What is the official website of Ourglass. ?

The official website of Ourglass. is http://www.ourglass.co.

What is Ourglass.'s cybersecurity risk score?

Ourglass. has an AI-generated cybersecurity risk score of 764 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Ourglass. experienced?

According to Rankiteo, Ourglass. currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Ourglass. been affected by any supply chain cyber incidents ?

According to Rankiteo, Ourglass. has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: ServiceNow (Incident ID: SALSERCON1786602506) Salesforce (Incident ID: BRI1785435859) Klue (Incident ID: HUNSALKLU1781793603) Oracle (Incident ID: ORA1781526596) Snowflake (Incident ID: DEN1779855877) Salesforce (Incident ID: CHA1779582281) Oracle (Incident ID: SALORAEAS1781684937) Salesforce (Incident ID: CARADTSALCUS1778027258) Okta (Incident ID: ADT1777286874) Salesforce (Incident ID: PANADTSAL1777328877) Salesforce (Incident ID: ADT1777062235) Anodot by Glassbox (Incident ID: CARHOLPRI1776630318) Salesforce (Incident ID: KEM1776831908) Salesforce (Incident ID: MCGSAL1776191039) Salesforce (Incident ID: WYN7-E1779114946) Salesforce (Incident ID: WEASAL1778732635) Aqua Security (Incident ID: AQUUSEAMASALCIS1775046662) LiteLLM (Incident ID: AQU1774671948) Mixpanel (Incident ID: ZEN1774628650) Salesforce (Incident ID: INFSAL1774362301) Salesforce (Incident ID: BER1776292480) Amazon Web Services (AWS) (Incident ID: SALAMAMICPINRED1774269319) okta (Incident ID: NOROKTSAL1773854168) Salesforce (Incident ID: SAL1773146972) Salesforce Experience Cloud (Incident ID: SALLASAMDSNOSONOKT1773153462) Salesforce (Incident ID: SALHAL1775967850) Salesforce (Incident ID: TIFLVMCHR1770865579) Salesforce (Incident ID: EURODI1770907059) okta (Incident ID: OKTSALGOO1769222214) Agentforce Marketing (Incident ID: SALFOR1778063116) Salesforce (Incident ID: PLADRA1774449041) Drift, a Salesloft company (Incident ID: SAL4794547112625) Salesforce (Incident ID: GAI1122911112425) Salesforce (Incident ID: SAL5592855100325) Salesforce (Incident ID: SAL2862828092525) Cisco (Incident ID: SAL5732257091825) Salesloft (Incident ID: DRI514090325) Salesforce Experience Cloud (Incident ID: ENTSAL1773088371) Salesforce (Incident ID: DRI635082925) Salesforce (Incident ID: SALFAR1767922939) Salesforce (Incident ID: WOR1768679649) Salesforce (Incident ID: TRA1021410090425) moveIT Software (Incident ID: ORA4202442101025) Salesforce (Incident ID: SAL0562205100825) Salesforce (Incident ID: SALODI1772484824) Salesforce (Incident ID: GRU1768529823) Salesforce (Incident ID: GRU1769118538) Salesforce (Incident ID: LOUPARVOLTIFJAP1770908674) Salesforce (Incident ID: THEINGSALJAGORASYNDAV1769095448) Salesforce (Incident ID: QILCYBSALHALPLA1768955694) Salesforce (Incident ID: SALGOO1781576985)

Does Ourglass. have SOC 2 Type 1 certification ?

According to Rankiteo, Ourglass. is not certified under SOC 2 Type 1.

Does Ourglass. have SOC 2 Type 2 certification ?

According to Rankiteo, Ourglass. does not hold a SOC 2 Type 2 certification.

Does Ourglass. comply with GDPR ?

According to Rankiteo, Ourglass. is not listed as GDPR compliant.

Does Ourglass. have PCI DSS certification ?

According to Rankiteo, Ourglass. does not currently maintain PCI DSS compliance.

Does Ourglass. comply with HIPAA ?

According to Rankiteo, Ourglass. is not compliant with HIPAA regulations.

Does Ourglass. have ISO 27001 certification ?

According to Rankiteo,Ourglass. is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Ourglass. operate in ?

Ourglass. operates primarily in the Technology, Information and Internet industry.

How many employees does Ourglass. have ?

Ourglass. employs approximately 4 people worldwide.

Does Ourglass. own any subsidiaries ?

Ourglass. presently has no subsidiaries across any sectors.

How many LinkedIn followers does Ourglass. have ?

Ourglass.'s official LinkedIn profile has approximately 1,009 followers.

What is the NAICS classification code for Ourglass. ?

Ourglass. is classified under the NAICS code 513, which corresponds to Others.

Does Ourglass. have a Crunchbase profile ?

Yes, Ourglass. has an official profile on Crunchbase, which can be accessed here: https://www.crunchbase.com/organization/ourglass.

Does Ourglass. have a LinkedIn profile ?

Yes, Ourglass. maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/plannedup.

How many cybersecurity incidents has Ourglass. experienced ?

As of August 15, 2026, Rankiteo reports that Ourglass. has experienced 68 cybersecurity incidents.

How many peer or competitor companies does Ourglass. have ?

Ourglass. has an estimated 15,168 peer or competitor companies worldwide.

What types of cybersecurity incidents has Ourglass. faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability, Cyber Attack, Breach and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

Ourglass.

Boost Score +25 with badge (5 left)

764

/1000

Fair

789

/1000

Fair

Ourglass. Vendor Cyber Rating & Cyber Score

ourglass.co

cb in

Add Your Compliance Badge

Who’s in your inner circle? Ourglass is an honest, private space to share your day with 12 best friends. Build your inner circle and share the story of your day in high-definition. Snap pictures of events in your day, or upload from the camera roll.Your stories save, so you can travel back in time and relive life. Tap the shuffle-button to randomly browse stories from your friends’ past. Do you know what your closest friends are actually doing right now? Find out, on Ourglass!

Ourglass. A.I CyberSecurity Scoring

Scoring History

Ourglass.

Ourglass. CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Salesforce Experien...

Vulnerability

8/2026

ServiceNow

SALSERCON178660...

Salesforce

Breach

8/2026

AMASAL178601233...

Salesforce

Breach

7/2026

Salesforce

BRI1785435859

Salesforce

Cyber Attack

6/2026

Klue

HUNSALKLU178179...

Salesforce

Vulnerability

100

6/2026

Oracle

ORA1781526596

Salesforce

Breach

5/2026

Snowflake

DEN1779855877

Salesforce

Breach

5/2026

Salesforce

CHA1779582281

Salesforce

Vulnerability

5/2026

Oracle

SALORAEAS178168...

Salesforce

Breach

5/2026

SAL1786285485

Salesforce

Cyber Attack

5/2026

Salesforce

CARADTSALCUS177...

Salesforce

Cyber Attack

4/2026

GOOSAL177791964...

Salesforce

Cyber Attack

4/2026

SAL1777395283

Salesforce

Cyber Attack

100

4/2026

Okta

ADT1777286874

Salesforce

Breach

4/2026

Salesforce

PANADTSAL177732...

Salesforce

Breach

4/2026

Salesforce

ADT1777062235

Salesforce

Breach

4/2026

Anodot by Glass...

CARHOLPRI177663...

Salesforce

Breach

4/2026

Salesforce

KEM1776831908

Salesforce

Vulnerability

4/2026

SAL1776299258

Salesforce

Breach

4/2026

Salesforce

MCGSAL177619103...

Salesforce

Vulnerability

4/2026

SAL1776084470

Salesforce

Breach

4/2026

Salesforce

WYN7-E177911494...

Salesforce

Vulnerability

4/2026

Salesforce

WEASAL177873263...

Salesforce

Vulnerability

100

4/2026

Aqua Security

AQUUSEAMASALCIS...

Salesforce

Vulnerability

100

3/2026

LiteLLM

AQU1774671948

Salesforce

Ransomware

100

3/2026

Mixpanel

ZEN1774628650

Salesforce

Breach

3/2026

Salesforce

INFSAL177436230...

Salesforce

Breach

100

3/2026

Salesforce

BER1776292480

Salesforce

Vulnerability

100

3/2026

Amazon Web Serv...

SALAMAMICPINRED...

Salesforce

Breach

100

3/2026

okta

NOROKTSAL177385...

Salesforce

Breach

3/2026

Salesforce

SAL1773146972

Salesforce Experien...

Breach

3/2026

Salesforce Expe...

SALLASAMDSNOSON...

Salesforce

Breach

3/2026

Salesforce

SALHAL177596785...

Salesforce

Breach

2/2026

TOYOPTSAL177195...

Salesforce

Breach

2/2026

Salesforce

TIFLVMCHR177086...

Salesforce

Breach

2/2026

Salesforce

EURODI177090705...

Salesforce

Cyber Attack

1/2026

okta

OKTSALGOO176922...

Agentforce Marketin...

Vulnerability

1/2026

Agentforce Mark...

SALFOR177806311...

Salesforce

Cyber Attack

100

1/2026

SAL1768394538

Salesforce

Ransomware

100

1/2026

Salesforce

PLADRA177444904...

Salesforce

Breach

100

11/2025

Drift, a Salesl...

SAL479454711262...

Salesforce

Breach

11/2025

Salesforce

GAI112291111242...

Salesforce

Ransomware

100

10/2025

Salesforce

SAL559285510032...

Salesforce

Breach

100

9/2025

Salesforce

SAL286282809252...

Salesforce

Cyber Attack

100

9/2025

Cisco

SAL573225709182...

Salesforce

Cyber Attack

100

9/2025

Salesloft

DRI514090325

Salesforce Experien...

Breach

9/2025

Salesforce Expe...

ENTSAL177308837...

Salesforce

Breach

8/2025

Salesforce

DRI635082925

Salesforce

Vulnerability

100

8/2025

Salesforce

SALFAR176792293...

Salesforce

Breach

8/2025

Salesforce

WOR1768679649

Salesforce

Breach

7/2025

Salesforce

TRA102141009042...

Salesforce

Ransomware

100

7/2025

moveIT Software

ORA420244210102...

Ourglass.

Cyber Attack

100

6/2025

SAL540255411062...

Salesforce

Cyber Attack

100

5/2025

Salesforce

SAL056220510082...

Salesforce

Vulnerability

5/2025

Salesforce

SALODI177248482...

Ourglass.

Breach

3/2025

SAL313223110082...

Salesforce

Breach

2/2025

Salesforce

GRU1768529823

Salesforce

Breach

1/2025

Salesforce

GRU1769118538

Salesforce

Breach

1/2025

Salesforce

LOUPARVOLTIFJAP...

Salesforce

Ransomware

100

1/2025

Salesforce

THEINGSALJAGORA...

Ourglass.

Cyber Attack

100

8/2024

SAL210212110042...

Salesforce

Cyber Attack

100

8/2024

SALARU177197435...

Ourglass.

Cyber Attack

100

6/2024

SAL096210910082...

Salesforce

Ransomware

100

6/2024

Salesforce

QILCYBSALHALPLA...

Ourglass.

Cyber Attack

100

5/2024

SAL500215010092...

Ourglass.

Ransomware

100

10/2023

SAL560205610112...

Ourglass.

Ransomware

100

6/2023

SAL423224210102...

Ourglass.

Cyber Attack

05/2019

SAL215719323

Salesforce

Breach

1/2014

Salesforce

SALGOO178157698...

Loading…

A.I.

Ourglass. Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for Ourglass.

Incidents vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for Ourglass. in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Ourglass. in 2026.

Incident Types Ourglass. vs Technology, Information and Internet Industry Avg (This Year)

No incidents recorded for Ourglass. in 2026.

Incident History - Ourglass. (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Ourglass. Subsidiaries

Ourglass.

Technology, Information and Internet

Website: http://www.ourglass.co

Company Size: 4

SalesforceSoftware Development

SalesforceOrg PartnersIT Services and IT Consulting

TrailheadIT Services and IT Consulting

Salesforce Commerce CloudTechnology, Information and Internet

Vlocity, a Salesforce CompanySoftware Development

PardotSoftware Development

Salesforce Revenue CloudSoftware Development

ExactTargetSoftware Development

Salesforce Pathfinder Training ProgramIT Services and IT Consulting

Salesforce QuipSoftware Development

QuipSoftware Development

Salesforce Trailhead SuperbadgesInformation Services

Salesforce Work.comIT Services and IT Consulting

EntropySoftSoftware Development

ThinkfuseSoftware Development

GoInstantTechnology, Information and Internet

EdgeSpring (acquired by Salesforce)IT Services and IT Consulting

BlueTailInformation Technology & Services

Model MetricsInformation Technology & Services

Etacts Inc.Computer Networking

Navajo SystemsIT Services and IT Consulting

GroupSwimSoftware Development

SitemasherSoftware Development

Clipboard, inc.Software Development

Prior Knowledge, Inc.Software Development

ManymoonTechnology, Information and Internet

Salesforce Data CloudSoftware Development

Salesforce Experience CloudSoftware Development

Salesforce for Small BusinessSoftware Development

Salesforce ArchitectsIT Services and IT Consulting

Salesforce DevelopersSoftware Development

Salesforce.orgSoftware Development

Salesforce PartnersIT Services and IT Consulting

Salesforce for GovernmentTechnology, Information and Internet

Salesforce Sales CloudSoftware Development

Salesforce Customer SuccessSoftware Development

Futureforce: Salesforce University RecruitingInternet Publishing

Salesforce AdminsSoftware Development

Salesforce NewsTechnology, Information and Internet

Salesforce IndustriesTechnology, Information and Internet

Salesforce AppExchangeIT Services and IT Consulting

Salesforce DesignersSoftware Development

Salesforce PlatformSoftware Development

Salesforce Marketing CloudSoftware Development

Salesforce for ServiceSoftware Development

DreamforceInternet Publishing

Loading…

Ourglass. Similar Companies

Meesho

meesho.io

Meesho is India’s e-commerce marketplace, on a mission to democratise internet commerce. Our multi-sided technology platform connects four key stakeholders — consumers, sellers, logistics partners, and content creators — to power inclusive growth at scale. We enable individuals and small businesses to sell online with ease, offering access to a wide customer base, integrated logistics, payment solutions, and platform support. For customers, Meesho offers a broad and affordable selection, tailored for diverse needs across Bharat. We also empower creators to build commerce-driven content that drives discovery and engagement. Our logistics operations are powered by Valmo, Meesho’s asset-light logistics platform that works entirely through partner-led infrastructure to ensure cost-efficient and scalable deliveries.

Jumia Group

cb jumia.com

Jumia (NYSE :JMIA) is a leading e-commerce platform in Africa. It is built around a marketplace, Jumia Logistics, and JumiaPay. The marketplace helps millions of consumers and sellers to connect and transact. Jumia Logistics enables the delivery of millions of packages through our network of local partners. JumiaPay facilitates the payments of online transactions for Jumia's ecosystem. With over 1 billion people and 500 million internet users in Africa, Jumia believes that e-commerce is making people's lives easier by helping them shop and pay for millions of products at the best prices wherever they live. E-commerce is also creating new opportunities for SMEs to grow, and job opportunities for a new generation to thrive. With over 3,000 employees in more than 9 countries in Africa, Jumia is led by top talented leaders offering a great mix of local and international talents and is backed by very high-profile shareholders. Jumia is committed to creating sustainable impact in Africa. Jumia offers unique opportunities in a vibrant and booming environment, creating new jobs, new skills, and empowering a new generation.

Akamai Technologies

akamai.com

At Akamai, we make life better for billions of people, billions of times a day. Every day, billions of people around the world connect with their favorite brands to shop online, play the latest video games, log into mobile banking apps, learn remotely, share videos with friends, and so much more. They may not know it, but Akamai is there, powering and protecting life online. Over 20 years ago, we set out to solve the toughest challenge of the early internet: the “World Wide Wait.” And we’ve been solving the internet’s toughest challenges ever since, working toward our vision of a safer and more connected world. With the world’s most distributed compute platform — from cloud to edge — we make it easy for businesses to develop and run applications, while we keep experiences closer to users and threats farther away. That’s why innovative companies worldwide choose Akamai to build, deliver, and secure their digital experiences. Our leading security, compute, and delivery solutions are helping global companies make life better for billions of people, billions of times a day. Devoted, determined problem-solvers who share a passion for technology, we’re always pushing ground-breaking ideas and driving innovation. Want to power and protect life online, by solving the toughest challenges? Be part of an amazing team. Let’s connect: LinkedIn: https://www.linkedin.com/company/akamai-technologies Twitter: https://twitter.com/Akamai Blog: https://www.akamai.com/blog

Fanatics

fanaticsinc.com

Fanatics is a leading global digital sports platform. We ignite the passions of global sports fans and maximize the presence and reach for our hundreds of sports partners globally by offering products and services across Fanatics Commerce, Fanatics Collectibles, and Fanatics Betting & Gaming, allowing sports fans to Buy, Collect, and Bet. Through the Fanatics platform, sports fans can buy licensed fan gear, jerseys, lifestyle and streetwear products, headwear, and hardgoods; collect physical and digital trading cards, sports memorabilia, and other digital assets; and bet as the company builds its Sportsbook and iGaming platform. Fanatics has an established database of over 100 million global sports fans; a global partner network with approximately 900 sports properties, including major national and international professional sports leagues, players associations, teams, colleges, college conferences and retail partners, 2,500 athletes and celebrities, and 200 exclusive athletes; and over 2,000 retail locations, including its Lids retail stores. Our more than 22,000 employees are committed to relentlessly enhancing the fan experience and delighting sports fans globally.

e&

eand.com

We're a global technology group focused on innovation and collaboration to create a better future for all. Since 1976, we've been pioneering new technologies and expanding our reach to more people and places. Today, we provide services to over 163 million customers across 16 countries in the Middle East, Asia, and Africa through our telecom brands under e& international and e& UAE. We're committed to driving the digital future to empower societies and help businesses and governments create a smarter, safer, and more sustainable world through all our business verticals including e& enterprise, e& life, and e& capital. Our goal is to empower people, communities, and societies worldwide to achieve more.

Mynet

mynet.com

Türk internet kullanıcılarının en çok tercih ettiği dijital platform olan Mynet, 1999 yılından bugüne liderliğini koruyor. Kendi alanında sayısız ilki gerçekleştiren öncü internet devi Mynet, Türkiye'nin dijital ekosisteminin kalkınmasına ve gelişmesine destek olmayı sürdürüyor. Her ay ortalama 42 milyon internet kullanıcısına erişen Mynet'in sosyal ağlardaki toplam kitlesi ise 10 milyonu geride bırakmış bulunuyor. Mynet, ziyaretçilerine her ay 100 milyondan fazla video izletiyor. 1 milyonun üzerinde kullanıcısı olan Türkiye’nin en büyük online video eğitim platformu Vidobu ile Türkçe bilen tüm coğrafyanın ihtiyacı olan eğitimleri, alanında uzman eğitmenler ile veriyor. Böylece yüksek kalitedeki eğitimlerin herkes tarafından, her yerden ve düşük maliyetle erişilebilir olmasını sağlıyor. Ayrıca Vidobu, eğitim sektöründeki Global SAAS projesi olan Corviq ile kurumların kendi özel video öğrenme platformlarını oluşturmasını sağlayan bir altyapı da sunuyor. En büyük oyun stüdyolarından biri olan Mynet Games adı altında yayınladığı oyunlarla 10 milyondan fazla oyuncuyla buluşuyor. Kelime Savaşı oyunu Apple tarafından PubG ve Subway Surfers ile birlikte 2019’un en çok indirilen 3 oyunundan biri olarak açıklandı. ABD pazarına sunduğumuz Homer City, HR Master ve Racing Wheels adlı oyunlarımız dünya sıralamasında zirvede yer almıştır. ABD pazarına hybrid-casual’dan mid-core oyunlara kadar oyun geliştiren CASUAL MONSTER ve RARE FORGE şirketlerimiz ile de oyun sektöründe büyümeye devam ediyoruz.

Independiente / Freelance

wikipedia.org

La etimología de la palabra deriva del término medieval inglés usado para un mercenario (free-independiente o lance-lanza), es decir, un caballero que no servía a ningún señor en concreto y cuyos servicios podían ser alquilados por cualquiera. El término fue acuñado inicialmente por Sir Walter Scott (1771-1832) en su reconocido romance histórico Ivanhoe para describir a un "guerrero medieval mercenario". La frase en inglés luego hizo la transición a un sustantivo figurativo alrededor de 1860 y fue luego reconocido como un verbo oficialmente en 1903 por varias autoridades en lingüística tales como el Diccionario Oxford de Inglés. Solamente en tiempos modernos ha mutado el término de un sustantivo (un freelance o un freelancer) y un adverbio (un periodista que trabaja freelance). Esta palabra es empleada como anglicismo en castellano como dos palabras separadas "free lance" (del inglés) o autónomo pero no tiene aplicación como verbo. Fuente: Wikipedia. https://es.wikipedia.org/wiki/Freelance Acerca de Independiente / Freelance Somos una de las comunidades de habla hispana más grandes en LinkedIn para profesionales que eligen trabajar de forma independiente. Un espacio para conectar, compartir recursos y encontrar oportunidades. Publicaciones para Empresas y Reclutadores. Para publicar una búsqueda de talento, por favor envíe los detalles de la oferta a: [email protected] El proceso es simple y asincrónico.

NetEase

cb netease.com

As a leading internet technology company based in China, NetEase, Inc. (NASDAQ: NTES and HKEX:9999, "NetEase") provides premium online services centered around content creation. With extensive offerings across its expanding gaming ecosystem, NetEase develops and operates some of China's most popular and longest running mobile and PC games. Powered by industry-leading inhouse R&D capabilities in China and globally, NetEase creates superior gaming experiences, inspires players and passionately delivers value for its thriving community worldwide. Beyond games, NetEase service offerings include its majority-controlled subsidiaries Youdao (NYSE:DAO), China's leading technology-focused intelligent learning company, and Cloud Music (HKEX:9899), China's leading online music content community, as well as Yanxuan, NetEase's private label consumer lifestyle brand.

Prosus

prosus.com

Prosus is the power behind the world’s leading lifestyle e-commerce brands. Bringing together bold ideas and the power of AI, Prosus builds technology ecosystems where lifestyle ecommerce brands can become global success stories. These ecosystems span three core geographies – Europe, Latin America and India. In these geographies, Prosus simplifies the often-fragmented experience for consumer buyers and sellers, providing an integrated and frictionless approach that helps billions of consumers to buy, sell and transact through food, Fintech, experiences and commerce platforms

Loading…

NEWS

Ourglass. CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-74250

SUMMARY

In OpenStack Ironic before 38.0.1, the autodetect deploy interface may fail to run cleaning immediately after enrollment with, or changing to, the autodetect deploy interface.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 6.3)

cvss3

Base Score: 6.3

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:N/A:N

Impact Score

Exploitability

1.8

REFERENCES

https://bugs.launchpad.net/ossa/+bug/2163017

CVE-2026-74247

SUMMARY

A flaw was found in Red Hat Quay. A user with FEATURE_BUILD_SUPPORT enabled and repository write access can exploit a Server-Side Request Forgery (SSRF) vulnerability within the build API. This allows the user to provide a malicious URL, causing the Quay builder to make requests to internal network addresses. Such an action could lead to the disclosure of sensitive internal information.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 4.2)

cvss3

Base Score: 4.2

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

1.6

REFERENCES

CVE-2026-74245

SUMMARY

A flaw was found in Red Hat Quay's exported logs feature. An unauthenticated attacker with a valid file ID could download exported action logs without proper authorization. While file IDs are complex, they can be intercepted from plaintext email or webhook callbacks. This vulnerability leads to information disclosure, potentially exposing sensitive data such as usernames, email addresses, IP addresses, and action-specific metadata.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-74244

SUMMARY

A flaw was found in Red Hat Quay's Stripe billing webhook handler. This vulnerability allows an unauthenticated attacker to forge billing events by sending crafted JSON requests to the `/webhooks/stripe` endpoint without validating the Stripe-Signature header. Successful exploitation can lead to the unauthorized resetting of a namespace's build quota to its maximum and trigger unsolicited billing emails to namespace administrators.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N

Impact Score

3.6

Exploitability

2.2

REFERENCES

CVE-2026-74243

SUMMARY

A flaw was found in Red Hat Quay. When the SECURITY_SCANNER_V4_PSK (pre-shared key) is not set, a remote unauthenticated attacker can send POST requests to the security scanner notification endpoint. This allows the attacker to flood the notification queue and inject path traversal characters into Clair API URL paths. The primary consequence is worker resource exhaustion and blind path manipulation on the configured Clair host, potentially leading to a denial of service.

Published

Date2026-08-14

Updated

Date2026-08-14

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:L

Impact Score

2.5

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…