What is the official website of Saint-Gobain PAM UK ?

The official website of Saint-Gobain PAM UK is https://linktr.ee/saintgobainpamuk.

What is Saint-Gobain PAM UK's cybersecurity risk score?

Saint-Gobain PAM UK has an AI-generated cybersecurity risk score of 753 out of 1000, indicating a Fair security posture according to Rankiteo's assessment.

How many security incidents has Saint-Gobain PAM UK experienced?

According to Rankiteo, Saint-Gobain PAM UK currently holds 0 security badges, indicating that no recognized compliance certifications are currently verified for the organization.

Has Saint-Gobain PAM UK been affected by any supply chain cyber incidents ?

According to Rankiteo, Saint-Gobain PAM UK has been affected by multiple supply chain cyber incidents. The affected supply chain sources and their corresponding incident IDs are: Cisco (Incident ID: CISSAI1773859283) Cisco (Incident ID: KET5232452102025)

Does Saint-Gobain PAM UK have SOC 2 Type 1 certification ?

According to Rankiteo, Saint-Gobain PAM UK is not certified under SOC 2 Type 1.

Does Saint-Gobain PAM UK have SOC 2 Type 2 certification ?

According to Rankiteo, Saint-Gobain PAM UK does not hold a SOC 2 Type 2 certification.

Does Saint-Gobain PAM UK comply with GDPR ?

According to Rankiteo, Saint-Gobain PAM UK is not listed as GDPR compliant.

Does Saint-Gobain PAM UK have PCI DSS certification ?

According to Rankiteo, Saint-Gobain PAM UK does not currently maintain PCI DSS compliance.

Does Saint-Gobain PAM UK comply with HIPAA ?

According to Rankiteo, Saint-Gobain PAM UK is not compliant with HIPAA regulations.

Does Saint-Gobain PAM UK have ISO 27001 certification ?

According to Rankiteo,Saint-Gobain PAM UK is not certified under ISO 27001, indicating the absence of a formally recognized information security management framework.

Which industry does Saint-Gobain PAM UK operate in ?

Saint-Gobain PAM UK operates primarily in the Utilities industry.

How many employees does Saint-Gobain PAM UK have ?

Saint-Gobain PAM UK employs approximately 89 people worldwide.

Does Saint-Gobain PAM UK own any subsidiaries ?

Saint-Gobain PAM UK presently has no subsidiaries across any sectors.

How many LinkedIn followers does Saint-Gobain PAM UK have ?

Saint-Gobain PAM UK's official LinkedIn profile has approximately 4,860 followers.

What is the NAICS classification code for Saint-Gobain PAM UK ?

Saint-Gobain PAM UK is classified under the NAICS code 22, which corresponds to Utilities.

Does Saint-Gobain PAM UK have a Crunchbase profile ?

No, Saint-Gobain PAM UK does not have a profile on Crunchbase.

Does Saint-Gobain PAM UK have a LinkedIn profile ?

Yes, Saint-Gobain PAM UK maintains an official LinkedIn profile, which is actively utilized for branding and talent engagement, which can be accessed here: https://www.linkedin.com/company/saint-gobain-pam-uk.

How many cybersecurity incidents has Saint-Gobain PAM UK experienced ?

As of August 16, 2026, Rankiteo reports that Saint-Gobain PAM UK has experienced 3 cybersecurity incidents.

How many peer or competitor companies does Saint-Gobain PAM UK have ?

Saint-Gobain PAM UK has an estimated 4,480 peer or competitor companies worldwide.

What types of cybersecurity incidents has Saint-Gobain PAM UK faced ?

Incident Types: The types of cybersecurity incidents that have occurred include Vulnerability and Ransomware.

NEWRankiteo Cyber Underwriting Desktop - Score, price, and bind from your desktop

WindowsmacOSLinux

Download

Badge your company to reduce your risk score and your cyber insurance costs!

Link verified badges to your company page to build trust with insurers and customers.

Apply now and get your badge!

Internal validation & live display

Insurers and partners see a safer profile

Faster underwriting decisions

Trusted by insurers. Chosen by leaders.

Proud contributor to the Society of Actuaries.

SPU

Boost Score +25 with badge (5 left)

753

/1000

Fair

778

/1000

Fair

Saint-Gobain PAM UK Vendor Cyber Rating & Cyber Score

linktr.ee

Add Your Compliance Badge

We're a leading manufacturer of ductile iron access covers, gully gratings, and pressure pipeline systems, helping the UK's utility, highways, telecoms and infrastructure network owners reduce their whole-life costs and carbon while improving their asset durability and health and safety standards. We proudly manufacture our solutions, which enables us to not only meet but exceed the most stringent safety, quality and environmental standards. This means all of our access covers, gully gratings, and surface boxes are 100% recyclable. By providing innovative and sustainable access covers, gully gratings and pipeline systems that are right the first time, our customers enjoy quality and durable solutions that solve their problems the first

SPU A.I CyberSecurity Scoring

Scoring History

SPU

Saint-Gobain PAM UK CyberSecurity News & History

Past Incidents

Attack Types

Entity

Type

Severity

Impact

Seen

Blog Details

Supply Chain Source

Incident Details

View

Saint-Gobain

Vulnerability

100

1/2026

Cisco

CISSAI177385928...

Saint-Gobain

Ransomware

100

10/2025

Cisco

KET523245210202...

Saint-Gobain

Ransomware

100

1/2024

SAITEX177341231...

Loading…

A.I.

SPU Company Scoring based on AI Models

Cyber Incidents Likelihood 3 - 6 - 9 months

Actual

Prediction

Incident Predictions locked

Access Monitoring Plan

A.I Risk Score Likelihood 3 - 6 - 9 months

Actual

Prediction A

Prediction B

Prediction C

Prediction D

A.I. Risk Score Predictions locked

Access Monitoring Plan

Loading…

Underwriter Stats for SPU

Incidents vs Utilities Industry Avg (This Year)

No incidents recorded for Saint-Gobain PAM UK in 2026.

Incidents vs All-Companies Average (This Year)

No incidents recorded for Saint-Gobain PAM UK in 2026.

Incident Types SPU vs Utilities Industry Avg (This Year)

No incidents recorded for Saint-Gobain PAM UK in 2026.

Incident History - SPU (X = Date, Y = Severity)

Loading…

SUBSIDIARY

Saint-Gobain PAM UK Subsidiaries

SPU

Utilities

Website: https://linktr.ee/saintgobainpamuk

Company Size: 89

Saint-Gobain UK & IrelandConstruction

British GypsumBuilding Materials

PasquillWholesale Building Materials

Saint-Gobain Weber UK & IrelandWholesale Building Materials

ScotframeConstruction

CelotexConstruction

Saint-GobainWholesale Building Materials

Saint-Gobain BrasilWholesale Building Materials

CebraceGlass, Ceramics and Concrete Manufacturing

QuartzolitWholesale Building Materials

Isover BrasilConstruction

Saint-Gobain AbrasivosConstruction

JunduMining

Saint-Gobain Glass BrasilFabricação de vidro, cerâmica e concreto

Sekurit Service BrasilMotor Vehicle Parts Manufacturing

Saint-Gobain SekuritGlass, Ceramics and Concrete Manufacturing

Saint-Gobain North AmericaWholesale Building Materials

CertainTeedWholesale Building Materials

Saint-Gobain AbrasivesIndustrial Machinery Manufacturing

Saint-Gobain Performance PlasticsPlastics Manufacturing

Vetrotech Saint-Gobain North AmericaWholesale Building Materials

Saint-Gobain IndonesiaWholesale Building Materials

Saint-Gobain Group in IndiaWholesale Building Materials

Saint-Gobain India Private Limited - Glass BusinessGlass, Ceramics and Concrete Manufacturing

Saint-Gobain Research IndiaResearch Services

Saint-Gobain International IT Delivery CentreIT Services and IT Consulting

Saint-Gobain Weber IndiaConstruction

Norton Abrasives IndiaMechanical Or Industrial Engineering

Performance Plastics - Saint-Gobain IndiaPlastics Manufacturing

PLACO®Building Materials

Saint-Gobain ItaliaWholesale Building Materials

Isover FranceBuilding Materials

Saint-Gobain Eastern Mediterranean and Middle EastWholesale Building Materials

Saint-Gobain ArgentinaConstruction

Weber® ArgentinaConstruction

ISOVER® ArgentinaConstruction

Saint-Gobain PAM - Argentina, Bolivia, Chile, Paraguay y UruguayWholesale Building Materials

Saint-Gobain PAM CanalisationUtilities

Saint-Gobain PAM EspañaWholesale Building Materials

Saint-Gobain PAM ItalyRenewable Energy Semiconductor Manufacturing

Saint-Gobain PAM Nederland B.V.Wholesale

Saint-Gobain PAM Deutschland GmbHBuilding Materials

Saint-Gobain PAM BelgiumWholesale Building Materials

Saint-Gobain PAM FinlandWholesale Building Materials

Saint-Gobain PAM PolskaWholesale Building Materials

SAINT-GOBAIN PAM CZ Construction

Saint-Gobain PAM NorgeConstruction

Saint-Gobain RomaniaWholesale Building Materials

Saint-Gobain Gulf CountriesWholesale Building Materials

Saint-Gobain PolandWholesale Building Materials

Saint-Gobain Research ParisResearch Services

Saint-Gobain TürkiyeBuilding Materials

Saint-Gobain PortugalConstruction

Glassdrive PortugalMotor Vehicle Manufacturing

Leca PortugalBuilding Materials

CASA Saint-GobainConstruction

SEFPROGlass, Ceramics and Concrete Manufacturing

SEFPRO CareGlass, Ceramics and Concrete Manufacturing

Saint-Gobain Saudi Arabia, Kuwait and IraqWholesale Building Materials

Saint-Gobain Research Compiegne Research Services

PAM Building France Construction

ISONATPaper & Forest Products

Saint-Gobain SEVAMechanical Or Industrial Engineering

Saint-Gobain Research ProvenceResearch Services

Saint-Gobain FinlandWholesale Building Materials

Saint-Gobain DeutschlandWholesale Building Materials

Saint-Gobain Football CupCommerce de gros de matériaux de construction

Saint-Gobain Ecophon FranceWholesale Building Materials

Saint-Gobain EurocousticGlass, Ceramics and Concrete Manufacturing

Saint-Gobain BulgariaBuilding Materials

SAINT-GOBAIN THAILANDBuilding Materials

Saint-Gobain Česká republikaConstruction

NOVA by Saint-GobainVenture Capital and Private Equity Principals

Saint-Gobain Football CupCommerce de gros de matériaux de construction

Saint-Gobain FoundationNon-profit Organizations

Clipper Coramine (Saint-Gobain)Construction

Isover UKWholesale Building Materials

Saint-Gobain Ecophon UK and IrelandBuilding Materials

That Sounds BetterManufacturing

Roofspace SolutionsConstruction

Saint-Gobain Glass UK and IrelandConstruction

OkarnoConstruction

Gyproc Tools UKConstruction

PAM Building UKWholesale Building Materials

Saint-Gobain FormulaConstruction

Gyproc IrelandConstruction

Saint-Gobain IrelandWholesale Building Materials

Multi ComfortMatériaux de construction

Pritex LtdMotor Vehicle Parts Manufacturing

Loading…

Saint-Gobain PAM UK Similar Companies

Enel Group

cb enel.com

We are a multinational company changing the face of energy, one of the world’s leading integrated utilities. As the largest private player in producing clean energy with renewable sources we have more than 92 GW of total capacity, including around 67 GW of renewables. Distributing electricity through a network of 1.9 million kilometers to 69 million end users, being the first private network operator globally, and proudly bringing energy to approximately 54 million homes and businesses. People are the heart of our energy: our Group is made up of more than 60,000 people operating in 28 countries and our work is based on our values of Trust, Innovation, Proactivity, Flexibility and Respect. Diversity and inclusion play a key role for us, leading to our being recognized in all three of the most prestigious indices and rankings that assess corporate performance on gender diversity at the workplace and beyond: the Refinitiv Diversity Inclusion Index, the Bloomberg Gender Equality Index, and the Equileap Gender Equality Global Report & Ranking. Let’s shape the energy of the future together.

Constellation

constellationenergy.com

Constellation Energy Corporation (Nasdaq: CEG), a Fortune 200 company headquartered in Baltimore, is the nation’s largest producer of reliable, emissions-free energy and a leading energy supplier to businesses, homes and public sector customers nationwide, including three-fourths of Fortune 100 companies. With annual output that is nearly 90% carbon-free, our hydro, wind and solar facilities paired with the nation’s largest nuclear fleet have the generating capacity to power the equivalent of 16 million homes, providing about 10% of the nation’s clean energy. We are committed to investing in innovative technologies to drive the transition to a reliable, sustainable and secure energy future. https://www.constellationenergy.com/our-company/what-we-stand-for/our-purpose.htm Learn more at www.constellationenergy.com or on Twitter at @ConstellationEG. Subscribe to our blog at www.constellation.com/subscribe

Southern Company

southerncompany.com

Together with our subsidiaries, we deliver clean, safe, reliable and affordable energy to our 9 million customers. Our focus is doing so with service excellence. That means we are leaders who take action to meet our customers’ and communities’ needs while advancing our commitment to net zero emissions by 2050. We create community value through energy, social, economic, and environmental progress. We do this through electric operating companies in three states and natural gas distribution companies in four. Our family of companies draw on diverse energy sources to create the best mix for our service areas, including electricity, natural gas, solar power, carbon-free nuclear, and other sustainable sources. We leverage our leading distributed energy infrastructure company and other innovative technology to better serve every customer. Our competitive, national generation company serves wholesale customers, and our family includes a fiber optics network, and telecommunications services.

Westinghouse Electric Company

westinghousenuclear.com

Westinghouse Electric Company is the world's leading supplier of safe and innovative nuclear technology. We provide our utility customers around the world with the most reliable, dependable nuclear power plants, nuclear fuel, plant automation and operating plant products and services. We are driven by our powerful history and experience, ground-breaking ideas and our focus on safety and sustainability. At Westinghouse, we are focused on nuclear energy technology. Our goal is simple - to provide solutions to our customers to keep their plants safe, reliable and efficient. Helping our customers support the needs of their customers is why we are committed to quality, safety and innovation at every turn.

American Electric Power

AEP.com

Our team at American Electric Power is committed to improving our customers' lives with reliable, affordable power. We are investing $72 billion from 2025 through 2029 to enhance service for customers and support the growing energy needs of our communities. Our more than 17,000 employees operate and maintain the nation's largest electric transmission system with 40,000 line miles, along with more than 225,000 miles of distribution lines to deliver energy to 5.6 million customers in 11 states. AEP also is one of the nation's largest electricity producers with approximately 29,000 megawatts of diverse generating capacity. We are focused on safety and operational excellence, creating value for our stakeholders and bringing opportunity to our service territory through economic development and community engagement. Our family of companies includes AEP Ohio, AEP Texas, Appalachian Power (in Virginia and West Virginia), AEP Appalachian Power (in Tennessee), Indiana Michigan Power, Kentucky Power, Public Service Company of Oklahoma, and Southwestern Electric Power Company (in Arkansas, Louisiana, east Texas and the Texas Panhandle). AEP also owns AEP Energy, which provides innovative competitive energy solutions nationwide. AEP is headquartered in Columbus, Ohio. For more information, visit aep.com.

National Grid

nationalgrid.com

We power the lives of millions of people across Britain, New York and Massachusetts, moving energy from where it’s made to the communities that need it, every single day. In the UK, people connect with the electricity they need to live, work, build and play through our cables and wires. And in the US, we deliver electricity and gas to families and businesses in the states we call home. We're leading the way to a new energy era, building and operating the next generation of networks to unleash the energy needed to meet accelerating demand. With our very own venture capital fund, we’re challenging ourselves and our sector to work faster, smarter, and with an unrelenting focus on solving the challenges of the day for our customers. Our 30,000 employees live and work in the communities we’re proud to serve. Creating positive legacies matters to us; we do the right thing. And through our work, we’re creating enduring benefits for a better world where people can thrive.

Entergy

cb entergy.com

At Entergy (NYSE: ETR), we power life. More than 100 years ago, our founder Harvey Couch started this company with a handshake, some sawdust and a vision. Couch wanted to bring safe, affordable, reliable energy to the Middle South – energy that would power the lives of people and communities. Today, we own and operate one of the cleanest large-scale U.S. power generating fleets including more than five gigawatts of carbon-free nuclear capacity, a fleet of highly efficient gas resources, and a fast-growing portfolio of renewable resources. The nearly 12,000 men and women of Entergy deliver electricity and gas services to 3 million utility customers in Arkansas, Louisiana, Mississippi and Texas, generating annual GAAP revenues of $13.8 billion. Headquartered in New Orleans, we continue to play a driving role in the economic growth of the Gulf South. Our work matters. That’s been true for more than 100 years. And as we look to the next century, we remember the constant that bridges our past and future: We Power Life. Fast Facts: Entergy currently has a 90% rating on the 2022 Corporate Equality Index released by the Human Rights Campaign Foundation. This score places Entergy among the top energy and utility companies in the survey. With roots in the Gulf South region for more than a century, Entergy is a recognized leader in corporate citizenship, delivering more than $100 million in economic benefits to local communities through philanthropy and advocacy efforts annually over the last several years. With a total of 44 awards from EEI for its restoration and mutual-assistance work, Entergy remains the only utility company to have won either EEI's Recovery or Assistance Award, or both, every year since the awards began in 1998.

Duke Energy Corporation

cb duke-energy.com

Duke Energy, a Fortune 150 company headquartered in Charlotte, N.C., is one of America’s largest energy holding companies. The company’s electric utilities serve 8.4 million customers in North Carolina, South Carolina, Florida, Indiana, Ohio and Kentucky, and collectively own 54,800 megawatts of energy capacity. Its natural gas utilities serve 1.7 million customers in North Carolina, South Carolina, Tennessee, Ohio and Kentucky. Duke Energy is executing an ambitious clean energy transition, keeping reliability, affordability and accessibility at the forefront as the company works toward net-zero methane emissions from its natural gas business by 2030 and net-zero carbon emissions from electricity generation by 2050. The company is investing in major electric grid upgrades and cleaner generation, including expanded energy storage, renewables, natural gas and nuclear. Our team is available Monday to Friday from 8 a.m. to 5 p.m. EST. If you suspect an emergency, please call 911.

K-Electric

cb ke.com.pk

KE (formerly Karachi Electric Supply Company) is the only vertically integrated power utility in Pakistan that generates, transmits and distributes electricity to industrial, commercial, agricultural and residential consumers of Karachi (and its outskirts), a metropolis of 20 million people - Pakistan’s largest city. K-Electric (KE) is a public listed company incorporated in Pakistan in 1913 as KESC. Privatized in 2005 KE is the only vertically integrated utility in Pakistan supplying electricity within a 6500 km square territory including Karachi and its adjoining areas. The majority shares (66.4%) of the company are listed in the PSX owned by KES Power, a consortium of investors including Aljomaih Power Limited of Saudi Arabia, National Industries Group (Holding), Kuwait, and the Infrastructure and Growth Capital Fund (IGCF). The Government of Pakistan is also a minority shareholder (24.36%) in the company. KE is one of the county’s largest employers: with a workforce of around 11,000 employees. It is one of the only 12 companies in Pakistan’s industrial sector that have been included in the esteemed list of ‘Approved, Training Employer' by the ICAEW and is also the recipient of the Platinum Employer Status by the ACCA. KE secured a level ‘A’ rating from the Global Reporting Initiative (GRI) for its Integrated Sustainability Report for the year 2012. This makes K-Electric the first power utility in Pakistan to achieve the level ‘A’ rating for an integrated report. Visit our official Facebook and Twitter handles for 24/7 support.

Loading…

NEWS

Saint-Gobain PAM UK CyberSecurity News

Latest updates, reports, and threat intel affecting the global network.

March 11, 2024 07:00 AM

Daily Manufacturing News Digest – the industry stories you should be aware of today

Each day The Manufacturer compiles the top manufacturing news stories from around the web into this easily digestible daily update.

Read Article

Loading…

CVE

Latest

Global CVEs (Not Company-Specific)

CVE-2026-19917

SUMMARY

A flaw has been found in code-projects Online Food Order System 1.0. The impacted element is an unknown function of the file delete_food_items1.php. Executing a manipulation of the argument checkbox can lead to sql injection. The attack can be executed remotely. The exploit has been published and may be used.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 6.3)

cvss2

Base Score: 6.5

Complexity: LOW

AV:N/AC:L/Au:S/C:P/I:P/A:P

cvss3

Base Score: 6.3

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:L

cvss4

Base Score: 2.1

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:L/VI:L/VA:L/SC:N/SI:N/SA:N/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.4

Exploitability

2.8

REFERENCES

CVE-2026-74767

SUMMARY

Pandora contains a denial-of-service vulnerability in its handling of DAA (Direct Access Archive) files. When extracting the internal ISO image from a DAA archive, compressed chunks were decompressed using zlib.decompress() without enforcing a limit on the resulting uncompressed data. An attacker able to submit a crafted DAA file containing highly compressed data could cause Pandora to decompress a relatively small input into a very large amount of data in memory. Because the decompressed chunks are accumulated to construct the internal ISO image, this could result in excessive memory consumption and potentially CPU exhaustion, causing the extraction worker to become unresponsive, terminate, or affect the availability of the Pandora service. The patch introduces bounded decompression using decompressobj().decompress() with max_extracted_filesize, verifies the cumulative size of decompressed chunks, and raises a dedicated ZipBomb exception when the configured limit is exceeded. Pandora then aborts extraction and reports the file as too large.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:N/VI:N/VA:H/SC:N/SI:N/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/f4294a873f86fbf2569c289e329fff2f52ca50c9

CVE-2026-74764

SUMMARY

Pandora contains a path traversal vulnerability in its TAR archive extraction functionality. When processing a submitted TAR archive, the extractor passed archive member names directly to Python's tarfile.TarFile.extract() without applying an extraction filter. An attacker able to submit a specially crafted TAR archive containing malicious member paths, such as paths using ../ sequences or absolute paths, could cause extracted files to be written outside the intended extraction directory. This may allow the attacker to overwrite files accessible to the Pandora worker process and could potentially result in application compromise, arbitrary code execution, or denial of service depending on the files targeted and the privileges of the Pandora process. The vulnerability is corrected by using Python's filter='data' extraction filter, which rejects or sanitizes dangerous TAR members, including paths that escape the destination directory and unsafe link targets. The weakness corresponds to MITRE's general path traversal category, which includes archive extraction cases where attacker-controlled filenames cause files to be written outside the intended directory.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: )

cvss4

Base Score: 10.0

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:L/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

Exploitability

REFERENCES

https://github.com/pandora-analysis/pandora/commit/186b58d41e04248a154d274fffb5813e7fa2012e

CVE-2026-73055

SUMMARY

Shescape before 2.1.15 (and 3.0.0 before 3.0.2) fails to properly escape tilde (~) characters in assignment contexts on Unix systems where the shell is explicitly configured to "sh" or true and /bin/sh points to BusyBox. Using the escape and escapeAll APIs with untrusted input in an assignment prefixed to a command, an attacker can inject a tilde payload to disclose the user's home directory location and, depending on usage, alter the location on which a command operates.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 4.8)

cvss3

Base Score: 4.8

Complexity: HIGH

CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:L/I:L/A:N

cvss4

Base Score: 9.3

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

2.5

Exploitability

2.2

REFERENCES

CVE-2026-73054

SUMMARY

SiYuan versions before v3.7.4 contain an authentication bypass vulnerability in the WebSocket endpoint caused by differential parsing of query parameters between authentication exemption and session quarantine checks. Unauthenticated attackers can craft a malicious WebSocket URI with duplicated query parameters to bypass access auth code validation and receive the live kernel event stream including document identifiers, titles, and operation logs.

Published

Date2026-08-15

Updated

Date2026-08-15

RISK INFORMATION (Score: 7.5)

cvss3

Base Score: 7.5

Complexity: LOW

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

cvss4

Base Score: 8.7

Complexity: LOW

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:N/VA:N/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X

Impact Score

3.6

Exploitability

3.9

REFERENCES

Loading…

API

Access Data Using Our API

Get company history

curl -i -X GET 'https://api.rankiteo.com/underwriter-getcompany-history?
linkedin_id=axa' -H 'apikey: YOUR_API_KEY_HERE'

Try It API Documentation Rapid

MEASURE

What Do We Measure ?

Incident

Finding

Grade

Digital Assets

Every week, Rankiteo analyzes billions of signals to give organizations a sharper, faster view of emerging risks. With deeper, more actionable intelligence at their fingertips, security teams can outpace threat actors, respond instantly to Zero-Day attacks, and dramatically shrink their risk exposure window.

These are some of the factors we use to calculate the overall score:

Network SecurityIdentify exposed access points, detect misconfigured SSL certificates, and uncover vulnerabilities across the network infrastructure.

SBOM (Software Bill of Materials)Gain visibility into the software components used within an organization to detect vulnerabilities, manage risk, and ensure supply chain security.

CMDB (Configuration Management Database)Monitor and manage all IT assets and their configurations to ensure accurate, real-time visibility across the company's technology environment.

Threat IntelligenceLeverage real-time insights on active threats, malware campaigns, and emerging vulnerabilities to proactively defend against evolving cyberattacks.

Rankiteo

By Rankiteo

★ ★ ★ ★ ★

View on G2.com

Rankiteo is a unified scoring and risk platform that analyzes billions of signals weekly to help organizations gain faster, more actionable insights into emerging threats. Empowering teams to outpace adversaries and reduce exposure.

View latest plans →View all security reports →

MILESTONEG

Users
Love Us

Loading…