What is the official website of PDI, Inc. ?

The official website of PDI, Inc. is http://www.ph-pdi.com/.

What is PDI, Inc.'s cybersecurity risk score?

PDI, Inc. has an AI-generated cybersecurity risk score of 756 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has PDI, Inc. experienced?

According to Rankiteo, PDI, Inc. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has PDI, Inc. been affected by any supply chain cyber incidents ?

According to Rankiteo, PDI, Inc. has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does PDI, Inc. have SOC 2 Type 1 certification ?

According to Rankiteo, PDI, Inc. is not certified under SOC 2 Type 1.

Does PDI, Inc. have SOC 2 Type 2 certification ?

According to Rankiteo, PDI, Inc. does not hold a SOC 2 Type 2 certification.

Does PDI, Inc. comply with GDPR ?

According to Rankiteo, PDI, Inc. is not listed as GDPR compliant.

Does PDI, Inc. have PCI DSS certification ?

According to Rankiteo, PDI, Inc. does not currently maintain PCI DSS compliance.

Does PDI, Inc. comply with HIPAA ?

According to Rankiteo, PDI, Inc. is not compliant with HIPAA regulations.

Does PDI, Inc. have ISO 27001 certification ?

According to Rankiteo,PDI, Inc. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does PDI, Inc. operate in ?

PDI, Inc. operates primarily in the Pharmaceutical Manufacturing industry.

How many employees does PDI, Inc. have ?

PDI, Inc. employs approximately 564 people worldwide.

Does PDI, Inc. own any subsidiaries ?

PDI, Inc. presently has no subsidiaries across any sectors.

How many LinkedIn followers does PDI, Inc. have ?

PDI, Inc.'s official LinkedIn profile has approximately 12,103 followers.

What is the NAICS classification code for PDI, Inc. ?

PDI, Inc. is classified under the NAICS code 3254, which corresponds to Pharmaceutical and Medicine Manufacturing.

Does PDI, Inc. have a Crunchbase profile ?

No, PDI, Inc. does not have a profile on Crunchbase.

Does PDI, Inc. have a LinkedIn profile ?

Yes, PDI, Inc. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/pdi-inc-.

How many cybersecurity incidents has PDI, Inc. experienced ?

As of August 3, 2026, Rankiteo reports that PDI, Inc. has experienced 2 cybersecurity incidents.

How many peer or competitor companies does PDI, Inc. have ?

PDI, Inc. has an estimated 5,720 peer or competitor companies worldwide.

What types of cybersecurity incidents has PDI, Inc. faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Breach.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

PDI, Inc.

Boost Score +25 with badge (5 left)

756

/1000

Fair

781

/1000

Fair

PDI, Inc. Vendor Cyber Rating & Cyber Score

ph-pdi.com

Add Your Compliance Badge

PDI is a leading healthcare commercialization company providing superior insight-driven, integrated multi-channel message delivery for established and emerging healthcare companies. The company is dedicated to: -Providing outsourced sales and marketing expertise -Creating innovative digital and multi-channel promotional solutions -Enhancing engagement with health care practitioners -Optimizing clients’ commercial investments -Providing clients with strategic flexibility -Delivering full product commercialization services Founded in 1988, PDI was one of the first contract sales organizations (CSOs) in the United States. Today, PDI is reshaping the way pharmaceutical, biotech, medical device, and diagnostics companies reach and engage

PDI, Inc. A.I CyberSecurity Scoring

Scoring History

PDI, Inc.

PDI, Inc. CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

PDI, Inc.

Breach

100

6/2011

EPS153827123

PDI, Inc.

Breach

4/2011

EPS458072625

Loading…

A.I.

PDI, Inc. Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for PDI, Inc.

Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)

No incidents recorded for PDI, Inc. in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for PDI, Inc. in 2026.

Incident Types PDI, Inc. vs Pharmaceutical Manufacturing Industry Avg (This Year)

No incidents recorded for PDI, Inc. in 2026.

Incident History - PDI, Inc. (X = Date, Y = Severity)

Loading…

SUBSIDIARY

PDI, Inc. Subsidiaries

PDI, Inc.

Pharmaceutical Manufacturing

Website: http://www.ph-pdi.com/

Company Size: 564

Publicis GroupeAdvertising Services

Leo BurnettAdvertising Services

Amazon Advertising CommunityAdvertising Services

The Mistaken Identity ProjectAdvertising Services

SapientRazorfish MENA | Now Publicis SapientBusiness Consulting and Services

HollerAdvertising Services

Rewilded RetreatsWellness and Fitness Services

Saatchi & SaatchiAdvertising Services

Saatchi & Saatchi (We Are Saatchi)Advertising Services

Team OneAdvertising Services

Saatchi & Saatchi IndiaAdvertising Services

F/Nazca Saatchi & SaatchiAdvertising Services

Saatchi & Saatchi XAdvertising Services

Saatchi & Saatchi SingaporeAdvertising Services

Saatchi & Saatchi SynergizeAdvertising Services

EpsilonAdvertising Services

Catapult MarketingAdvertising Services

Epsilon APACAdvertising Services

Epsilon EMEAAdvertising Services

Epsilon Alumni (Official)Advertising Services

Epsilon LATAMAdvertising Services

StarcomAdvertising Services

Starcom AustraliaAdvertising Services

Digitas North AmericaAdvertising Services

(m)PHASIZEAdvertising Services

Digitas UKAdvertising Services

MSL (Global)Public Relations and Communications Services

MSL IndiaPublic Relations and Communications Services

Women's Forum for the Economy & SocietyInternational Affairs

MSL UKAdvertising Services

MSL UK Employee ExperiencePublic Relations and Communications Services

Publicis ConsultantsPublic Relations and Communications Services

PublicisLiveEvents Services

Espalhe MSLAdvertising Services

JKLPublic Relations and Communications Services

MSL Group CanadaPublic Relations and Communications Services

20:20 MSLPublic Relations and Communications Services

ECA2 SHOW DESIGN & PRODUCTIONEntertainment Providers

20:20 MEDIAPublic Relations and Communications Services

MSLGROUP ChinaPublic Relations and Communications Services

Capital MSL Middle EastPublic Relations and Communications Services

Capital MSLPublic Relations and Communications Services

MSLGROUP Corporate & Brand Citizenship/PurPlePublic Relations and Communications Services

Winner & AssociatesPublic Relations and Communications Services

MSLGROUP Technology PracticePublic Relations and Communications Services

MSL WarsawPublic Relations and Communications Services

MSLGROUP Financial Communications PracticePublic Relations and Communications Services

Prodigious WorldwideAdvertising Services

Prodigious SoundsAdvertising Services

Sapient Global MarketsBusiness Consulting and Services

Publicis Re:SourcesAdvertising Services

Publicis Groupe SingaporeAdvertising Services

Publicis Health MediaAdvertising Services

Saatchi & Saatchi UKAdvertising Services

FallonAdvertising Services

Arc WorldwideAdvertising Services

VivaKiAdvertising Services

RUNAdvertising Services

BBH GlobalAdvertising Services

BBH LondonAdvertising Services

BBH USAAdvertising Services

Publicis Groupe UKAdvertising Services

RokkanAdvertising Services

Level StudiosAdvertising Services

Leo Burnett AustraliaAdvertising Services

MBMAdvertising Services

Third Horizon ConsultingBusiness Consulting and Services

Herd MSLPublic Relations and Communications Services

Digitas New ZealandAdvertising Services

Sapient Public Sector | Now Publicis SapientBusiness Consulting and Services

Optimedia USAdvertising Services

Saatchi & Saatchi NZAdvertising Services

Balance InternetTechnology, Information and Internet

Publicis ProductionAdvertising Services

Performics UKAdvertising Services

Spark Foundry NZAdvertising Services

Razorfish ANZAdvertising Services

PublicisdrugstoreRetail

Kaplan Thaler ProductionsAdvertising Services

Performics AustraliaAdvertising Services

PROXIMEDIA FRANCETechnology, Information and Internet

LeSHOPAdvertising Services

Team One Exhibits, Inc.Events Services

Breakout Room NZAdvertising Services

North StrategicPublic Relations and Communications Services

Publicis Groupe ANZAdvertising Services

Interpace BiosciencesBiotechnology Research

Loading…

PDI, Inc. Similar Companies

Glenmark Pharmaceuticals

glenmarkpharma.com

Glenmark Pharmaceuticals Limited is a research-led, global organization committed to enriching lives. Innovation is deeply embedded in Glenmark’s culture; it is how we differentiate ourselves in our key markets and create greater value for our stakeholders. In our journey of innovation over the past four and a half decades, we have evolved from a generics company to a global organization offering specialty and branded products. Glenmark’s core values of Achievement, Respect, and Knowledge impart a sense of organizational unity that drives our growth. We have established a robust global branded generics, specialty, and OTC business; with a significant presence in the therapy areas of dermatology, respiratory, and oncology. Our ten state-of-the-art manufacturing facilities spread across four continents with operations in over 80 countries help us impact millions of patients across the globe. We recently consolidated our innovation efforts in small molecules and biologics research with the formation of ‘Ichnos Glenmark Innovation’ (IGI). This alliance is aimed at leveraging the capabilities of Glenmark and its subsidiary, Ichnos Sciences, to accelerate innovation in cancer treatment. To know more about IGI, check out: https://iginnovate.com/ Sustainability is an integral aspect of all our operations and we are focused on achieving our Environment, Social and Governance (ESG) goals. Our responsibility also extends to our communities, and over the years, our CSR efforts have touched the lives of over 3 million people.

Parexel

parexel.com

Parexel is a leading global clinical research organization (CRO) providing insights-driven Clinical and Consulting solutions to the world’s life sciences industry. Leveraging deep local knowledge and a global breadth of clinical, regulatory and therapeutic expertise, our 24,000+ professionals worldwide work in partnership with biopharmaceutical leaders, emerging innovators and sites to design and deliver clinical trials with patients in mind — broadening access and making clinical research a care option for anyone, anywhere. Our proven track record spans 40+ years and drives us forward, advancing clinical research in healthcare’s most complex areas while harnessing innovation to drive efficiencies across every phase of the clinical development process. Our insights-driven approach, proven delivery and trusted execution are accelerating the delivery of life-changing treatments to patients — With Heart.™ We continue to earn recognition industrywide, including the 2025 Scrip Award for “Best Contract Research Organization – Full-Service Provider,” 2024 Fierce Biotech CRO Award for "Innovative Approaches to Patient-Centric Research" and the 2024 and 2023 Society for Clinical Research Sites (SCRS) Eagle Award. Community Guidelines Because Parexel’s social media channels are open to the general public and employees, we are not responsible for views expressed other than our own. However, we do not tolerate posts that are: • Abusive, harassing or threatening to others. • Defamatory, offensive, obscene, vulgar or depicting violence. • Hateful targeting by race/ethnicity, age, color, creed, religion, gender, sexual preference or orientation, nationality or political beliefs. • Sexually explicit or pornographic. • Fraudulent, deceptive, libelous, misleading or unlawful. • Referencing criminal or illegal activity. • Spamming. We reserve the right to remove comments that do not adhere to our guidelines and report users who violate the rules of our page.

Servier

servier.com

Founded to serve health 70 years ago, Servier is a global pharmaceutical group governed by a non-profit Foundation that aspires to make a meaningful social impact for patients and for a sustainable world. The Group’s unique governance model preserves its independence and means it can fully serve its vocation of being committed to therapeutic progress to serve patient needs while adopting a long-term vision. Its employees are fully committed to this shared vocation, which serves as a source of inspiration every day. A world leader in cardiometabolism and venous diseases, Servier has made a major shift into oncology, which represents a new pillar of strategic growth. The Group devotes close to 70% of its R&D budget to this field, with the ambition of becoming a focused and innovative player in the development of treatments targeting rare cancers. Neurology will constitute a future growth driver. Servier is focusing on a limited number of diseases in this area where accurate patient profiling makes it possible to offer a targeted therapeutic response through precision medicine. To promote widespread access to quality care at a lower cost, the Group also offers a range of quality generic drugs covering most pathologies, leveraging well-known brands in France, and Eastern Europe. In all these areas, the Group takes patient considerations into account at every stage of the medicine life cycle. Headquartered in France, Servier relies on committed teams and strong geographical footprint; its medicines are available in close to 140 countries. In 2023/2024, the Group achieved sales revenue of €5.9 billion and EBITDA of €1.3 billion in 2024 (22.2%). Today, the Group employs over 22,000 people worldwide. -- To report a suspected adverse event with a Servier drug, please visit servier.com

Sanofi

sanofi.com

We are an R&D driven, AI-powered biopharma company committed to improving people’s lives and delivering compelling growth. We apply our deep understanding of the immune system to invent medicines and vaccines that treat and protect millions of people around the world, with an innovative pipeline that could benefit millions more. Our team is guided by one purpose: we chase the miracles of science to improve people’s lives; this inspires us to drive progress and deliver positive impact for our people and the communities we serve, by addressing the most urgent healthcare, environmental, and societal challenges of our time. Interactions with this account must comply with the Terms: https://bit.ly/sanofi-terms

Viatris

viatris.com

Viatris Inc. (NASDAQ: VTRS) is a global healthcare company uniquely positioned to bridge the traditional divide between generics and brands, combining the best of both to more holistically address healthcare needs globally. With a mission to empower people worldwide to live healthier at every stage of life, we provide access at scale. In 2022 alone, we supplied high-quality medicines to approximately 1 billion patients around the world. With our exceptionally extensive and diverse portfolio of medicines, a one-of-a-kind global supply chain designed to reach more people when and where they need them, and the scientific expertise to address some of the world’s most enduring health challenges, access takes on deep meaning at Viatris. We have the ability to touch all of life’s moments, from birth to end of life, acute conditions to chronic diseases. We are headquartered in the U.S., with global centers in Pittsburgh, Shanghai and Hyderabad, India Social Media Guidelines: https://newsroom.viatris.com/social-media-community-guidelines Investors: https://investor.viatris.com Corporate Social Responsibility: https://www.viatris.com/sustainability Connect with Viatris Instagram: https://www.instagram.com/viatrisinc X: https://www.x.com/viatrisinc Viatris and our recruiting firms will not ask for sensitive personal information, such as your social security number, date of birth or bank account details via text, email or social media. Additionally, Viatris representatives do not request payment or personal bank information nor send payment to purchase hardware on your own. Viatris.com is the primary source of all company job postings and authorized third-party career websites.

Lonza

lonza.com

Lonza is a pioneer and world leader in the CDMO industry, setting the pace with cutting-edge science, smart technology, and lean manufacturing. United by a common purpose, we turn our customers’ breakthrough innovations into viable therapies and manufacture the medicines of tomorrow. Founded in Switzerland in 1897, our company is the first and original CDMO, and today we are more dynamic, agile and forward-focused than ever before. As one of the largest Western CDMOs, we bring together a global team of around 18,500 colleagues across five continents to deliver comprehensive, integrated solutions for our customers' complex needs. For our customers and their patients, we bring quality, safety and reliability to bring life-enhancing and life-saving treatments to market at speed and at scale. For our colleagues, we strive to create a sense of belonging and inclusion where every person can thrive and bring their best.

AbbVie

cb abbvie.com

AbbVie is a global biopharmaceutical company focused on creating medicines and solutions that put impact first — for patients, communities, and our world. We aim to address complex health issues and enhance people's lives through our core therapeutic areas: immunology, oncology, neuroscience, aesthetics and other areas of unmet need. Learn more about us at www.abbvie.com and review our community guidelines at https://www.abbvie.com/social-media-community-guidelines.html.

PT Kalbe Farma, Tbk

kalbe.co.id

Established in 1966, PT Kalbe Farma Tbk. (“the Company” or “Kalbe”) has gone a long way from its humble beginnings as a garage-operated pharmaceutical business in North Jakarta. It has expanded by strategic acquisitions of pharmaceutical companies, building a leading brand positioning and reaching to international markets to transform itself into an integrated consumer health and nutrition enterprise to promote its mission to improve health for a better life. Kalbe expands its business interests and transformed itself to become a provider of an integrated healthcare solution through its 4 business divisions: the Prescription Pharmaceutical Division, Consumer Health Division, Nutritionals Division and Distribution and Logistics Division. These business divisions manage an extensive portfolio of prescription pharmaceuticals and OTC drugs, energy drink and nutrition products, as well as a robust distribution arm serving over one million outlets across Indonesia’s vast archipelago. In the international market, the Company has established its footprint in ASEAN countries, Nigeria, and South Africa, positioning Kalbe as a national pharmaceutical company with a competitive edge in the export market. Kalbe Farma has established a robust research and development activities in leading edge generic drug formulation and continuous development of innovative consumer and nutritional products. Through strategic alliances with international partners, Kalbe have also started to support several successful research and development venture working on cancer drugs, stem cells and biotechnology research. With 17,000 employees, Kalbe Farma is the largest healthcare provider in Indonesia, with unrivaled marketing, branding, distribution, financial strength and research and development expertise. Kalbe Farma is also the largest publicly-listed pharmaceutical company in Southeast Asia, commanding a market capitalization of Rp71.0 trillion and sales turnover Rp21.0 trillion by end of 2018.

MANKIND PHARMA LTD

mankindpharma.com

Mankind Pharma, one of the top 5 leading pharmaceutical companies in India, started its journey in 1995. Today, we have an employee base of over 20,000 and are racing towards $1 Billion. At Mankind, we aspire to aid the community in leading a healthy life by formulating, developing, commercializing, and delivering affordable and accessible medicines that satisfy urgent medical needs. We take great pride in the success of our products ranging from Pharma, OTC and FMCG brands like Manforce Condoms, Manforce Tablets, Manforce Staylong Gel, Unwanted 72, Prega News, Gas-O-Fast, Kaloree 1, Kabzend, Acne Star Gel and many others. Our operations are in 34 overseas destinations across Asia, Africa, South-East Asia, Gulf countries and CIS countries. Our Vision - To be a global pharmaceutical company, most admired for its Affordability, Quality and Accessibility of products. Our Mission - To be able to provide cost-effective, innovation based superior quality pharmaceutical products across the globe, to improve the lives of the patients. Mankind strongly believes and follows its Core Values: 𝐂𝐮𝐬𝐭𝐨𝐦𝐞𝐫 𝐂𝐞𝐧𝐭𝐫𝐢𝐜𝐢𝐭𝐲: Commitment to Customer - Internal and External 𝐐𝐮𝐚𝐥𝐢𝐭𝐲: It is in our DNA to maintain and deliver highest quality standards and products 𝐈𝐧𝐧𝐨𝐯𝐚𝐭𝐢𝐨𝐧: Intensely Research driven organization aiming at product innovation and technology improvements 𝐈𝐧𝐭𝐞𝐠𝐫𝐢𝐭𝐲: Always trustworthy, widely respected to be honest, and believed by everyone 𝐆𝐨 𝐁𝐞𝐲𝐨𝐧𝐝: Aim higher than capabilities 𝐏𝐞𝐨𝐩𝐥𝐞 𝐃𝐞𝐯𝐞𝐥𝐨𝐩𝐦𝐞𝐧𝐭 𝐚𝐧𝐝 𝐂𝐨𝐥𝐥𝐚𝐛𝐨𝐫𝐚𝐭𝐢𝐨𝐧: Together we are foreseeing future and diligently stimulating our people in attaining goals

Loading…

NEWS

PDI, Inc. CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

February 05, 2026 08:00 AM

Trusted by Always-On Retailers: PDI Technologies Ranks #17 Globally for Cybersecurity by MSSP Alert

Recognition highlights PDI leadership in securing convenience stores, automotive dealerships, QSRs, and specialty retail environments...

Read Article

October 21, 2025 07:00 AM

Retail Sector Faces Mounting Cyber Pressure Despite Q3 Ransomware Slowdown, PDI Advises

Join PDI security experts as they unpack their latest threat report in October 30 webinarATLANTA, GA, Oct. 21, 2025 (GLOBE NEWSWIRE) -- Even...

Read Article

October 03, 2025 07:00 AM

PDI Accelerates Convenience AI Adoption with MyPDI and New Loyalty Capabilities

PDI to showcase industry leadership and innovation at annual NACS Show...

Read Article

May 29, 2025 07:00 AM

'Everest Group' Extorts Global Orgs via SAP's HR Tool

In addition to Coca-Cola, entities in Abu Dhabi, Jordan, Namibia, South Africa, and Switzerland are experiencing extortion attacks,...

Read Article

April 01, 2025 07:00 AM

PDI Technologies Expands Digital Engagement Ecosystem,

P97 Networks is a leading mobile commerce and digital marketing platform provider for the convenience retail, automotive, and fuel markets.

Read Article

March 26, 2025 07:00 AM

Insight Mulls $4.5 Billion-Plus Sale of PDI Technologies

Insight Partners is exploring a sale of PDI Technologies, which provides software to convenience stores, according to people with knowledge...

Read Article

December 04, 2024 08:00 AM

PDI Technologies acquires Comdata Merchant Solutions

PDI Technologies announced its acquisition of the Comdata Merchant Solutions business from Comdata's parent company, Corpay Inc. This...

Read Article

December 03, 2024 08:00 AM

PDI Acquires Comdata POS Business

PDI Technologies, a convenience retail technology company based in Alpharetta, Georgia, is acquiring the Comdata Merchant Solutions business.

Read Article

June 21, 2024 07:00 AM

PDI Technologies Acquires Nuspire

The acquisition bolsters PDI's cybersecurity and managed network services business segment.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-18577

SUMMARY

An incomplete patch for CVE-2026-18556 allows for authentication bypass and account takeover in N-central Versions through 2026.3.1

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: )

cvss4

Base Score: 8.2

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:L/SI:L/SA:L/E:A/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

CVE-2026-10848

SUMMARY

The OCPP 1.6 client in subsys/net/lib/ocpp parsed inbound WAMP RPC frames in parse_rpc_msg() (subsys/net/lib/ocpp/ocpp_j.c) using a hand-rolled helper, extract_string_field(), that copied the message's uid and action fields with strncpy(out_buf, token + 1, outlen - 1) and then scanned the result with strchr(out_buf, '"'). Because strncpy does not NUL-terminate the destination when the source is at least outlen - 1 (127) bytes long, the subsequent strchr reads past the 128-byte destination buffer into adjacent stack memory; if a " byte is found beyond the buffer, a one-byte out-of-bounds NUL write also occurs. A related defect in extract_payload() runs strchr/strrchr over the receive buffer, which may not be NUL-terminated when a maximal-length frame fills it. The parsed bytes come directly from the OCPP central-system server over a websocket: the reader thread fills recv_buf via websocket_recv_msg() and calls parse_rpc_msg() on each inbound DATA frame (subsys/net/lib/ocpp/ocpp.c). A malicious or compromised central server, or an on-path attacker (OCPP is commonly deployed over plain ws://), can send an RPC frame whose uid or action field is 127+ bytes with no closing quote, triggering the out-of-bounds access. The primary impact is a remotely triggerable denial of service: the unbounded scan can fault on an unmapped page, and the stray NUL write can corrupt adjacent stack state. The over-read data is not reflected to the peer, so disclosure is limited. The feature is EXPERIMENTAL and must be explicitly enabled (CONFIG_OCPP). The fix replaces the manual parser with the bounds-respecting json_mixed_arr_parse() and copies the extracted uid with an explicitly NUL-terminated buffer, eliminating both over-reads.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7)

cvss3

Base Score: 7.0

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:H

Impact Score

4.7

Exploitability

2.2

REFERENCES

CVE-2026-9856

SUMMARY

A vulnerability in huggingface/transformers versions <=5.8.0.dev0 allows an attacker to perform arbitrary file writes via path traversal. The issue resides in the `save_pretrained()` methods of `PreTrainedTokenizerBase` and `ProcessorMixin`, where keys from the `chat_template` dictionary are used directly as filenames without proper validation. An attacker can exploit this by publishing a malicious Hugging Face Hub repository with a crafted `tokenizer_config.json` file. When a victim downloads and saves the tokenizer or processor, the attacker-controlled keys can escape the intended save directory, enabling arbitrary file writes with attacker-controlled content. This vulnerability affects multiple processors inheriting from `ProcessorMixin`, including Idefics, Florence, Gemma, Phi, and Qwen-VL.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 7.1)

cvss3

Base Score: 7.1

Complexity: LOW

CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:L

Impact Score

4.2

Exploitability

2.8

REFERENCES

CVE-2026-65321

SUMMARY

PyAthena prior to 3.35.4 contains a sql injection vulnerability that allows unauthenticated attackers to inject arbitrary SQL by exploiting improper quote-escaping in DefaultParameterFormatter.format(), which routes DELETE and CTAS statements to the _escape_hive function that backslash-escapes single quotes rather than doubling them. Because Athena and Trino do not treat backslashes as escape characters inside string literals, attacker-supplied input such as a single quote followed by SQL syntax causes the parser to terminate the string literal prematurely, enabling data exfiltration via UNION SELECT, execution of destructive statements, and attacker-controlled CTAS destination and content.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 9.8)

cvss3

Base Score: 9.8

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

5.9

Exploitability

3.9

REFERENCES

CVE-2026-10774

SUMMARY

Zephyr's Bluetooth Mesh subnet key management leaks one PSA Crypto key slot on every subnet-key teardown. In subsys/bluetooth/mesh/subnet.c, net_keys_create() imports the Private Beacon Key into a PSA key slot under CONFIG_BT_MESH_PRIV_BEACONS (enabled by default), but subnet_keys_destroy() guarded the matching psa_destroy_key() with CONFIG_BT_MESH_V1d1. That Kconfig symbol was removed when explicit Mesh 1.0.1 support was dropped, so the destroy branch became permanently dead code and the import is never balanced by a destroy. The imbalanced teardown is reached every time subnet keys are destroyed: deleting a subnet (Config Server NetKey Delete), completing a Key Refresh Procedure (which retires the old key set), and resetting/re-provisioning the node. The over-the-air triggers are processed only under the node's device key, so they are exercisable by the provisioner or network administrator that owns the node, reachable over the Bluetooth Mesh network. With the default CONFIG_MBEDTLS_PSA_KEY_SLOT_COUNT of 16, repeated add/delete or key-refresh cycles exhaust the shared PSA key-slot pool after roughly a dozen rounds. Once exhausted, bt_mesh_private_beacon_key() and thus subnet creation fail: the node can no longer add subnets or complete key refresh, and other PSA crypto consumers on the device may be starved, until the device is rebooted. The fix aligns the destroy guard with the import guard (CONFIG_BT_MESH_PRIV_BEACONS) so each slot is freed.

Published

Date2026-08-02

Updated

Date2026-08-02

RISK INFORMATION (Score: 2.4)

cvss3

Base Score: 2.4

Complexity: LOW

CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L

Impact Score

1.4

Exploitability

0.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…