What is the official website of Oracle Health ?

The official website of Oracle Health is https://www.oracle.com/health/.

What is Oracle Health's cybersecurity risk score?

Oracle Health has an AI-generated cybersecurity risk score of 667 out of 1000, indicating a Weak security posture according to Rankiteo's assessment.

How many security incidents has Oracle Health experienced?

According to Rankiteo, Oracle Health currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Oracle Health been affected by any supply chain cyber incidents ?

According to Rankiteo, Oracle Health has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Oracle (Incident ID: ORA1781180663) Oracle (Incident ID: ORAUNI1781123069) Oracle (Incident ID: TULORA1777415654) Snowflake (Incident ID: JONGENMCDGOL1775507547) Oracle (Incident ID: BROBECTHEORAABB1773750615) Oracle (Incident ID: NO-SHOPRELOB1773534483) Oracle (Incident ID: MSG1772483822) Oracle (Incident ID: MGMCAEORAWYN1771962331) Oracle (Incident ID: HYPORA1773686454) Oracle (Incident ID: CONDAVORASANASA1770645741) Oracle (Incident ID: DARHARPRICOLCLE1767881845) Oracle (Incident ID: MADMICKORORA1773232260) Oracle (Incident ID: ADIHEAHARMARTHEJAG1767017696) Microsoft Security (Incident ID: AMAORAMIC1770695748) Tencent Cloud (Incident ID: CLO1769705152) Oracle (Incident ID: ORAMSG1772238496) Snowflake (Incident ID: MEREQUUNIMAEMGMGOOTOYSNOALLORARIPTIC1775528897) Oracle (Incident ID: PRIORAUNI1766419165) Oracle (Incident ID: ORA1766435444) Oracle (Incident ID: NHS3432334111425) Oracle (Incident ID: BAR1765043770) BleepingComputer (Incident ID: F50032500101925) Oracle (Incident ID: ORAWIT1773930753) Oracle (Incident ID: ORAPAR1766015901) Oracle (Incident ID: TULORA1779078400) Oracle (Incident ID: MARORA1772484170) Oracle (Incident ID: COX53102453112425) Oracle (Incident ID: ORATHE1770237797) Salesloft (Incident ID: SAL0932309111025) Oracle (Incident ID: ANYSOT1770810849) Oracle (Incident ID: ORAHYP1773650183) Salesloft (Incident ID: ORA1692116100725) moveIT Software (Incident ID: ORA4202442101025) Oracle (Incident ID: JAG2592025111525) Oracle (Incident ID: BRO3105131112625) Oracle (Incident ID: ORA5662156100625) Oracle Health (Incident ID: ORA455040125) Oracle Health (Incident ID: ORA526032825) Salesforce (Incident ID: THEINGSALJAGORASYNDAV1769095448)

Does Oracle Health have SOC 2 Type 1 certification ?

According to Rankiteo, Oracle Health is not certified under SOC 2 Type 1.

Does Oracle Health have SOC 2 Type 2 certification ?

According to Rankiteo, Oracle Health does not hold a SOC 2 Type 2 certification.

Does Oracle Health comply with GDPR ?

According to Rankiteo, Oracle Health is not listed as GDPR compliant.

Does Oracle Health have PCI DSS certification ?

According to Rankiteo, Oracle Health does not currently maintain PCI DSS compliance.

Does Oracle Health comply with HIPAA ?

According to Rankiteo, Oracle Health is not compliant with HIPAA regulations.

Does Oracle Health have ISO 27001 certification ?

According to Rankiteo,Oracle Health is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Oracle Health operate in ?

Oracle Health operates primarily in the IT Services and IT Consulting industry.

How many employees does Oracle Health have ?

Oracle Health employs approximately None employees people worldwide.

Does Oracle Health own any subsidiaries ?

Oracle Health presently has no subsidiaries across any sectors.

How many LinkedIn followers does Oracle Health have ?

Oracle Health's official LinkedIn profile has approximately 45,959 followers.

What is the NAICS classification code for Oracle Health ?

Oracle Health is classified under the NAICS code 5415, which corresponds to Computer Systems Design and Related Services.

Does Oracle Health have a Crunchbase profile ?

No, Oracle Health does not have a profile on Crunchbase.

Does Oracle Health have a LinkedIn profile ?

Yes, Oracle Health maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/oraclehealth.

How many cybersecurity incidents has Oracle Health experienced ?

As of June 12, 2026, Rankiteo reports that Oracle Health has experienced 61 cybersecurity incidents.

How many peer or competitor companies does Oracle Health have ?

Oracle Health has an estimated 40,660 peer or competitor companies worldwide.

What types of cybersecurity incidents has Oracle Health faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Ransomware, Breach, Vulnerability and Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Oracle Health

Boost Score +25 with badge (5 left)

667

/1000

Weak

692

/1000

Weak

Oracle Health Vendor Cyber Rating & Cyber Score

oracle.com

Add Your Compliance Badge

Oracle Health strives to connect providers, patients, and public health and life sciences organizations by leveraging the power of data. We aim to create a human-centered healthcare experience for patients—and help physicians reclaim the joy of medicine. For more than 45 years, Oracle has led the way in modern data management and intelligence solutions supporting the healthcare community. Through ground-breaking research and clinical trials, we’ve helped improve efficiency and reduce costs with our industry-leading Cloud infrastructure, database, and front- and back-office applications. We received the 2024 Best in KLAS award for our acute care EMR. By harnessing Oracle’s most valuable asset - data - we develop interoperable,

Oracle Health A.I CyberSecurity Scoring

Scoring History

Oracle Health

Oracle Health CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Oracle

Vulnerability

100

6/2026

Oracle

ORA1781180663

Oracle

Cyber Attack

100

6/2026

Oracle

ORAUNI178112306...

Oracle

Vulnerability

100

6/2026

ORA1780418023

Oracle

Breach

5/2026

METORATICBANYAH...

Oracle

Vulnerability

100

4/2026

Oracle

TULORA177741565...

Oracle

Breach

100

4/2026

ORABUS177558268...

Oracle

Breach

4/2026

Snowflake

JONGENMCDGOL177...

Oracle

Vulnerability

3/2026

ORA1774088623

Oracle

Cyber Attack

3/2026

Oracle

BROBECTHEORAABB...

Oracle

Breach

100

3/2026

Oracle

NO-SHOPRELOB177...

Oracle

Breach

3/2026

RAYORAFED177252...

Oracle

Breach

3/2026

Oracle

MSG1772483822

Oracle

Cyber Attack

2/2026

Oracle

MGMCAEORAWYN177...

Oracle

Ransomware

100

2/2026

Oracle

HYPORA177368645...

Oracle

Breach

2/2026

ORA1770195349

Oracle

Vulnerability

100

1/2026

ORA1768994894

Oracle

Ransomware

100

1/2026

Oracle

CONDAVORASANASA...

Oracle

Breach

1/2026

Oracle

DARHARPRICOLCLE...

Oracle

Breach

1/2026

Oracle

MADMICKORORA177...

Oracle

Cyber Attack

12/2025

Oracle

ADIHEAHARMARTHE...

Oracle Cloud

Cyber Attack

100

12/2025

Microsoft Secur...

AMAORAMIC177069...

Oracle Cloud

Cyber Attack

100

12/2025

Tencent Cloud

CLO1769705152

Oracle

Vulnerability

12/2025

Oracle

ORAMSG177223849...

Oracle

Ransomware

100

12/2025

Snowflake

MEREQUUNIMAEMGM...

Oracle

Cyber Attack

11/2025

Oracle

PRIORAUNI176641...

Oracle

Vulnerability

11/2025

Oracle

ORA1766435444

Oracle

Cyber Attack

100

11/2025

Oracle

NHS343233411142...

Oracle

Ransomware

100

11/2025

Oracle

BAR1765043770

Oracle Security

Breach

100

10/2025

BleepingCompute...

F50032500101925

Oracle

Cyber Attack

10/2025

Oracle

ORAWIT177393075...

Oracle

Vulnerability

10/2025

Oracle

ORAPAR176601590...

Oracle Health

Cyber Attack

9/2025

ORA805090225

Oracle

Breach

8/2025

Oracle

TULORA177907840...

Oracle

Vulnerability

8/2025

Oracle

MARORA177248417...

Oracle

Breach

100

8/2025

Oracle

COX531024531124...

Oracle

Vulnerability

8/2025

Oracle

ORATHE177023779...

Oracle

Breach

8/2025

Salesloft

SAL093230911102...

Oracle

Ransomware

100

8/2025

Oracle

ANYSOT177081084...

Oracle

Vulnerability

8/2025

Oracle

ORAHYP177365018...

Oracle Communicatio...

Ransomware

100

8/2025

Salesloft

ORA169211610072...

Oracle

Ransomware

100

7/2025

moveIT Software

ORA420244210102...

Oracle

Cyber Attack

100

7/2025

Oracle

JAG259202511152...

Oracle

Ransomware

100

6/2025

Oracle

BRO310513111262...

Oracle Health

Vulnerability

6/2025

ORA083260810142...

Oracle

Ransomware

100

5/2025

Oracle

ORA566215610062...

Oracle Health

Breach

100

4/2025

ORA656040225

Oracle Health

Breach

4/2025

Oracle Health

ORA455040125

Oracle Health

Breach

100

3/2025

ORA344032125

Oracle Health

Breach

1/2025

Oracle Health

ORA526032825

Oracle Cloud SCM

Ransomware

100

1/2025

Salesforce

THEINGSALJAGORA...

Oracle Health

Vulnerability

8/2024

ORA499324910062...

Oracle

Vulnerability

7/2024

ORA1780446221

Oracle Health

Ransomware

6/2024

ORA406214010022...

Oracle Health

Ransomware

100

1/2024

ORA109221010022...

Oracle Health

Ransomware

100

6/2023

ORA523325211212...

Oracle

Ransomware

100

1/2023

ORAMIC177555100...

Oracle Health

Breach

100

6/2021

ORA615032225

Oracle Health

Breach

100

6/2020

ORA956040325

Oracle Health

Ransomware

100

6/2019

ORA433274311212...

Oracle Health

Breach

100

08/2016

ORA392622

Oracle Health

Breach

7/2013

ORA720082025

Loading…

A.I.

Oracle Health Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Oracle Health

Incidents vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Oracle Health in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Oracle Health in 2026.

Incident Types Oracle Health vs IT Services and IT Consulting Industry Avg (This Year)

No incidents recorded for Oracle Health in 2026.

Incident History - Oracle Health (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Oracle Health Subsidiaries

Oracle Health

IT Services and IT Consulting

Website: https://www.oracle.com/health/

Company Size: 10,001+ employees

OracleIT Services and IT Consulting

Oracle Cloud SCMInformation Technology & Services

Oracle SecurityIT Services and IT Consulting

Oracle RestaurantsIT Services and IT Consulting

NetSuiteSoftware Development

Inside the SuiteSoftware Development

NetSuite Partner CommunitySoftware Development

NetSuite Sales Development Representative ProgramSoftware Development

Loading…

Oracle Health Similar Companies

Infinite Computer Solutions

infinite.com

Infinite is a global leader in technology modernization, next-gen IT services and solutions, and digital engineering, with over two decades of experience helping clients turn digital transformation into business value. Leveraging an AI-first approach, we combine leading technologies, innovative platforms and accelerators with practical know-how. With the scale of over 23,000 talented professionals across 20+ global locations, we proudly serve hundreds of clients, across all industries including healthcare, financial services, telecom, technology, media, and more. At Infinite, we go beyond technology. We collaborate deeply with our clients to deliver innovative, tailored and client-focused solutions. Infinite is proud to be recognized by ISG, Avasant, Everest Group, HFS, Fosway Group and others for the innovation and leadership we bring to our clients.

Zoom

zoom.com

Bring teams together, reimagine workspaces, engage new audiences, and delight your customers –– all on the Zoom AI-first work platform you know and love. 💙 Zoomies help people stay connected so they can get more done together. We set out on a mission to make video communications frictionless and secure by building the world’s best video product for the enterprise, but we didn’t stop there. With products like AI Companion, Team Chat, Contact Center, Phone, Events, Rooms, Webinar, Contact Center and more, we bring innovation to a wide variety of customers, from the conference room to the classroom, from doctor’s offices to financial institutions to government agencies, from global brands to small businesses. We do what we do because of our core value of Care: care for our community, our customers, our company, our teammates, and ourselves. Our global employees help our customers meet happier, communicate better, and create meaningful connections the world over. Zoomies are problem-solvers and self-starters, working hard to get results and moving quickly to design solutions with our customers and users in mind. Here, you'll find room to grow with opportunities to stretch your skills and advance your career in a collaborative, growth-focused environment. Learn more about careers at Zoom by visiting our careers site: https://careers.zoom.us/home

Diebold Nixdorf

cb DieboldNixdorf.com

Diebold Nixdorf automates, digitizes and transforms the way people bank and shop. Its integrated solutions connect digital and physical channels conveniently, securely and efficiently for millions of consumers every day. As an innovation partner for nearly all of the world's top 100 financial institutions and a majority of the top 25 global retailers, Diebold Nixdorf delivers unparalleled services and technology that power the daily operations and consumer experience of financial institutions and retailers around the world.

Eviden

eviden.com

Eviden is the Atos Group brand for hardware and software products with c. € 1 billion in revenue, operating in 36 countries and comprising four business units: advanced computing, cybersecurity products, mission-critical systems and vision AI. As a next-generation technology leader, Eviden offers a unique combination of hardware and software technologies for businesses, public sector and defense organizations and research institutions, helping them to create value out of their data. Bringing together more than 4,500 world-class talents and holding more than 2,100 patents, Eviden provides a strong portfolio of innovative and eco-efficient solutions in AI, computing, security, data and applications.

Zebra Technologies

zebra.com

Zebra provides the foundation for intelligent operations with an award-winning portfolio of connected frontline, asset visibility and automation solutions. Organizations globally across retail, manufacturing, transportation, logistics, healthcare, and other industries rely on us to deliver outcomes today while driving innovation for what’s next. Together with our partners, we create new ways of working that improve productivity and empower organizations to be better every day. Learn more at www.zebra.com.

TransUnion

transunion.com

TransUnion is a global information and insights company that makes trust possible in the modern economy. We do this by providing an actionable picture of each person so they can be reliably represented in the marketplace. As a result, businesses and consumers can transact with confidence and achieve great things. This picture is grounded in our legacy as a credit reporting agency which enables us to tap into both credit and public record data; our data fusion methodology that helps us link, match and tap into the awesome combined power of that data; and our knowledgeable and passionate team, who stewards the information with expertise, and in accordance with local legislation around the world. A leading presence in more than 30 countries across five continents, TransUnion provides solutions that help create economic opportunity, great experiences and personal empowerment for hundreds of millions of people. We call this Information for Good® — it’s our purpose, and what drives us every day. Contact Us Customer support: https://transu.co/60024D64I Business support: https://transu.co/60044D67G

Luxoft

cb luxoft.com

Luxoft, a DXC Technology Company (NYSE: DXC), is a digital strategy and software engineering firm providing bespoke technology solutions that drive business change for customers the world over. Acquired by U.S. company DXC Technology in 2019, Luxoft is a global operation in 44 cities and 21 countries with an international, agile workforce of nearly 18,000 people. It combines a unique blend of engineering excellence and deep industry expertise, helping over 425 global clients innovate in the areas of automotive, financial services, travel and hospitality, healthcare, life sciences, media and telecommunications. DXC Technology is a leading Fortune 500 IT services company which helps global companies run their mission critical systems. Together, DXC and Luxoft offer a differentiated customer-value proposition for digital transformation by combining Luxoft’s front-end digital capabilities with DXC’s expertise in IT modernization and integration. Follow our profile for regular updates and insights into technology and business needs.

Engineering Group

eng.it

Engineering Group is the Digital Transformation Company, leader in Italy and expanding its global footprint, with around 14,000 associates and with over 80 offices spread across Europe, the United States, and South America and global delivery. The Engineering Group, consisting of over 70 companies in 21 countries, has been supporting the continuous evolution of companies and organizations for more than 40 years, thanks to a deep understanding of business processes in all market segments, fully leveraging the opportunities offered by advanced digital technologies and proprietary solutions. It integrates best-of-breed market solutions, managed services, and continues to expand its expertise through M&As and partnerships with leading technology players. The Group strongly invests both in innovation, through its R&I division, and in human capital, with the internal IT & Management Academy. Engineering is a key player in the creation of digital ecosystems that bridge the gap between different markets, while developing composable solutions that ultimately foster a continuous Business transformation. In 2026, Engineering achieved, for the second consecutive year, the Top Employers Italy certification, reaffirming the significant growth process for the company, which is constantly committed to enhancing HR policies to create a work environment centered on the well-being of people.

Persistent Systems

persistent.com

We are an AI-led, platform-driven Digital Engineering and Enterprise Modernization partner, combining deep technical expertise and industry experience to help our clients anticipate what’s next. Our offerings and proven solutions create a unique competitive advantage for our clients by giving them the power to see beyond and rise above. We work with many industry-leading organizations across the world, including 20 Fortune 50 companies and 4 of the 5 top banks in both the US and India, and numerous innovators across the healthcare ecosystem. Our disruptor’s mindset, commitment to client success, and agility to thrive in the dynamic environment have enabled us to sustain our growth momentum. Persistent has been recognized across top industry platforms for innovation, leadership, and inclusion. We have delivered 22 sequential quarters of growth with $406.2M in Q2 FY26 revenue, up 4.2% Q-o-Q and 17.6% Y-o-Y growth. Our 26,000+ global team members, located in 18 countries, have been instrumental in helping the market leaders transform their industries. We received ‘Growth Honor of the Year’ at Everest Group Elevate 2025 and were cited as a Leader in the Everest Group Talent Readiness for Next-generation Cloud Services PEAK Matrix® Assessment 2025. Our company fosters a values-driven and people-centric work environment that enables our employees to: - Accelerate growth, both professionally and personally - Impact the world in powerful, positive ways, using the latest technologies - Enjoy collaborative innovation, with diversity and work-life wellbeing at the core - Unlock global opportunities to work and learn with the industry’s best Let’s unleash your full potential at Persistent - persistent.com/careers

Loading…

NEWS

Oracle Health CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 12, 2026 11:05 AM

HIMSS26: Spotlights Enterprise AI Deployment, Cybersecurity, and Hospital Finance Automation

HIMSS26 highlighted enterprise AI deployment, hospital finance automation, cybersecurity for medical devices, robotics infrastructure,...

Read Article

March 09, 2026 03:14 PM

HIMSS26 sees the convergence of AI governance and cybersecurity resilience

The industry's anxiety is concentrated at this intersection, says Phil Sobol of health IT consulting firm CereCore. Here's what hospital and...

Read Article

March 06, 2026 04:03 PM

Carahsoft’s Partner Pavilion Showcases Healthcare, AI and Cybersecurity Solutions at HIMSS26 in Las Vegas, NV on March 9-12, 2026

RESTON, Va., March 06, 2026 (GLOBE NEWSWIRE) -- Carahsoft Technology Corp., The Trusted IT Solutions Provider for the Healthcare Industry™,...

Read Article

February 09, 2026 08:00 AM

Munson, Hagerty The Latest Traverse City Organizations Hit By Major Data Breaches

Some 120000 patients at Munson Healthcare were recently informed that their data may have been compromised in a data breach involving one of...

Read Article

January 29, 2026 08:00 AM

Munson Healthcare Under Investigation for Data Breach of Over 100,000 Patient Records

Schubert Jonckheer & Kolbe LLP is investigating a data breach that led to unauthorized access to the sensitive information of 101,891...

Read Article

January 26, 2026 08:00 AM

More Than 100K Munson Healthcare Patients Affected by Cerner Cyberattack

Munson Healthcare, the largest health system in Northern Michigan, has recently notified patients about unauthorized access to its...

Read Article

January 26, 2026 08:00 AM

Lawsuit filed against nonprofit hospital after Cerner hack exposes thousands

Aultman Health System notified its patients of the data breach in December 2025. However, the breach occurred some 11 months earlier.

Read Article

January 22, 2026 08:00 AM

Top 10 Challenges Facing Healthcare in 2025

Workforce shortages, cyber threats, and the need to address regulatory complexity are just a few of the healthcare challenges to address...

Read Article

January 03, 2026 08:00 AM

Cybersecurity and hospitals: Fewer victims in 2025, but looming threats

The number of people affected by breaches dropped over the past year, but health systems face serious challenges.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-47238

SUMMARY

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #133, a normal authenticated user can edit another user's video subtitles because of a lack of authorization. They can upload subtitles, edit their name or delete them. This issue has been patched in version 5.5.3 - #133.

Published

Date2026-06-11

Updated

Date2026-06-11

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Impact Score

2.5

Exploitability

3.9

REFERENCES

https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-x468-whmw-c863

CVE-2026-45418

SUMMARY

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #132, any authenticated user who can upload videos can add multiple subtitles from different files and change their title (English, Spanish...). The POST /actions/subtitle_edit.php request used to change their title includes a number parameter which is vulnerable to SQL Injection. A boolean-based blind SQL injection can be used to exfiltrate sensitive data. This issue has been patched in version 5.5.3 - #132.

Published

Date2026-06-11

Updated

Date2026-06-11

RISK INFORMATION (Score: 8.8)

cvss3

Base Score: 8.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

2.8

REFERENCES

https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-q233-m544-6jqr

CVE-2026-45060

SUMMARY

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #129, the actions/progress_video.php endpoint is vulnerable to blind SQL injection. Any unauthenticated user can exploit the ids parameter to execute SQL queries and exfiltrate sensitive data. This issue has been patched in version 5.5.3 - #129.

Published

Date2026-06-11

Updated

Date2026-06-11

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

3.9

REFERENCES

https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-wpq3-gxx7-c76h

CVE-2026-42846

SUMMARY

ClipBucket v5 is an open source video sharing platform. Prior to version 5.5.3 - #140, ClipBucket's Remote Play feature allows any authenticated user to add a video by importing an external URL as the source. Some shell commands are run with the URL as a parameter. The URL is concatenated directly into shell commands without escaping then executed, so any shell metacharacter in the URL is interpreted. This results in arbitrary command execution. This issue has been patched in version 5.5.3 - #140.

Published

Date2026-06-11

Updated

Date2026-06-11

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Impact Score

5.9

Exploitability

3.9

REFERENCES

https://github.com/MacWarrior/clipbucket-v5/security/advisories/GHSA-hvfx-hxmr-28c7

CVE-2026-6250

SUMMARY

An authenticated format string vulnerability exists in the ONVIF service of Tapo C110 v2 due to improper handling of user-controlled input. Externally controlled data is interpreted as a format string, which can be used to manipulate stack memory, including control flow data such as return addresses. A remote authenticated attacker may redirect execution flow to existing internal functions, triggering an unauthorized factory reset, leading to loss of configuration, deletion of stored credentials and service disruption.

Published

Date2026-06-11

Updated

Date2026-06-11

RISK INFORMATION (Score: )

cvss4

Base Score: 7.0

Complexity: LOW

CVSS:4.0/AV:A/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…