What is the official website of RSK DACH-Region ?

The official website of RSK DACH-Region is https://rskgroup.de.

What is RSK DACH-Region's cybersecurity risk score?

RSK DACH-Region has an AI-generated cybersecurity risk score of 750 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has RSK DACH-Region experienced?

According to Rankiteo, RSK DACH-Region currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has RSK DACH-Region been affected by any supply chain cyber incidents ?

According to Rankiteo, RSK DACH-Region has not been affected by any supply chain cyber incidents, and no incident IDs are currently listed for the organization.

Does RSK DACH-Region have SOC 2 Type 1 certification ?

According to Rankiteo, RSK DACH-Region is not certified under SOC 2 Type 1.

Does RSK DACH-Region have SOC 2 Type 2 certification ?

According to Rankiteo, RSK DACH-Region does not hold a SOC 2 Type 2 certification.

Does RSK DACH-Region comply with GDPR ?

According to Rankiteo, RSK DACH-Region is not listed as GDPR compliant.

Does RSK DACH-Region have PCI DSS certification ?

According to Rankiteo, RSK DACH-Region does not currently maintain PCI DSS compliance.

Does RSK DACH-Region comply with HIPAA ?

According to Rankiteo, RSK DACH-Region is not compliant with HIPAA regulations.

Does RSK DACH-Region have ISO 27001 certification ?

According to Rankiteo,RSK DACH-Region is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does RSK DACH-Region operate in ?

RSK DACH-Region operates primarily in the Environmental Services industry.

How many employees does RSK DACH-Region have ?

RSK DACH-Region employs approximately 20 people worldwide.

Does RSK DACH-Region own any subsidiaries ?

RSK DACH-Region presently has no subsidiaries across any sectors.

How many LinkedIn followers does RSK DACH-Region have ?

RSK DACH-Region's official LinkedIn profile has approximately 792 followers.

What is the NAICS classification code for RSK DACH-Region ?

RSK DACH-Region is classified under the NAICS code 54162, which corresponds to Environmental Consulting Services.

Does RSK DACH-Region have a Crunchbase profile ?

No, RSK DACH-Region does not have a profile on Crunchbase.

Does RSK DACH-Region have a LinkedIn profile ?

Yes, RSK DACH-Region maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/rskdach.

How many cybersecurity incidents has RSK DACH-Region experienced ?

As of August 19, 2026, Rankiteo reports that RSK DACH-Region has experienced 1 cybersecurity incidents.

How many peer or competitor companies does RSK DACH-Region have ?

RSK DACH-Region has an estimated 8,568 peer or competitor companies worldwide.

What types of cybersecurity incidents has RSK DACH-Region faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Cyber Attack.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

RSK DACH-Region

Boost Score +25 with badge (5 left)

750

/1000

Fair

775

/1000

Fair

RSK DACH-Region Vendor Cyber Rating & Cyber Score

rskgroup.de

Add Your Compliance Badge

Die RSK-Gruppe mit Hauptsitz in Großbritannien ist mit mehr als 200 Unternehmen in den Bereichen Umweltwissenschaften, Ingenieurwesen und technische Dienstleistungen in über 40 Ländern weltweit tätig. Mit über 15.000 Beschäftigten zählt RSK zu den führenden multidisziplinären privaten Beratungsunternehmen in Europa. In der DACH-Region ist RSK in Deutschland, Österreich und der Schweiz vertreten und seit 1988 aktiv. Als mitarbeitergeführtes Unternehmen legt RSK besonderen Wert auf langfristige Partnerschaften und nachhaltige Entwicklung. • Deutschland: RSK Alenco GmbH und ihre derzeitigen Schwester- und Tochterfirmen Althoff & Lang GmbH, Dr. Tillmanns & Partner GmbH und GeoExperts GmbH • Österreich: RSK Boden + Wasser GmbH • Schweiz: RSK

RSK DACH-Region A.I CyberSecurity Scoring

Scoring History

RSK DACH-Region

RSK DACH-Region CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

RSK DACH-Region

Cyber Attack

10/2025

JEN273212710242...

Loading…

A.I.

RSK DACH-Region Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for RSK DACH-Region

Incidents vs Environmental Services Industry Avg (This Year)

No incidents recorded for RSK DACH-Region in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for RSK DACH-Region in 2026.

Incident Types RSK DACH-Region vs Environmental Services Industry Avg (This Year)

No incidents recorded for RSK DACH-Region in 2026.

Incident History - RSK DACH-Region (X = Date, Y = Severity)

Loading…

SUBSIDIARY

RSK DACH-Region Subsidiaries

RSK DACH-Region

Environmental Services

Website: https://rskgroup.de

Company Size: 201-500 employees

124

RSK GroupEnvironmental Services

BinniesCivil Engineering

Binnies DCWWCivil Engineering

ADASEnvironmental Services

RSK Habitat ManagementEnvironmental Services

ADAS ArboricultureEnvironmental Services

FarmPEPFarming

CANCivil Engineering

MWH TreatmentConstruction

Copper ConsultancyPublic Relations and Communications Services

RSK AfricaEnvironmental Services

CAN RenewablesServices for Renewable Energy

RSK Middle EastEnvironmental Services

RSK GeosciencesEnvironmental Services

RSK Geophysics and SafegroundEnvironmental Services

RSK GeospatialSurveying and Mapping Services

Carbon Zero ConsultingServices for Renewable Energy

Nature PositiveEnvironmental Services

CS2 Chartered SurveyorsConstruction

Cambridge Environmental Assessments, part of RSK ADAS LtdChemical Manufacturing

RSK EnvironmentEnvironmental Services

Envireau WaterEnvironmental Services

BMG ResearchMarket Research

Inis Environmental Consultants Ltd.Environmental Services

RSK International Projects GroupEnvironmental Services

Absolute Solar and Wind LtdRenewable Energy Semiconductor Manufacturing

GeocoreCivil Engineering

The Woodhouse Partnership Ltd (TWPL)Business Consulting and Services

Woodhouse AustralasiaBusiness Consulting and Services

The MSS GroupEnvironmental Services

CX Utilities Ltd (An RSK Company)Utilities

cbec eco-engineering UK & EuropeEnvironmental Services

Stephenson HallidayEnvironmental Services

EDP Consultants AustraliaEnvironmental Services

Spencer Quantum LtdConstruction

Proeon Systems Ltd.Automation Machinery Manufacturing

C J Associates Geotechnical LtdConstruction

Salix River and WetlandEnvironmental Services

RSK WildingEnvironmental Services

ADAS LandscapeArchitecture and Planning

Richard Irvin FM LimitedFacilities Services

WatertrainEducation

Silcock Leedham Group LimitedConstruction

RSK APACEnvironmental Services

HydrofixServices for Renewable Energy

W Crowder & Sons LtdWholesale

RSK ResponseEnvironmental Services

Ian Farmer Associates (1998) LimitedCivil Engineering

RSK AcousticsArchitecture and Planning

RSK NetherlandsEnvironmental Services

Up and UnderCivil Engineering

RSK AsbestosEnvironmental Services

MG Scaffolding LtdConstruction

Pharos Generator Services LimitedMechanical Or Industrial Engineering

RSK BENELUX BVEnvironmental Services

Calibrate Energy LtdRenewable Energy Semiconductor Manufacturing

RSK EnvironnementBusiness Consulting and Services

HI-LINEEnvironmental Services

RSK EcologyEnvironmental Services

CR Civil EngineeringCivil Engineering

Nicholas O'Dwyer LtdEnvironmental Services

Civil Engineering InternationalCivil Engineering

Amphos 21Environmental Services

Structural SoilsCivil Engineering

WRc GroupResearch Services

WGM Engineering LtdEngineering Services

Headland Archaeology (UK) LtdEnvironmental Services

EcologiaEnvironmental Services

Centara Ltd - Surveying, Engineering and CADUtilities

AxisOil and Gas

RSK Ireland Ltd.Environmental Services

PellingsConstruction

Jennings O'Donovan & PartnersCivil Engineering

RSK BiocensusEnvironmental Services

FR ConsultantsConstruction

Central AllianceConstruction

SCPCivil Engineering

COGNICAConstruction

RSK AustraliaEnvironmental Services

ADAS PlanningArchitecture and Planning

Leap EnvironmentalEnvironmental Services

Non Destructive Testing Services LtdConstruction

RoC ConsultingConstruction

EDPBusiness Consulting and Services

Southern Ecological Solutions (SES)Environmental Services

Virtus EnergyComputers and Electronics Manufacturing

1stinrailCivil Engineering

Optisol Services LtdRenewable Energy Semiconductor Manufacturing

FishtekEnvironmental Services

MilestoneConstruction

Richard Allitt Associates LtdCivil Engineering

Remote Aerial SurveysPhotography

rsim Remote SimulationsCivil Engineering

RemedX LtdEnvironmental Services

Streetwise UK Management LtdConstruction

TWIG GroupEnvironmental Services

B-Line and Easy2PlotPrinting Services

RSK LDE (Land and Development Engineering)Civil Engineering

WaldramsReal Estate

Milner AssociatesConstruction

LARSEN WATER MANAGEMENT LTDUtilities

Advantage RSKAlternative Dispute Resolution

Aurora Health Physics Services LtdEnvironmental Services

Acies Civil and Structural LtdCivil Engineering

RSK CreativeDesign Services

Smith + Kennedy ArchitectsArchitecture and Planning

Minerex Environmental Ltd.Environmental Services

ADEV ENVIRONNEMENTEnvironmental Services

Travis BakerCivil Engineering

ATV Contract Services LtdEnvironmental Services

RGM Environmental, Science and Technical support servicesEnvironmental Services

Kirton Water Treatment ServicesUtilities

RSK RadiologicalEnvironmental Services

RSK Consents SolutionsUtilities

Brown & May Marine LtdFisheries

RSK IWS Integrated Waste Solutions LtdUtilities

Dermot Casey Tree Care Ltd.Consumer Services

ATP Architects & Building SurveyorsArchitecture and Planning

Hawkins Electrical LtdAppliances, Electrical, and Electronics Manufacturing

Treefellers LtdEnvironmental Services

Technik GSConstruction

Enviroflow Management LimitedUtilities

EDP Singapore PTEBusiness Consulting and Services

Homer Burgess LtdIndustrial Machinery Manufacturing

Loading…

RSK DACH-Region Similar Companies

Environment Agency

www.gov.uk

We are the Environment Agency. We are the biggest and most wide-ranging environmental regulator in Europe. We work with businesses and communities to protect and improve the environment, for people and wildlife. And the need for our work is becoming ever more important. We protect and improve the environment across England to: • reduce the risks to people and properties from flooding • help businesses and communities adapt to climate change • reduce pressures on biodiversity • help businesses to make sure they don’t harm the environment through pollution or taking too much water • issue licences and permits, and take action against people who don’t take their environmental responsibilities seriously. None of this is possible without a multi-talented team of professional and dedicated people. And just like the environment we help to care for, we’re home to an incredible diversity of skills and knowledge. Today, we employ more than 12,000 people throughout England in a wide range of roles. You’ll find leading scientists and prominent geologists alongside public relations professionals, planners and policy advisors. We employ lawyers, enforcement officers and engineers, conservation scientists and marine biologists. And of course we have a wide team of support staff. We employ people at all stages of their career, from recent graduates to experienced leaders and internationally-renowned experts. Find out how we manage our social media accounts at https://www.gov.uk/government/organisations/environment-agency/about/social-media-use

Grupo Tragsa

tragsa.es

Tragsa Group is a group of public companies, integrated in the State Industrial Ownership Corporation (SEPI), which has become a full service supplier and a reference company to Public Administrations. It is formed by four enterprises: Tragsa (1977) responsible for works and services' execution and Tragsatec (1989) which performs engineering works and technical assistance for every sections of the Group. By these companies, the Group is able to take part in every stage of any project, from its conception and design to its execution. 40 years of experience working for Public Administrations and at the service of society, have settle this business group at the front line of the various fields where it intervenes, from agricultural, forest, livestock and rural development services to environmental conservation and protection. Tragsa Group is represented in all the national territory, what makes it possible to give a quick and efficient response to any request that may be done from the central, autonomic and local administrations. Moreover, our collaboration in more than 120 projects of Spanish cooperation – in over 35 different countries of Northern Africa, Sub-Saharan Africa, Latin America and the Caribbean, Asia, Europe and the Middle East – has given the company international importance. In every field of activity, the differentiating factor of the Group stands in its proved experience, its capacity to give a fast-response and adapt its work to Administration’s needs, and its high I+D+I profile, what makes the group able to provide leading edge technology and the highest quality services

Republic Services

republicservices.com

Republic Services provides the most complete set of recycling, waste and environmental solutions from a single-source provider. We partner with customers to help them achieve their sustainability goals, driving both environmental and economic sustainability. We offer advanced recycling; solid waste, special waste and hazardous waste treatment and disposal; field and industrial services; 24/7 emergency response; and equipment rental and cleaning. We use our expertise to find new opportunities to reduce waste and promote circularity. From our network of state-of-the-art recycling centers to converting gas generated by our landfills into renewable energy to helping companies set and meet their sustainability goals – our 42,000 employees provide sustainable solutions that deliver results. #SustainabilityinAction

Veolia | Water Tech

veoliawatertechnologies.com

As the world leader in water technologies and services, Veolia relies on its 17,500 water technology experts to deliver innovative solutions that drive both performance and sustainability, without compromise. With over 4,400 technology patents and serving more than 14,000 customers worldwide, Veolia’s water technology activities generated 4.97 billion euros in revenue in 2024. These solutions are central to Veolia’s GreenUp strategic plan, accelerating the ecological transformation of cities and industries while safeguarding resources for the future

Clean Harbors

cb cleanharbors.com

Clean Harbors is North America’s leading provider of environmental and industrial services. The Company serves a diverse customer base, including a majority of Fortune 500 companies. Its customer base spans a number of industries, including chemical, and manufacturing, as well as numerous government agencies. These customers rely on Clean Harbors to deliver a broad range of services such as end-to-end hazardous waste management, emergency spill response, industrial cleaning and maintenance, and recycling services. Through its Safety-Kleen subsidiary, Clean Harbors also is North America’s largest re-refiner and recycler of used oil and a leading provider of parts washers and environmental services to commercial, industrial and automotive customers. Founded in 1980 and based in Massachusetts, Clean Harbors operates throughout the United States, Canada, Mexico and Puerto Rico.

Eiffage Énergie Systèmes

eiffageenergiesystemes.com

Rejoindre Eiffage, c’est rejoindre une entreprise animée d’un esprit de famille unique. Nous recherchons des talents qui valorisent l’esprit d’équipe et l’entraide et qui souhaitent découvrir, progresser, innover dans un collectif engagé pour construire un avenir à taille humaine. Nous avons besoin de vos différences et de vos singularités car elles sont la richesse d’un Groupe qui donne sa chance à chacun. Rejoindre Eiffage, c’est rejoindre une grande entreprise qui a tous les atouts d’une petite ! _ Eiffage Énergie Systèmes est la marque des métiers de l’énergie du groupe Eiffage. Eiffage Énergie Systèmes conçoit, réalise, exploite et maintient des systèmes d'énergie. Experte en génies électrique, industriel, climatique et énergétique, Eiffage Énergie Systèmes propose des solutions innovantes portées par de nouvelles marques expertises: 👉 Clemessy, la marque dédiée à l’industrie 👉 Dorsalys, la marque dédiée aux infrastructures et réseaux 👉 Expercité, la marque dédiée aux villes et collectivités 👉 Terceo, la marque dédiée aux bâtiments tertiaires. ➡️ Eiffage Énergie Systèmes, c’est : 38 250 collaborateurs 7.2 Mds€ de chiffre d’affaires total 2.8 Mds€ de chiffre d’affaires en Europe 170 M€ de chiffre d’affaires Grand international (hors Europe) ➡️ Eiffage : 21.8 Mds € de chiffre d’affaires 78 200 salariés CA : 21,8 milliards d’euros 78 200 salariés 🌍 Présente dans plus de 50 pays, Eiffage Énergie Systèmes tisse une relation de proximité avec ses clients et offre ses expertises pointues afin de répondre au plus juste aux besoins énergétiques. Rejoindre Eiffage Énergie Systèmes c’est prendre part à des projets d’envergure et concevoir des solutions énergétiques respectueuses des Hommes et de l’environnement. C’est aussi évoluer dans un milieu professionnel d’avenir et participer à créer un avenir à taille humaine.

WM

wm.com

WM is North America's leading provider of integrated environmental solutions. We partner with our customers and communities to manage and reduce waste from collection to disposal while recovering valuable resources and creating clean, renewable energy. We are on a quest for environmental performance, a mission to maximize resource value, while minimizing – and even eliminating – environmental impact so that both our economy and our environment can thrive. WM tailors its services to meet the needs of each customer group and to ensure consistent, superior service at the local level. Headquartered in Houston, the company serves nearly 20 million municipal, commercial, industrial, and residential customers through a network of 367 collection operations, 355 transfer stations, 273 active landfill disposal sites, 16 waste-to-energy plants, 104 recycling plants, and 111 beneficial-use landfill gas projects.

EQUANS

equans.com

Equans, a Bouygues group company, is a world leader in multi-technical services with offices in 20 country hubs. This brand expresses the desire to provide the right answer [ANS] to the equations [EQU] of our customers. We design and provide customised solutions to improve our customers’ buildings, technical equipment, systems and processes and to support them in optimising their use. With nearly 90,000 highly qualified employees and a strong geographic footprint through our historical local brands, we have excellent technical know-how in design, installation, maintenance and performance services, with a unique combination of skills as in HVAC, Cooling & Fire protection, Facility Management, Digital & ICT, Electrical, Mechanical & Robotics... Equans expertise and knowledge of our customers’ businesses now place us to support them in their transitions for modernisation and sustainable development.

Veolia

veolia.com

Veolia group aims to be the benchmark company for ecological transformation. With nearly 220,000 employees worldwide, the Group designs and provides game-changing solutions that are both useful and practical for water, waste and energy management. Through its three complementary business activities, Veolia helps to develop access to resources, preserve available resources, and replenish them. In 2021, the Veolia group supplied 79 million people with drinking water and 61 million people with wastewater service, produced nearly 48 million megawatt hours of energy and treated 48 million metric tons of waste. Veolia Environnement (listed on Paris Euronext: VIE) recorded consolidated revenue of €28.508 billion in 2021. ---- Le groupe Veolia a pour ambition de devenir l’entreprise de référence de la transformation écologique. Présent sur les cinq continents avec près de 220 000 salariés, le Groupe conçoit et déploie des solutions utiles et concrètes pour la gestion de l’eau, des déchets et de l’énergie qui participent à changer radicalement la donne. Au travers de ses trois activités complémentaires, Veolia contribue à développer l’accès aux ressources, à préserver les ressources disponibles et à les renouveler. En 2021, le groupe Veolia a servi 79 millions d’habitants en eau potable et 61 millions en assainissement, produit près de 48 millions de mégawattheures et valorisé 48 millions de tonnes de déchets. Veolia Environnement (Paris Euronext : VIE) a réalisé en 2021 un chiffre d’affaires consolidé de 28,508 milliards d’euros.

Loading…

NEWS

RSK DACH-Region CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

October 10, 2025 07:00 AM

Lithuanian cybersecurity startup CBRX raises €540K pre-seed to expand across Europe

Lithuanian cybersecurity startup CBRX has secured €540,000 in a pre-seed funding round from Coinvest Capital and other partners,...

Read Article

October 07, 2025 07:00 AM

Filigran Secures $58 Million in Series C

Filigran, a Paris, France-based cybersecurity startup specializing in extended threat management, has secured $58 million in Series C...

Read Article

September 30, 2025 07:00 AM

Group-IB and Cyber Samurai join forces to enhance cyber resilience in the DACH region

Group-IB, a leading creator of cybersecurity technologies to investigate, prevent, and fight digital crime, today announced the launch of a...

Read Article

August 20, 2025 07:00 AM

Group-IB & Infraforce unite to boost DACH cyber services

Group-IB partners with Infraforce to enhance cybersecurity services for midmarket and enterprise firms in Germany and the wider DACH region.

Read Article

August 19, 2025 05:30 PM

Group-IB and Infraforce Forge Strategic Partnership to Deliver Localized Cybersecurity in Germany

Group-IB announced today a strategic partnership with Infraforce GmbH, a cybersecurity system integrator based in Marburg, Hesse, and a strategic alliance...

Read Article

August 15, 2025 07:00 AM

Cyber insurance market shows early signs of maturity

The cyber insurance market is entering a new phase of evolution and showingsigns of early market maturity, according to Arctic Wolf.

Read Article

June 10, 2025 06:42 PM

Future of Digital Trust

We identify driving forces and trends for digital trust, draw out key implications and pinpoint strategic impulses on how cybersecurity can become an enabler.

Read Article

May 27, 2025 07:00 AM

Geopolitics and Cybersecurity: Swantje Westpfahl on Building Secure Digital Ecosystems

In the DACH region and beyond, where regulatory complexity and rising threats intersect, practical cybersecurity expertise is more vital...

Read Article

May 19, 2025 07:00 AM

Mastercard’s Ria Shetty: Building Cyber Resilience in the DACH Region and Beyond

I'll be sharing how Mastercard approaches cyber resilience at scale—from how we manage systemic risk, to how we handle third-party threats, and...

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-66591

SUMMARY

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in David Lingren Media LIbrary Assistant allows Stored XSS. This issue affects Media LIbrary Assistant: from n/a through 3.39.

Published

Date2026-08-18

Updated

Date2026-08-18

RISK INFORMATION (Score: 6.5)

cvss3

Base Score: 6.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:L

Impact Score

3.7

Exploitability

2.3

REFERENCES

https://patchstack.com/database/wordpress/plugin/media-library-assistant/vulnerability/wordpress-media-library-assistant-plugin-3-39-cross-site-scripting-xss-vulnerability?_s_id=cve

CVE-2026-66589

SUMMARY

Missing Authorization vulnerability in Kings Plugins B2BKing allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects B2BKing: from n/a through 5.2.30.

Published

Date2026-08-18

Updated

Date2026-08-18

RISK INFORMATION (Score: 5.4)

cvss3

Base Score: 5.4

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:N

Impact Score

2.5

Exploitability

2.8

REFERENCES

https://patchstack.com/database/wordpress/plugin/b2bking-wholesale-for-woocommerce/vulnerability/wordpress-b2bking-plugin-5-2-30-broken-access-control-vulnerability?_s_id=cve

CVE-2026-27365

SUMMARY

Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') vulnerability in PublishPress PublishPress Series allows Stored XSS. This issue affects PublishPress Series: from n/a through 2.17.0.

Published

Date2026-08-18

Updated

Date2026-08-18

RISK INFORMATION (Score: 5.9)

cvss3

Base Score: 5.9

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

Impact Score

3.7

Exploitability

1.7

REFERENCES

https://patchstack.com/database/wordpress/plugin/organize-series/vulnerability/wordpress-publishpress-series-plugin-2-17-0-cross-site-scripting-xss-vulnerability?_s_id=cve

CVE-2026-73974

SUMMARY

linuxfabrik-lib provides Python modules for database access, caching, shell execution, and API integrations, and Linuxfabrik Monitoring Plugins uses its shared testing helper across check plugins. Prior to linuxfabrik-lib 6.1.0 and Linuxfabrik Monitoring Plugins 7.0.0, lib.lftest.test() treated the first or second element of a --test CSV argument as a filesystem path and returned the file contents as simulated standard output or standard error without path confinement. The hidden but production-accessible --test argument was accepted by sudo-authorized plugins, so an attacker controlling the nagios or icinga account could use check-plugins/deb-updates/deb-updates with its default QUERY=1 to disclose every line of a root-readable file. Approximately 22 other plugins exposed filtered content or a root file existence and readability oracle through the same helper, while check-plugins/network-bonding/network-bonding and check-plugins/openstack-swift-stat/openstack-swift-stat had direct read paths that bypassed the helper. The library fix confines fixture reads to the invoking plugin's unit-test directory and refuses unsafe anchors, and the plugin fix routes the two bypasses through that helper. These issues are fixed in linuxfabrik-lib 6.1.0 and Linuxfabrik Monitoring Plugins 7.0.0.

Published

Date2026-08-18

Updated

Date2026-08-18

RISK INFORMATION (Score: 5.5)

cvss3

Base Score: 5.5

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

1.8

REFERENCES

CVE-2026-73973

SUMMARY

Linuxfabrik Monitoring Plugins provides monitoring plugins for Icinga, Nagios, and related systems. Prior to version 7.0.0, check-plugins/logfile/logfile accepted a free-form --filename path and opened it as root when invoked through the shipped nagios or icinga sudoers allowlist, without confining the resolved path to /var/log. An attacker who controls the monitoring account can select a root-readable file such as /etc/shadow and use --warning-regex . while leaving SUPPRESS_OUTPUT false, causing each nonempty line to be collected in warn_matches and returned through lib.base.oao(). The vulnerable flow passes the expanded scan_path directly to open(), and neither real-path containment nor an allowlist protects the sink. The same fix also confines mysql-logfile and openvpn-client-list paths, allows only documented log roots, and resolves symlinks and parent-directory traversal before checking containment. This issue is fixed in version 7.0.0.

Published

Date2026-08-18

Updated

Date2026-08-18

RISK INFORMATION (Score: 5.5)

cvss3

Base Score: 5.5

Complexity: LOW

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Impact Score

3.6

Exploitability

1.8

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…