What is the official website of Pharma forum ?

The official website of Pharma forum is https://www.pharmaforum.be/fr/.

What is Pharma forum's cybersecurity risk score?

Pharma forum has an AI-generated cybersecurity risk score of 753 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Pharma forum experienced?

According to Rankiteo, Pharma forum currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Pharma forum been affected by any supply chain cyber incidents ?

According to Rankiteo, Pharma forum has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Pharma forum have SOC 2 Type 1 certification ?

According to Rankiteo, Pharma forum is not certified under SOC 2 Type 1.

Does Pharma forum have SOC 2 Type 2 certification ?

According to Rankiteo, Pharma forum does not hold a SOC 2 Type 2 certification.

Does Pharma forum comply with GDPR ?

According to Rankiteo, Pharma forum is not listed as GDPR compliant.

Does Pharma forum have PCI DSS certification ?

According to Rankiteo, Pharma forum does not currently maintain PCI DSS compliance.

Does Pharma forum comply with HIPAA ?

According to Rankiteo, Pharma forum is not compliant with HIPAA regulations.

Does Pharma forum have ISO 27001 certification ?

According to Rankiteo,Pharma forum is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Pharma forum operate in ?

Pharma forum operates primarily in the Pharmaceutical Manufacturing industry.

How many employees does Pharma forum have ?

Pharma forum employs approximately None employees people worldwide.

Does Pharma forum own any subsidiaries ?

Pharma forum presently has no subsidiaries across any sectors.

How many LinkedIn followers does Pharma forum have ?

Pharma forum's official LinkedIn profile has approximately 385 followers.

What is the NAICS classification code for Pharma forum ?

Pharma forum is classified under the NAICS code 3254, which corresponds to Pharmaceutical and Medicine Manufacturing.

Does Pharma forum have a Crunchbase profile ?

No, Pharma forum does not have a profile on Crunchbase.

Does Pharma forum have a LinkedIn profile ?

Yes, Pharma forum maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/pharma-forum.

How many cybersecurity incidents has Pharma forum experienced ?

As of August 22, 2026, Rankiteo reports that Pharma forum has not experienced any cybersecurity incidents.

How many peer or competitor companies does Pharma forum have ?

Pharma forum has an estimated 5,728 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Pharma forum

Boost Score +25 with badge (5 left)

753

/1000

Fair

778

/1000

Fair

Pharma forum Vendor Cyber Rating & Cyber Score

pharmaforum.be

Add Your Compliance Badge

Pharma forum est le rendez-vous incontournable pour les gérants d'officines, pharmaciens et assistants pharmaciens. Pharma forum, c'est également l’occasion idéale de multiplier vos contacts et de vous positionner comme l’une des sociétés incontournables du secteur, grâce à deux journées complètes de formations, de conférences et d'ateliers accrédités, de découvertes et de networking. Venez rencontrer vos nouveaux prospects et toucher un visitorat décisionnaire les 24 et 25 septembre 2022 à Pharma forum !

Pharma forum A.I CyberSecurity Scoring

Scoring History

Pharma forum

Pharma forum CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Pharma forum Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Pharma forum

Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)

No incidents recorded for Pharma forum in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Pharma forum in 2026.

Incident Types Pharma forum vs Pharmaceutical Manufacturing Industry Avg (This Year)

No incidents recorded for Pharma forum in 2026.

Incident History - Pharma forum (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Pharma forum Subsidiaries

Pharma forum

Pharmaceutical Manufacturing

Website: https://www.pharmaforum.be/fr/

Company Size: None employees

152

EasyfairsEvents Services

Easyfairs NordicEvents Services

ByggmässanEvenemangstjänster

Advanced Engineering & ElektronikmässanEvents Services

SettProgram för utbildningsadministration

Personal & ChefStaffing and Recruiting

FastighetsMässanEvenemangstjänster

Empack SwedenPackaging & Containers

Light & DesignTillverkning av elektrisk belysningsutrustning

Fastfood & Café & Restaurant Expo FinlandEvents Services

VVS-mässanEvenemangstjänster

FFCR SverigeEvents Services

Industrimässorna ÖresundEvenemangstjänster

TechdaysStrategic Management Services

Ekonomi & FöretagIndustry Associations

ElmässanEvents Services

Advanced Engineering UKEvents Services

Easyfairs NordicEvents Services

Easyfairs NetherlandsEvents Services

HortiContactEvents Services

Rotterdam Processing WeekEvents Services

CamperbeursEvents Services

Dental ExpoEvents Services

Maritime IndustryEvents Services

EmpackNLEvenementenservices

Aqua NederlandEvenementenservices

Visualize ExpoEvents Services

Infra RelatiedagenEvenementenservices

Recreatie VakbeursRecreatievoorzieningen

Futurebuild HollandConstruction

InstallTech & BouwEvents Services

Rundvee & Mechanisatie VakdagenEvenementenservices

TrendzEvenementenservices

Future LightingEvenementenservices

Packaging Innovations NLEvents Services

Recycling & Circulair NextEvents Services

Afbouw VakdagenEvenementenservices

Installatie VakdagenEvents Services

Recreatie Next LevelEvenementenservices

Maintenance GorinchemEvenementenservices

Vakbeurs Bakkersvak & IJs-VakEvenementenservices

Dutch Pork ExpoEvents Services

Huis & Woon BeursEvenementenservices

Worksafe GorinchemEvents Services

The Hair X-perienceEvenementenservices

Horeca VakbeursEvenementenservices

Tuin & Park ExpoEvenementenservices

Dutch Pork & Poultry ExpoEvents Services

Bouw RelatiedagenEvenementenservices

Schilders VakdagenEvents Services

M+R RotterdamEvents Services

Vakbeurs Logistics & AutomationTransportation, Logistics, Supply Chain and Storage

Welding Week NederlandEvents Services

InfraNXTEvents Services

Vakbeurs Auto ProfProductie motorvoertuigen

Elektro VakbeursEvenementenservices

InCoDaEvenementenservices

Automation NederlandEvents Services

Pumps & Valves RotterdamEvenementenservices

De Dag van het AmbachtEvents Services

Beauty DaysEvenementenservices

VelovakEvenementenservices

Solids RotterdamEvents Services

De Groene Sector VakbeursEvenementenservices

METAVAKEvenementenservices

Packaging Innovations & EmpackEvents Services

Inspire Health & CareHospitals and Health Care

Connect In PharmaPharmaceutical Manufacturing

Easyfairs IberiaEvents Services

Worksafe BarcelonaEvents Services

Logistic & Industrial Build SpainConstruction

bis, bouw- en interieursalonEvents Services

Easyfairs SwitzerlandEvents Services

EMPACK SchweizVeranstaltungsdienste

maintenance SchweizVeranstaltungsdienste

PUMPS-VALVES ZurichVeranstaltungsdienste

LOGISTICS & AUTOMATION SchweizEvents Services

AQUA SuisseEvents Services

SOLIDS ZurichVeranstaltungsdienste

Green - event voor de groenprofessionalEvents Services

Easyfairs Events TechnologyTechnology, Information and Internet

StocExpo & Tank StorageEvents Services

Packaging Innovations NederlandEvents Services

Dentex Algeriaخدمات المناسبات

Easyfairs GermanyEvents Services

maintenanceEvents Services

FMB – Fachmesse für MaschinenbauEvents Services

SOLIDS, RECYCLING-TECHNIK und PUMPS & VALVES DortmundEvents Services

all about automationEvents Services

SOLIDS ParmaEvents Services

LOGISTICS & AUTOMATIONEvents Services

KPA - Kunststoff Produkte AktuellEvents Services

EMPACKEvents Services

Transport & Logistics NRW 2018Events Services

SEAQUIPEvents Services

Easyfairs ItalyEvents Services

Easyfairs UKEvents Services

PENTAWARDSAdvertising Services

MAGHREB PHARMA Expo & Conférenceخدمات المناسبات

AestheticsEvents Services

Packaging Première & PCD MilanEvents Services

StocExpoOil and Gas

Tank Storage MagazineOil and Gas

FuturebuildConstruction

Paris Packaging WeekEvents Services

Advanced Manufacturing ESServicios de eventos

Logistics & Automation SpainTransportation, Logistics, Supply Chain and Storage

Packaging Première & PCD MilanServizi per eventi

StocExpoOil and Gas

AntwerpXLMaritime Transportation

Lab InnovationsEvents Services

Empack SpainPackaging and Containers Manufacturing

London Packaging WeekEvents Services

Empack and Logistics & Automation PortoTransporte, armazenagem e correio

CCR LondonEvents Services

MAGHREB PHARMA HorizonPharmaceutical Manufacturing

Horeca ExpoHospitality

Bois & HabitatConstruction

Sett Namur ExpoEducation Management

Namur ExpoEvents Services

Loading…

Pharma forum Similar Companies

Viatris

viatris.com

Viatris Inc. (NASDAQ: VTRS) is a global healthcare company uniquely positioned to bridge the traditional divide between generics and brands, combining the best of both to more holistically address healthcare needs globally. With a mission to empower people worldwide to live healthier at every stage of life, we provide access at scale. In 2022 alone, we supplied high-quality medicines to approximately 1 billion patients around the world. With our exceptionally extensive and diverse portfolio of medicines, a one-of-a-kind global supply chain designed to reach more people when and where they need them, and the scientific expertise to address some of the world’s most enduring health challenges, access takes on deep meaning at Viatris. We have the ability to touch all of life’s moments, from birth to end of life, acute conditions to chronic diseases. We are headquartered in the U.S., with global centers in Pittsburgh, Shanghai and Hyderabad, India Social Media Guidelines: https://newsroom.viatris.com/social-media-community-guidelines Investors: https://investor.viatris.com Corporate Social Responsibility: https://www.viatris.com/sustainability Connect with Viatris Instagram: https://www.instagram.com/viatrisinc X: https://www.x.com/viatrisinc Viatris and our recruiting firms will not ask for sensitive personal information, such as your social security number, date of birth or bank account details via text, email or social media. Additionally, Viatris representatives do not request payment or personal bank information nor send payment to purchase hardware on your own. Viatris.com is the primary source of all company job postings and authorized third-party career websites.

Astellas Pharma

astellas.com

Astellas is a global life sciences company committed to turning innovative science into VALUE for patients. We provide transformative therapies in disease areas that include oncology, ophthalmology, urology, immunology and women's health. Through our research and development programs, we are pioneering new healthcare solutions for diseases with high unmet medical need. Visit our Global Astellas LinkedIn Community Guidelines to learn more about interacting with this page: https://www.astellas.com/en/global-linkedin-community-guidelines

MACLEODS PHARMACEUTICALS LTD.

macleodspharma.com

A vertically integrated, Global Pharmaceutical Company. Established in 1989, we are engaged in developing, manufacturing, and marketing a wide range of formulations across several major therapeutic areas including anti-infectives, cardiovascular, anti-diabetic, dermatology, and hormone treatment. We develop, manufacture, and globally distribute a broad range of pharmaceutical products across therapies in multiple dosage forms such as solid orals, liquid orals, topical formulations, injectables (Dry Powder) metered dose inhalers and dry powder inhalers. Our Vision To be a leading global pharmaceutical company by providing high quality, affordable and innovative therapeutic solutions for patients with diverse medical needs. Our Mission To contribute towards improving patients’ quality of life across the globe, by providing effective and accessible medicines.

MENARINI Group

menarini.com

The Menarini Group is a leading international pharmaceutical and diagnostics company, present in 140 countries worldwide, with a turnover of 4,37 Billion euro and more than 17,000 employees. With 9 centers for Research & Development, Menarini’s products are present in the most important therapeutic areas, including cardiology, oncology, gastroenterology, pneumology, infectious diseases, diabetes, and anti-inflammatory/analgesics. The Group’s pharmaceutical production is carried out in its 18 manufacturing plants, which produce over 609 million packets of product a year and distribute them to five continents. Menarini’s pharmaceutical production, in line with the highest quality standards, provides an ongoing contribution to the health of patients all over the world. For further information, please visit www.menarini.com For reading our Netiquette, please visit https://www.menarini.com/en-us/data-privacy/netiquette-of-menarini-group For reading our Privacy Notice for social networks users, please visit https://www.menarini.com/en-us/data-privacy/privacy-notice-for-social-network-users-of-menarini-group

Johnson & Johnson Innovative Medicine

cb jnj.com

At Johnson & Johnson Innovative Medicine, we innovate with purpose, to lead where medicine is going. The experiences of patients around the world inform and inspire our science-based innovations, which continue to change and save lives. Applying rigorous science with compassion, we confidently address the most complex diseases of our time and develop the potential medicines of tomorrow. We are continuously working to develop treatments, aspiring to find cures, pioneering the path from lab to life, and championing patients every step of the way. https://bit.ly/3reuMvK

Lupin

lupin.com

Lupin Limited is a global pharmaceutical leader headquartered in Mumbai, India, with products distributed in over 100 markets. Lupin specializes in pharmaceutical products, including branded and generic formulations, complex generics, biotechnology products, and active pharmaceutical ingredients. Trusted by healthcare professionals and consumers globally, the company enjoys a strong position in India and the U.S. across multiple therapy areas, including respiratory, cardiovascular, anti-diabetic, anti-infective, gastrointestinal, central nervous system, and women’s health. Lupin has 15 state-of-the-art manufacturing sites and 7 research centers globally, along with a dedicated workforce of over 23,000 professionals. Lupin is committed to improving patient health outcomes through its subsidiaries – Lupin Diagnostics, Lupin Digital Health, and Lupin Manufacturing Solutions.

Teva Pharmaceuticals

tevapharm.com

Teva Pharmaceuticals is a leading innovative biopharmaceutical company, enabled by a world-class generics business. For over 120 years, Teva’s commitment has never wavered. From innovating in the fields of neuroscience and immunology to providing complex generic medicines, biosimilars and pharmacy brands worldwide, Teva is dedicated to addressing patients’ needs, now and in the future. At Teva, We Are All In For Better Health. To learn more about how we make it happen, visit www.tevapharm.com. Our community guidelines may be found here: https://www.tevapharm.com/news-and-media/teva-social-media-guidelines/ Please note that adverse effects for any of our products should be reported at: https://www.tevapharm.com/teva-medical-information/report-a-side-effect-form/ Product-specific questions should be directed to Teva or Teva Group subsidiaries in your country. Contact details and Teva's Pharmacovigilance Privacy Policy may be found here: http://www.tevapharm.com/contact_us/

EMS

cb ems.com.br

Fundada há mais de 60 anos e com capital 100% nacional, a EMS é a líder do mercado farmacêutico brasileiro há 19 anos consecutivos, pertencente ao Grupo NC, um dos maiores conglomerados brasileiros. A empresa ocupa também a liderança no segmento de genéricos desde 2013 (IQVIA 2019) e está entre os maiores laboratórios em preferência prescritiva no Brasil. Tem forte presença em PDVs de todo o país e atuação nas áreas de Prescrição Médica, Genéricos, Marcas, OTC e Hospitalar, fabricando medicamentos para praticamente todas as especialidades da Medicina. Possui fábricas em Hortolândia (SP), Manaus (AM), Brasília (DF) e Jaguariúna (SP). A EMS apoia ações de responsabilidade social dentro e fora do Brasil. Em 2017, por exemplo, o laboratório fechou parceria com a Organização Mundial da Saúde (OMS) para doar 100% do medicamento para erradicar, nos próximos anos, em todo o planeta, a bouba, doença negligenciada. A EMS é a única farmacêutica no mundo a ter abraçado essa causa. O Centro de Pesquisa & Desenvolvimento da EMS no Brasil é o mais moderno da América Latina. Na Itália, a EMS tem o laboratório de pesquisas MonteResearch. O foco de atuação do laboratório é a inovação nas seguintes frentes: inovação incremental; genéricos de alta complexidade; medicamentos biotecnológicos, por meio da empresa Bionovis; e inovação disruptiva, por meio da Brace Pharma, empresa da EMS instalada em 2013 nos Estados Unidos. Ainda, nos EUA, por meio de sua controlada Vero Biotech, localizada em Atlanta, Geórgia, a EMS, recentemente, obteve a aprovação de seu primeiro produto revolucionário submetido à FDA (Food and Drug Administration), posicionando o laboratório como uma empresa de inovação no mercado global. Com aportes frequentes em infraestrutura fabril e em pesquisa de ponta para desenvolver produtos inovadores, eficazes e seguros, a EMS, que já exporta para mais de 40 países, está preparada para continuar cuidando das pessoas que querem viver cada vez mais e melhor.

PT Kalbe Farma, Tbk

kalbe.co.id

Established in 1966, PT Kalbe Farma Tbk. (“the Company” or “Kalbe”) has gone a long way from its humble beginnings as a garage-operated pharmaceutical business in North Jakarta. It has expanded by strategic acquisitions of pharmaceutical companies, building a leading brand positioning and reaching to international markets to transform itself into an integrated consumer health and nutrition enterprise to promote its mission to improve health for a better life. Kalbe expands its business interests and transformed itself to become a provider of an integrated healthcare solution through its 4 business divisions: the Prescription Pharmaceutical Division, Consumer Health Division, Nutritionals Division and Distribution and Logistics Division. These business divisions manage an extensive portfolio of prescription pharmaceuticals and OTC drugs, energy drink and nutrition products, as well as a robust distribution arm serving over one million outlets across Indonesia’s vast archipelago. In the international market, the Company has established its footprint in ASEAN countries, Nigeria, and South Africa, positioning Kalbe as a national pharmaceutical company with a competitive edge in the export market. Kalbe Farma has established a robust research and development activities in leading edge generic drug formulation and continuous development of innovative consumer and nutritional products. Through strategic alliances with international partners, Kalbe have also started to support several successful research and development venture working on cancer drugs, stem cells and biotechnology research. With 17,000 employees, Kalbe Farma is the largest healthcare provider in Indonesia, with unrivaled marketing, branding, distribution, financial strength and research and development expertise. Kalbe Farma is also the largest publicly-listed pharmaceutical company in Southeast Asia, commanding a market capitalization of Rp71.0 trillion and sales turnover Rp21.0 trillion by end of 2018.

Loading…

NEWS

Pharma forum CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-53541

SUMMARY

OliveTin gives access to predefined shell commands from a web interface. The `filterToDefinedArgumentsOnly` function in the executor is intended to discard any arguments not explicitly defined in the action's configuration. However, prior to commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d, a special case allows any argument whose name starts with `ot_` to bypass this filter. While two system arguments (`ot_executionTrackingId` and `ot_username`) are injected by OliveTin and overridden, all other `ot_`-prefixed arguments supplied by the user pass through unmodified. These bypassed arguments are not type-checked — the validation loop only iterates over the action's defined arguments, so `ot_`-prefixed arguments skip all type safety checks entirely; set as environment variables — via `buildEnv()`, with completely unvalidated values, and passed to the executed command; and included in the template context — available as `.Arguments.ot_*` in template rendering. Commit ebffd9f040f791208aee1db2e5a8aecd1e3e603d contains a patch.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: 4.3)

cvss3

Base Score: 4.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:N

Impact Score

1.4

Exploitability

2.8

REFERENCES

CVE-2026-53525

SUMMARY

WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 0.3.1 through 4.9.0, the WeeChat relay authentication uses non-constant-time string comparison functions (weechat_strcasecmp and strcmp) to verify password hashes and plaintext passwords. An attacker can exploit timing differences to extract the server-computed hash character by character, then authenticate using the correct hash without knowing the password. Version 4.9.1 fixes the issue.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: 7.4)

cvss3

Base Score: 7.4

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:H

Impact Score

5.2

Exploitability

2.2

REFERENCES

https://github.com/weechat/weechat/security/advisories/GHSA-vhv8-g2r9-cwcc

CVE-2026-53524

SUMMARY

WeeChat (Wee Enhanced Environment for Chat) is a free chat client. In versions 4.3.0 through 4.9.0, the WeeChat relay module's WebSocket permessage-deflate decompression function relay_websocket_inflate() has no upper bound on output size. An authenticated relay user can send a small compressed WebSocket frame (~100 bytes) that decompresses to gigabytes, exhausting all server memory and crashing the entire WeeChat process. The api protocol enables permessage-deflate and requires authentication before WebSocket upgrade. Version 4.9.1 patches the issue.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

Impact Score

3.6

Exploitability

2.8

REFERENCES

https://github.com/weechat/weechat/security/advisories/GHSA-v2v4-45wm-5cr3

CVE-2026-53499

SUMMARY

FORT Validator is a Resource Public Key Infrastructure (RPKI) relying-party validator that produces validated route-origin data. FORT Validator versions through 1.6.7 contain an origin-validation error in their RRDP processing: a delegated CA under the same Trust Anchor Locator (TAL) can reference a victim CA’s public RRDP notification and snapshot URLs, causing FORT’s URL-based download cache to report success after deleting the victim’s local snapshot. Following a routine victim publication, this can silently remove the victim’s VRPs and other signed objects from FORT’s output, potentially enabling route hijacking or loss of reachability. Version 1.6.8 contains a patch that rejects cross-origin RRDP snapshot and delta URLs; as a workaround, administrators can disable HTTP/RRDP with --http.enabled=false while keeping rsync enabled, although this can leave data unavailable or stale where rsync is not supported.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: )

cvss4

Base Score: 7.2

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:H/VA:L/SC:N/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/NICMx/FORT-validator/security/advisories/GHSA-qfm3-577x-rh54

CVE-2026-49360

SUMMARY

Recce is a data-validation toolkit for enhanced dbt (data build tool) PR review. Prior to version 1.50.0, OSS server deployments that expose the server to an untrusted network without authentication are vulnerable to unauthenticated SQL execution through the query run API. When Recce is configured with a DuckDB-backed project, an attacker can use DuckDB filesystem primitives to read and write files accessible to the Recce server process. The impact depends on how Recce is deployed, but may include disclosure of local files, tampering with Recce/dbt artifacts, modification of browser-served static files leading to stored XSS, and modification of application files if those paths are writable. If Recce is run as root, file access occurs with root privileges inside that host or container. This issue has been patched in Recce `v1.50.0`. Users should upgrade to Recce `v1.50.0` or later. The patch restricts unsafe file read/write behavior for DuckDB-backed query execution and hardens the affected query path. Other warehouse adapters have also been reviewed for similar exposure. Users who cannot upgrade immediately should avoid exposing `recce server` to the public internet or any untrusted network. Recommended mitigations include enabling authentication or placing Recce behind an authenticated reverse proxy/VPN, running Recce as a non-root user, using a read-only application filesystem where possible, and ensuring that sensitive files or credentials are not available to the Recce process.

Published

Date2026-08-21

Updated

Date2026-08-21

RISK INFORMATION (Score: )

cvss4

Base Score: 7.8

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:L/VI:L/VA:L/SC:L/SI:H/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…