles. The Toronto Public Service has won numerous awards for quality, innovation and efficiency in delivering citizen-focused services. We are proud to have been named one of Canada's Top 100 Employers, Canada's Best Diversity Employers, Top Family Friendly Employers and Greater Toronto's Top Employers. Consider joining the award-winning Toronto Public Service and help us make a difference in a great City!

Gouvernement du Québec – Carrières

quebec.ca

Travailler dans la fonction publique du Québec, c'est plus qu'une carrière! Réparti(e)s dans une vingtaine de ministères et une soixantaine d'organismes à travers le Québec, tous les gestes posés par les employé(e)s de la fonction publique façonnent l’avenir de la société et contribuent à améliorer la vie des Québécoises et Québécois; nous rendons nos routes sécuritaires; nous protégeons nos richesses naturelles; nous faisons rayonner notre culture; nous améliorons nos milieux de vie; etc. Pour nous, être au service de la population, c’est bien plus qu’une carrière! Travailler dans la fonction publique québécoise permet d’œuvrer dans différentes organisations tout en maintenant ses conditions de travail. Nous adhérons aux valeurs de compétence, d’impartialité, d’intégrité, de loyauté et de respect; nous offrons de bonnes conditions de travail, de même que des milieux de travail sains et motivants, nous valorisons l’équité, la diversité et l’inclusion par notre Programme d’accès à l’égalité en emploi dont l’objectif principal est d’assurer une meilleure représentativité des groupes victimes de discrimination en emploi, nous favorisons l’équilibre entre la vie professionnelle et personnelle, nous misons sur le développement des compétences, nous sommes fier(ères) et dévoué(e)s. Nous sommes la fonction publique du Québec!

ISSSTE

www.com

INSTITUTO DE SEGURIDAD Y SERVICIOS SOCIALES DE LOS TRABAJADORES DEL ESTADO. ES UN ORGANISMOS PÚBLICO QUE OTORGA SERVICIOS DE SALUD, PENSIONES, VIVIENDA, PRÉSTAMOS, ESTANCIAS INFANTILES, TURISMO, CULTURA, RECREACION, DEPORTE; CUYOS AFILIADOS SON TRABAJADORES DE DEPENDENCIAS GUBERNAMENTALES, CON DERECHO A LA SEGURIDAD SOCIAL. Y CUYOS OBJETIVOS INSTITUCIONALES ADEMÁS DE CONTRIBUIR A LOGRAR LOS OBJETIVOS PROPUESTOS POR EL PLAN NACIONAL DE DESARROLLO 2007 – 2012, COADYUVARÁN A LOGRAR LA VISIÓN DE LA INSTITUCIÓN ESTABLECIDA PARA EL AÑO 2030 Y CONCRETAR LA MISIÓN QUE TIENE ESTABLECIDA. MISIÓN DEL ISSSTE CONTRIBUIR A SATISFACER NIVELES DE BIENESTAR INTEGRAL DE LOS TRABAJADORES AL SERVICIO DEL ESTADO, PENSIONADOS, JUBILADOS Y FAMILIARES DERECHOHABIENTES, CON EL OTORGAMIENTO EFICAZ Y EFICIENTE DE LOS SEGUROS, PRESTACIONES Y SERVICIOS, CON ATENCIÓN ESMERADA, RESPETO, CALIDAD Y CUMPLIENDO SIEMPRE CON LOS VALORES INSTITUCIONALES DE HONESTIDAD, LEGALIDAD Y TRANSPARENCIA. VISIÓN DEL ISSSTE POSICIONAR AL ISSSTE COMO LA INSTITUCIÓN QUE GARANTICE LA PROTECCIÓN INTEGRAL DE LOS TRABAJADORES DE LA ADMINISTRACIÓN PÚBLICA FEDERAL, PENSIONADOS, JUBILADOS Y SUS FAMILIAS DE ACUERDO AL NUEVO PERFIL DEMOGRÁFICO DE LA DERECHOHABIENCIA, CON EL OTORGAMIENTO DE SEGUROS, PRESTACIONES Y SERVICIOS DE CONFORMIDAD CON LA NORMATIVIDAD VIGENTE, BAJO CÓDIGOS NORMADOS DE CALIDAD Y CALIDEZ, CON SOLVENCIA FINANCIERA, QUE PERMITAN GENERAR VALORES Y PRÁCTICAS QUE FOMENTEN LA MEJORA SOSTENIDA DE BIENESTAR, CALIDAD DE VIDA Y EL DESARROLLO DEL CAPITAL HUMANO. PARA CONOCER MAS DE NUESTRO INSTITUTO FAVOR DE CONSULTAR LA PAGINA INSTITUCIONAL WWW2.ISSSTE.GOB.MX EN DONDE SEGURAMENTE ENCONTRARAN MATERIAL DE ORIENTACION AMENO Y EXPLICATIVO ADEMAS DE LA HISTORIA DE INSTITUTO, SUS ALCANCES Y LOGROS ASI COMO LOS PROGRAMAS CON QUE CUENTA ACTUALMENTE EL INSTITUTO.

Ministry of Health Saudi Arabia

moh.gov.sa

The Ministry of Health (MOH), by way of its objectives, policies and projects included in this strategy, seeks to accomplish a promising future vision; namely, delivering best-quality integrated and comprehensive healthcare services. Carrying health conditions or health status of Saudi inhabitants to the best and highest possible level, in terms of justice and equality in providing healthcare, and in terms of effectiveness and the possibility of incurring the financial burden of the treatment and healthcare. In doing so, the MOH takes as its target meeting citizens’ aspirations in this regard, by providing them with high-quality general and specialized health services, and covering all the population with these services. Creating a sole and exclusive entity to formulate health policies including health insurance services, etc. (such as operating the recently established Health Services Council.) Adopting a public and national health strategy which focuses of the main morbidity burdens; including non-communicable diseases, nutrition, reproductive health, smoking (tobacco-use), AIDS, traffic accidents, and injuries. The system must have an effective and fair method for estimating risks and benefits. Working to diversify sources of revenues to finance the system effectively. These sources must include also public revenues and insurance premiums, in addition to the equally allocated costs and taxes.

Correios

correios.com.br

Empresa Brasileira de Correios e Telégrafos foi criada como empresa em 1969 por decreto lei. Hoje conta com mais de 100.000 empregados, tem presença em todos os municípios do Brasil. NEGÓCIO: Soluções que aproximam. MISSÃO: Fornecer soluções acessíveis e confiáveis para conectar pessoas, instituições e negócios, no Brasil e no mundo. VISÃO: Ser uma empresa de classe mundial. VALORES: A. Ética B. Meritocracia C. Respeito às Pessoas D. Compromisso com o Cliente E. Sustentabilidade

State of Indiana

IN.gov

State government is more than senators, representatives, and elected officials. We build highways, provide drivers licenses, protect our children and vulnerable populations, create jobs, connect Hoosiers to job opportunities, maintain state parks, train law enforcement officers, and we run museums and hospitals. We also provide unemployment insurance, disability, and workers compensation, among countless other services. We're 30,000 strong and still have more work to do. Find out where you fit with us at WorkForIndiana.IN.gov.

Loading…

NEWS

Ofsted CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

January 05, 2026 08:00 AM

Telford college launching networking events - starting with AI and cyber security

Telford College is launching a new series of employer networking events – kicking off with a seminar exploring the fast-moving worlds of...

Read Article

September 26, 2025 07:00 AM

Kido nursery hackers threaten to publish more children’s profiles

Criminals calling themselves Radiant say they will post additional private data online unless they are paid.

Read Article

September 05, 2025 07:00 AM

Back to School: key regulatory updates for the Autumn Term

Understanding the key changes to law and guidance which came into force on 1 September 2025.

Read Article

March 12, 2025 07:00 AM

South Devon College Skills Summit tackles dangerous cyber attacks

'Cyber security breaches are happening on a daily basis to businesses everywhere'

Read Article

September 07, 2024 07:00 AM

Safety, cybersecurity and stranger danger: Police share back-to-school tips for new school year

Police in the West Midlands are reminding parents of safety advice now children have gone back to school.

Read Article

May 10, 2024 07:00 AM

Ofsted slates US firm with £5m DfE bootcamps contract

A US firm that enticed the Department for Education into handing over £5 million to deliver skills bootcamp training despite having no employees in England has...

Read Article

March 31, 2024 07:00 AM

NASUWT conference: Teachers pass motion calling for suicide prevention support

Teachers have supported calls for all school leaders to be given suicide prevention training amid warnings of a mental health emergency.

Read Article

December 10, 2023 08:00 AM

Building a cyber resilient service: A guide for directors of children’s services

This document aims to support directors and their senior team to develop proactive, protective strategies and capabilities to enhance the...

Read Article

November 06, 2023 08:00 AM

British Army apprenticeships praised by OFSTED

A government inspection into quality and standards from the Office for Standards in Education, Children's Services and Skills (OFSTED),...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66720

SUMMARY

The GOOSE subscriber component improperly validates the UTC timestamp field in unauthenticated IEC 61850 GOOSE (EtherType 0x88B8) Layer-2 multicast messages. A specially crafted GOOSE frame containing an undersized timestamp field can trigger a heap out-of-bounds read during message processing, causing the process to crash and resulting in a denial-of-service condition.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-66421

SUMMARY

OpenClaw Dashboard contains a stored cross-site scripting vulnerability that allows unauthenticated remote attackers to execute arbitrary JavaScript in the administrator's browser session by injecting HTML markup into agent transcript messages processed through the sessions API. Attackers can craft a message containing inline event handler payloads such as an img tag with an onerror attribute within the 60-character rendering budget, which is stored in the session transcript and interpolated unsanitized into innerHTML on the default landing page, allowing theft of session tokens and unauthorized calls to authenticated administrative endpoints including agent instruction file modification.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 9.3)

cvss3

Base Score: 9.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:H/A:N

cvss4

Base Score: 8.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:N/SC:H/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.8

Exploitability

2.8

REFERENCES

CVE-2026-66420

SUMMARY

MeshCentral 1.1.21 contains a cross-site WebSocket hijacking protection bypass vulnerability that allows unauthenticated remote attackers to hijack authenticated administrator sessions by exploiting an unconditional early return in the CheckWebServerOriginName() function within webserver.js when self-signed certificates are in use. Attackers can open cross-origin WebSocket connections to any of the twelve WebSocket endpoints, send crafted action commands to exfiltrate the server sessionKey used to sign session cookies, forge session tokens as arbitrary users, and gain full remote control of all managed devices governed by the MeshCentral instance.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:A/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

2.8

REFERENCES

CVE-2026-66369

SUMMARY

The GOOSE parser contains an off-by-one boundary-handling flaw that can be triggered by a single unauthenticated Layer-2 multicast frame on the process bus. When specific GOOSE message fields are processed, the parser advances its internal buffer position incorrectly, resulting in a heap out-of-bounds read. On affected platforms, this condition reliably terminates the subscriber process and causes a denial-of-service.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

CVE-2026-66364

SUMMARY

The GOOSE payload parser contains a boundary handling flaw that can be triggered by a single unauthenticated Layer 2 multicast frame on the process bus. When processing specific payload fields, an attacker controlled inner element length may exceed its enclosing length, causing the parser to over read by one byte. This out-of-bounds read reliably terminates the subscriber process, resulting in a denial-of-service condition.

Published

Date2026-07-30

Updated

Date2026-07-30

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

cvss4

Base Score: 7.1

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

2.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…