What is the official website of Pharmaceutical Commerce ?

The official website of Pharmaceutical Commerce is http://PharmaceuticalCommerce.com.

What is Pharmaceutical Commerce's cybersecurity risk score?

Pharmaceutical Commerce has an AI-generated cybersecurity risk score of 751 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Pharmaceutical Commerce experienced?

According to Rankiteo, Pharmaceutical Commerce currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Pharmaceutical Commerce been affected by any supply chain cyber incidents ?

According to Rankiteo, Pharmaceutical Commerce has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does Pharmaceutical Commerce have SOC 2 Type 1 certification ?

According to Rankiteo, Pharmaceutical Commerce is not certified under SOC 2 Type 1.

Does Pharmaceutical Commerce have SOC 2 Type 2 certification ?

According to Rankiteo, Pharmaceutical Commerce does not hold a SOC 2 Type 2 certification.

Does Pharmaceutical Commerce comply with GDPR ?

According to Rankiteo, Pharmaceutical Commerce is not listed as GDPR compliant.

Does Pharmaceutical Commerce have PCI DSS certification ?

According to Rankiteo, Pharmaceutical Commerce does not currently maintain PCI DSS compliance.

Does Pharmaceutical Commerce comply with HIPAA ?

According to Rankiteo, Pharmaceutical Commerce is not compliant with HIPAA regulations.

Does Pharmaceutical Commerce have ISO 27001 certification ?

According to Rankiteo,Pharmaceutical Commerce is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Pharmaceutical Commerce operate in ?

Pharmaceutical Commerce operates primarily in the Pharmaceutical Manufacturing industry.

How many employees does Pharmaceutical Commerce have ?

Pharmaceutical Commerce employs approximately 32 people worldwide.

Does Pharmaceutical Commerce own any subsidiaries ?

Pharmaceutical Commerce presently has no subsidiaries across any sectors.

How many LinkedIn followers does Pharmaceutical Commerce have ?

Pharmaceutical Commerce's official LinkedIn profile has approximately 8,078 followers.

What is the NAICS classification code for Pharmaceutical Commerce ?

Pharmaceutical Commerce is classified under the NAICS code 3254, which corresponds to Pharmaceutical and Medicine Manufacturing.

Does Pharmaceutical Commerce have a Crunchbase profile ?

No, Pharmaceutical Commerce does not have a profile on Crunchbase.

Does Pharmaceutical Commerce have a LinkedIn profile ?

Yes, Pharmaceutical Commerce maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/pharmaceutical-commerce.

How many cybersecurity incidents has Pharmaceutical Commerce experienced ?

As of July 7, 2026, Rankiteo reports that Pharmaceutical Commerce has not experienced any cybersecurity incidents.

How many peer or competitor companies does Pharmaceutical Commerce have ?

Pharmaceutical Commerce has an estimated 5,702 peer or competitor companies worldwide.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Pharmaceutical Commerce

Boost Score +25 with badge (5 left)

751

/1000

Fair

776

/1000

Fair

Pharmaceutical Commerce Vendor Cyber Rating & Cyber Score

PharmaceuticalCommerce.com

Add Your Compliance Badge

Pharmaceutical Commerce is dedicated to the commercial operations of the North American pharmaceutical industry. Four times a year, its 16,000 executive readers get the latest information and analysis commercial operations, marketing/sales best practices, supply chain management, product packaging and security, information technology and legal/regulatory services. The magazine covers the flow of products into distribution channels, the flow of information between the industry and healthcare providers, and the flow of funds in trading and payer agreements.

Pharmaceutical Commerce A.I CyberSecurity Scoring

Scoring History

Pharmaceutical Commerce

Pharmaceutical Commerce CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

No data available

Loading…

A.I.

Pharmaceutical Commerce Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Pharmaceutical Commerce

Incidents vs Pharmaceutical Manufacturing Industry Avg (This Year)

No incidents recorded for Pharmaceutical Commerce in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Pharmaceutical Commerce in 2026.

Incident Types Pharmaceutical Commerce vs Pharmaceutical Manufacturing Industry Avg (This Year)

No incidents recorded for Pharmaceutical Commerce in 2026.

Incident History - Pharmaceutical Commerce (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Pharmaceutical Commerce Subsidiaries

Parent Company

Pharmaceutical Commerce

Pharmaceutical Manufacturing

Website: http://PharmaceuticalCommerce.com

Company Size: 32

No subsidiary data available for this company.

Loading…

Pharmaceutical Commerce Similar Companies

Zydus Group

zyduslife.com

The Zydus Group with an overarching purpose of empowering people with freedom to live healthier and more fulfilled lives, is an innovative, global life-sciences company that discovers, develops, manufactures, and markets a broad range of healthcare therapies. The group employs over 27000 people worldwide and is driven by its mission to unlock new possibilities in life-sciences through quality healthcare solutions that impact lives. The group aspires to transform lives through pathbreaking discoveries.

Ipca Laboratories Limited

ipca.com

A consumer-led global pharmaceutical company, creating healthy doses of life since 1949. When you operate in an industry like pharmaceuticals, your work goes way beyond creating ‘products for customers’. It is different from any other domain – there lies a higher sense of responsibiliti and a need for utmost integriti in everything you do. As you serve millions of lives, high qualiti standards become a pre-requisite, and safeti of your people and consumers always comes first. All this, while ensuring that each life you touch is treated with respect and digniti. For more than 60 years, Ipca has been a crucial healthcare partner in over 120 countries across the 6 continents. We are a fully-integrated pharmaceutical company that manufactures over 350 formulations and 80 APIs for various therapeutic segments. Today, we are one of the world’s largest manufacturers and suppliers of over a dozen APIs. These are produced from scratch at fully-automated manufacturing facilities, approved by the world’s most discerning drug regulatory authorities like UK-MHRA, EDQM-Europe, and WHO-Geneva, among others. - One of the largest suppliers of these APIs worldwide with manufacturing leadership in over 12 APIs globally - 15 APIs & 11 Formulations manufacturing facility across the globe Leader in DMARDs (Disease Modifying Anti-Rheumatic Drugs) treatment for Rheumatoid Arthritis - Leading brands in Pain, Rheumatology, Antimalarials and Hair care therapy - 4 formulations rank amongst the top 300 brands of IPM as per IQVIA

Johnson & Johnson Innovative Medicine

cb jnj.com

At Johnson & Johnson Innovative Medicine, we innovate with purpose, to lead where medicine is going. The experiences of patients around the world inform and inspire our science-based innovations, which continue to change and save lives. Applying rigorous science with compassion, we confidently address the most complex diseases of our time and develop the potential medicines of tomorrow. We are continuously working to develop treatments, aspiring to find cures, pioneering the path from lab to life, and championing patients every step of the way. https://bit.ly/3reuMvK

Fresenius Kabi

fresenius-kabi.com

As a global healthcare company, Fresenius Kabi is Committed to Life. The company’s products, technologies, and services are used for the therapy and care of critically and chronically ill patients. With over 41,000 employees and present in over 100 countries, Fresenius Kabi’s expansive product portfolio focuses on providing access to high-quality and lifesaving medicines and technologies. In Biopharma, Fresenius Kabi offers cutting-edge biosimilars for autoimmune diseases and oncology. With leading market positions in Clinical Nutrition, a broad portfolio of enteral and parenteral products makes a distinct difference in patients’ nutritional status. In MedTech, the company provides vital infusion pumps, cell and gene therapy devices, disposables, and more. Fresenius Kabi is the global leader in supplying blood collection bags and devices, supporting blood banks and healthcare facilities worldwide. The company’s I.V. Generics and Fluids for infusion therapy help save millions of lives every year, in emergency medicine, surgery, oncology, and intensive care. Fresenius Kabi takes a holistic approach to healthcare and uniquely combines experience, expertise, innovation, and dedication – making a difference in the lives of 450 million patients annually. With the #FutureFresenius strategy, the company is developing, producing, and selling new products and technologies and aspires to expand its position as a leading global provider of therapies, improve patient care, generate sustainable value for stakeholders – shaping the future of healthcare. Fresenius Kabi is an operating company of the Fresenius Group, founded in 1912, along with Helios and Quirónsalud. As ONE team, the companies in the Fresenius Group are committed to providing lifesaving and life-changing healthcare solutions on a global scale. User information & community guidelines: https://www.fresenius-kabi.com/social-media-terms-conditions Imprint: www.fresenius-kabi.com/imprint

MANKIND PHARMA LTD

mankindpharma.com

Mankind Pharma, one of the top 5 leading pharmaceutical companies in India, started its journey in 1995. Today, we have an employee base of over 20,000 and are racing towards $1 Billion. At Mankind, we aspire to aid the community in leading a healthy life by formulating, developing, commercializing, and delivering affordable and accessible medicines that satisfy urgent medical needs. We take great pride in the success of our products ranging from Pharma, OTC and FMCG brands like Manforce Condoms, Manforce Tablets, Manforce Staylong Gel, Unwanted 72, Prega News, Gas-O-Fast, Kaloree 1, Kabzend, Acne Star Gel and many others. Our operations are in 34 overseas destinations across Asia, Africa, South-East Asia, Gulf countries and CIS countries. Our Vision - To be a global pharmaceutical company, most admired for its Affordability, Quality and Accessibility of products. Our Mission - To be able to provide cost-effective, innovation based superior quality pharmaceutical products across the globe, to improve the lives of the patients. Mankind strongly believes and follows its Core Values: 𝐂𝐮𝐬𝐭𝐨𝐦𝐞𝐫 𝐂𝐞𝐧𝐭𝐫𝐢𝐜𝐢𝐭𝐲: Commitment to Customer - Internal and External 𝐐𝐮𝐚𝐥𝐢𝐭𝐲: It is in our DNA to maintain and deliver highest quality standards and products 𝐈𝐧𝐧𝐨𝐯𝐚𝐭𝐢𝐨𝐧: Intensely Research driven organization aiming at product innovation and technology improvements 𝐈𝐧𝐭𝐞𝐠𝐫𝐢𝐭𝐲: Always trustworthy, widely respected to be honest, and believed by everyone 𝐆𝐨 𝐁𝐞𝐲𝐨𝐧𝐝: Aim higher than capabilities 𝐏𝐞𝐨𝐩𝐥𝐞 𝐃𝐞𝐯𝐞𝐥𝐨𝐩𝐦𝐞𝐧𝐭 𝐚𝐧𝐝 𝐂𝐨𝐥𝐥𝐚𝐛𝐨𝐫𝐚𝐭𝐢𝐨𝐧: Together we are foreseeing future and diligently stimulating our people in attaining goals

Torrent Pharmaceuticals Ltd

cb torrentpharma.com

Torrent Pharma, with annual revenues of more than Rs 10,700 crores, is the flagship Company of the Torrent Group, with group revenues of Rs 41,000 crores. It is ranked 5th in the Indian Pharma Market and is among the Top 5 in the therapeutic segments of Cardiovascular (CV), Central Nervous System (CNS), Gastro-intestinal (GI), Vitamins Minerals Nutritionals (VMN) and Cosmo-Dermatology. The Company also has significant presence in diabetology, pain management, gynaecology, oncology and anti-infective segments. Torrent has 8 manufacturing facilities , of which 5 are USFDA approved. With R&D as the backbone for its growth in domestic & overseas market, it has invested significantly in R&D capabilities with state-of-the-art R&D infrastructure employing around 800 scientists. The acquisition of Elder Pharma's Indian branded business in 2013, Dermaceuticals business of Zyg Pharma in 2015, API plant of Glochem Industries in 2016, Women healthcare brands from Novartis and Unichem's Indian branded business along with its Sikkim Plant in 2017 strengthened Torrent Pharma's position in the Indian Pharma market. Torrent Pharma started international acquisitions in 2005 with entry into the German market. Today, the Company has presence in more than 50 countries and is ranked No. 1 among the Indian pharma Companies in Brazil and Germany. Torrent Pharma is committed towards “not just healthcare but lifecare.”

Cipla

cipla.com

Cipla is a leading global pharmaceutical company trusted by healthcare professionals and patients across the world since 1935. A compassionate approach to healthcare that goes beyond the pursuit of profit and growth has been the force impelling Cipla’s history over the years. Our credo and our purpose of ‘Caring for Life' continues to guide our actions towards our people and the planet for creating a sustainable future. Cipla today has presence in 80+ countries, providing over 1,500 products across various therapeutic categories in 50+ dosage forms. Keeping with our legacy of care, we constantly strive to ensure access to high-quality medicines that make a difference in the lives of patients. Our paradigm-changing offer of a triple anti-retroviral (ARV) therapy in HIV/AIDS at less than a dollar a day in Africa in 2001 was pivotal in bringing inclusiveness, accessibility and affordability to the centre of the HIV movement. An unmatched presence across the care continuum (awareness, prevention, diagnosis, treatment and adherence) and the widest range of drug-device combinations has established Cipla’s respiratory leadership in India and other key emerging markets. Armed with this legacy and a deep understanding of the lungs, we have articulated our aspiration to become a global lung leader and help millions breathe free.

Alkem Laboratories Ltd.

alkemlabs.com

A single idea, which sprouts from a human mind, contains the potential to create marvels that can influence generations. It can redefine rules, it can transform the world. Back in the year 1973, a team of individuals came with such an idea – The idea called Alkem. It was highly potent and resilient, like a spark that could ignite a thousand more ideas. And it did! Looking back at our 4 decade, illustrious journey, that one small idea has Not only triggered us to become one of India’s largest generic and specialty pharmaceutical company but also, create a foothold in over 50 countries 32% of our revenue is generated via offshore sales. As well as we have consistently been ranked amongst the top ten pharmaceutical companies in India. Our portfolio includes illustrious brands like Clavam, Pan, Pan-D and Taxim-O, which feature amongst top 50 pharmaceutical brands in India. For over a decade, our dominance in anti-infective segment has remained unchallenged. We have 21 manufacturing facilities at multiple locations in India and the United States of America. Our upper-crest facilities are inspected and audited as per cGMP guidelines as laid down by leading regulatory authorities such as USFDA, MHRA - UK, SAHPRA-South Africa, TGA - Australia, ANVISA - Brazil, WHO - Geneva, TPD - Health Canada, PPB - Kenya, NDA - Uganda, MOH - Sudan, INVIMA - Colombia, TFDA - Tanzania, Zimbabwe, BfArM-Germany & Other Africa, Asian & CIS Countries. Another feather in our cap was added on December 23rd, 2015, when, Alkem completed it's Initial Public Offering (IPO) and was listed on the Bombay Stock Exchange Limited and the National Stock Exchange of India Limited. Although passion is the fuel that keeps ideas alive, innovation is the catalyst that gives it flight! With over 500 scientists working in 5 global R&D centers, we are empowering innovations that align with our philosophy of ‘Extended Lifecare Beyond Boundaries’.

Novo Nordisk

novonordisk.com

We’re not your typical healthcare company. In a modern world of quick fixes, we focus on solutions to defeat serious chronic disease and create long-term health. Our unordinary mindset is at the heart of everything we do. We seek out new ideas and put people first as we push the boundaries of science, make healthcare more accessible, and work to treat, prevent, and even cure diseases that affect millions of lives. Founded in Denmark in 1923, today we employ more than 77,000 people in 80 offices around the world – all united by our bold purpose to drive change to defeat serious chronic diseases. Want to learn more? Visit www.novonordisk.com. This page isn’t intended for discussions about products. As such, postings or comments that contain product discussions may be removed. This page is for discussions about Novo Nordisk and its subsidiaries and the initiatives and projects we are involved in. While we welcome everyone to make comments, we reserve the right to block and remove those that are off-topic, abusive or intended to spam. Any questions specific to products should be made to your healthcare professional. If you wish to file an adverse drug reaction please contact Novo Nordisk’s office in the country you live in: https://www.novonordisk.com/contact-us/find-local-information.html For other customer complaints, please contact us here: https://www.novonordisk.com/contact-us.html Please keep in mind that Novo Nordisk A/S and its subsidiaries work within a highly regulated industry. Therefore, comments that pertain to legal matters or regulatory issues may be removed. Comments contained on this site come from members of the public, and do not necessarily reflect the views of Novo Nordisk A/S. Novo Nordisk A/S does not endorse or approve any content added by other LinkedIn users. Learn more about our privacy disclaimer and community guidelines here: https://www.novonordisk.com/data-privacy-and-user-rights/social-media-privacy-disclaimer.html

Loading…

NEWS

Pharmaceutical Commerce CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 02, 2026 08:19 PM

Pharma Pulse: Regulatory Speed Records

In today's Pharma Pulse, the FDA grants a lightning-fast approval for Boehringer's lung cancer therapy under its new priority program,...

Read Article

February 27, 2026 10:03 PM

Cybersecurity and AI in the Era of Home-Based Care Logistics

A conversation with Kenco's Tim McClatchy explores how pharmaceutical logistics providers are strengthening cybersecurity across...

Read Article

February 27, 2026 09:35 PM

Quality and Compliance in the Pharmaceutical Industry: Navigating a Transformed Landscape

Rising recalls, tighter FDA enforcement, global supply chain dependencies, and rapid technology shifts are reshaping pharmaceutical quality...

Read Article

February 26, 2026 03:19 PM

Flat 2027 Medicare Advantage Rates Signal Tighter Budgets—and Tougher Access Ahead

CMS's CY 2027 Medicare Advantage rates signal mounting cost pressure, setting the stage for tighter benefits, tougher contracting,...

Read Article

February 10, 2026 08:00 AM

FAQ: What Domestic Manufacturing Means for Drug Supply Chains

As policy pressure, tariffs, and supply chain risks push drugmakers to expand US-based production, this FAQ explains what pharma reshoring...

Read Article

January 16, 2026 08:00 AM

Article | This pharmaceutical executive has Trump's ear

Corporate CEOs trying to figure out how to get on President Donald Trump's good side need look no further. David Ricks, CEO of the...

Read Article

January 09, 2026 01:07 PM

How AI Is Transforming Healthcare and Pharma

Philip Sclafani, PwC's pharmaceutical and life sciences lead, provides a breakdown of how AI is disrupting the healthcare industry, moving past the...

Read Article

January 02, 2026 08:00 AM

Modernizing the Last Mile

In the final part of his Pharma Commerce video interview, Arthur Axelrad, co-founder and CEO of Dispatch Science, explains how outdated,...

Read Article

December 23, 2025 08:00 AM

Trade & Channel Strategies 2025: Why Wholesalers Remain Pharma’s Backbone

As drugmakers experiment with direct-to-patient sales, Thani Jambulingam, PhD, professor of food, pharma, and healthcare business at Saint...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-53646

SUMMARY

FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when a `ClientPasswordReset` record already exists for a client (from a previous unexpired reset request), subsequent calls to the `reset_password` guest API endpoint reuse the existing token instead of generating a new one. The 15-minute validity window is anchored to the first request's `created_at` timestamp, not the time of the most recent email. An attacker who obtained the original reset link remains able to use it even after the victim requests a new reset, because the original token is never invalidated or rotated. Version 0.8.0 patches the issue. Some workarounds are available. Configure a reverse proxy (e.g., Nginx, Apache, Cloudflare) to apply per-IP rate limiting to the `/client/reset-password` endpoint to minimize the window of opportunity, and/or manually clear expired `client_password_reset` records from the database after a client reports a suspected compromise.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 7.7

Complexity: HIGH

CVSS:4.0/AV:N/AC:H/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-vp66-w6rc-x32p

CVE-2026-53645

SUMMARY

FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow a low-privileged staff account to grant arbitrary module permissions to itself through the admin API, resulting in persistent privilege escalation. A staff user that only has `staff.create_and_edit_staff` can call `/api/admin/staff/permissions_update` targeting their own account and write any permission structure, bypassing the intended role-based access control boundary. Version 0.8.0 patches the issue. Some workarounds are available. Restrict the `staff.create_and_edit_staff` permission to only highly trusted staff members and/or use a reverse proxy or WAF to restrict access to `/api/admin/staff/permissions_update` to specific trusted roles.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 8.5

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-4hf7-xxxw-64rm

CVE-2026-53644

SUMMARY

FOSSBilling is a free, open-source billing and client management system. Versions 0.5.3 through 0.7.2 allow authenticated clients to both read and reset API key service secrets for orders that are no longer in an `active` state (e.g., `suspended`, `canceled`). The root cause is missing order-state validation in two client API endpoints, despite an `isActive()` helper already existing in the `Serviceapikey` module and the frontend UI correctly gating access on `order.status == 'active'`. Version 0.8.0 contains a fix. Some workarounds are available. If the `Serviceapikey` module is not needed, uninstall it to remove the affected endpoints. One may also use a reverse proxy or WAF to restrict access to `/api/client/order/service` and `/api/client/serviceapikey/reset` based on application-level order-state logic.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 8.6

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-qf6j-vq68-qmfh

CVE-2026-53643

SUMMARY

FOSSBilling is a free, open-source billing and client management system. Versions prior to 0.8.0 allow low-privileged staff accounts to perform unauthorized actions via admin API endpoints. The root cause is a combination of the `can_always_access` module flag (which grants all staff access to certain modules) and insufficient permission checks or unsafe parameter handling on individual endpoints. Version 0.8.0 contains a fix. Some workarounds are available. Restrict staff accounts to only those who need access to sensitive settings and/or use a reverse proxy or WAF to restrict access to the affected endpoints to trusted IP addresses or higher-privilege roles.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-563q-g4r4-6f9m

CVE-2026-53642

SUMMARY

FOSSBilling is a free, open-source billing and client management system. In versions 0.5.6 through 0.7.2, when the "Require Email Confirmation" setting is enabled, a logged-in client with an unverified email address (`email_approved = 0`) can access all client-area pages (e.g. `/client/balance`, `/client/order/list`, `/client/invoice`) and read real account data, including wallet balances and transaction history. The API-side enforcement correctly restricts unverified clients to only profile-related endpoints, but the page-side enforcement is overly permissive, allowing any request whose path starts with `/client`. Version 0.8.0 contains a fix. No known workarounds that don't involve modifying the source code are available.

Published

Date2026-07-06

Updated

Date2026-07-06

RISK INFORMATION (Score: )

cvss4

Base Score: 5.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/FOSSBilling/FOSSBilling/security/advisories/GHSA-7v47-rh46-w923

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…